[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.584329] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 19.734091] random: sshd: uninitialized urandom read (32 bytes read) [ 20.078122] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.948235] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. [ 26.352509] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/19 09:50:29 fuzzer started 2018/05/19 09:50:30 dialing manager at 10.128.0.26:33769 [ 53.067470] can: request_module (can-proto-0) failed. [ 53.076507] can: request_module (can-proto-0) failed. 2018/05/19 09:50:58 kcov=true, comps=true 2018/05/19 09:51:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x400800000000011, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/19 09:51:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000540)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="9e8d"]}, 0x18}, 0x1}, 0x0) 2018/05/19 09:51:02 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x0) 2018/05/19 09:51:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/05/19 09:51:02 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x541b, 0x707000) 2018/05/19 09:51:02 executing program 4: socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000040)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x402, 0x0, 0x1}, 0x2ac4}, 0x1}, 0x0) 2018/05/19 09:51:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x0) 2018/05/19 09:51:02 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"00040000000000b0fffffc0105000001", 0x1000020100f}) [ 59.467439] IPVS: ftp: loaded support on port[0] = 21 [ 59.470982] IPVS: ftp: loaded support on port[0] = 21 [ 59.481645] IPVS: ftp: loaded support on port[0] = 21 [ 59.482495] IPVS: ftp: loaded support on port[0] = 21 [ 59.513620] IPVS: ftp: loaded support on port[0] = 21 [ 59.523577] IPVS: ftp: loaded support on port[0] = 21 [ 59.545079] IPVS: ftp: loaded support on port[0] = 21 [ 59.555988] IPVS: ftp: loaded support on port[0] = 21 [ 61.567524] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.574060] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.595183] device bridge_slave_0 entered promiscuous mode [ 61.614981] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.621377] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.657279] device bridge_slave_0 entered promiscuous mode [ 61.678240] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.684634] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.701555] device bridge_slave_0 entered promiscuous mode [ 61.717467] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.723831] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.731498] device bridge_slave_0 entered promiscuous mode [ 61.740096] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.746470] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.759055] device bridge_slave_1 entered promiscuous mode [ 61.768218] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.774592] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.794828] device bridge_slave_1 entered promiscuous mode [ 61.809261] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.815637] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.823530] device bridge_slave_0 entered promiscuous mode [ 61.832397] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.838785] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.854321] device bridge_slave_1 entered promiscuous mode [ 61.862425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.871293] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.877674] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.886853] device bridge_slave_0 entered promiscuous mode [ 61.894447] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.900971] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.919238] device bridge_slave_0 entered promiscuous mode [ 61.928093] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.934473] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.945127] device bridge_slave_1 entered promiscuous mode [ 61.952923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.964369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.973205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.980583] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.986950] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.005927] device bridge_slave_0 entered promiscuous mode [ 62.028986] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.035396] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.050434] device bridge_slave_1 entered promiscuous mode [ 62.059800] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.066158] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.075743] device bridge_slave_1 entered promiscuous mode [ 62.084697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.092082] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.098482] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.111043] device bridge_slave_1 entered promiscuous mode [ 62.124040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.144440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.151690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.159104] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.165474] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.197359] device bridge_slave_1 entered promiscuous mode [ 62.222117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.284335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.306610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.318615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.330920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.350641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.378471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.417360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.490541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.517365] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.526511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.580156] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.689669] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.712484] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.722718] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.764196] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.798162] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.809665] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.839453] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.855563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.897224] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.907105] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.951332] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.057164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.122877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.145286] team0: Port device team_slave_0 added [ 63.166279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.173177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.193740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.201924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.228658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.244369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.351906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.359094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.374743] team0: Port device team_slave_1 added [ 63.389117] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.403134] team0: Port device team_slave_0 added [ 63.408571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.445202] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.473610] team0: Port device team_slave_0 added [ 63.513969] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.532874] team0: Port device team_slave_0 added [ 63.539739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.548856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.564602] team0: Port device team_slave_0 added [ 63.574713] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.589268] team0: Port device team_slave_0 added [ 63.596820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.610809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.625121] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.632702] team0: Port device team_slave_1 added [ 63.652742] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.659995] team0: Port device team_slave_0 added [ 63.667833] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.682733] team0: Port device team_slave_1 added [ 63.694391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.712245] team0: Port device team_slave_1 added [ 63.719788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.733065] team0: Port device team_slave_1 added [ 63.743259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.752249] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.760468] team0: Port device team_slave_1 added [ 63.768355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.782281] team0: Port device team_slave_1 added [ 63.795678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.806640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.827777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.839171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.847502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.859188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.866843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.874610] team0: Port device team_slave_0 added [ 63.882613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.909721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.928520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.949784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.964986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.982159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.989969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.001038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.013996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.033815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.047712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.076633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.091230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.103494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.111551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.119371] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.126563] team0: Port device team_slave_1 added [ 64.137232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.146268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.154723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.166780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.194365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.204885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.219868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.228707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.236453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.244532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.251364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.259327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.267399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.274518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.283723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.298696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.309519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.319935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.326985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.341173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.356531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.371547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.381138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.388983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.397696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.407853] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.417193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.424488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.431487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.460751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.483420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.502941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.510765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.518690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.526381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.534150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.542931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.550448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.559601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.573706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.580749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.588695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.609037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.619699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.649782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.676978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.712406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.738062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.774896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.782670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.794979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.833912] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.840428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.847401] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.853761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.887438] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.896367] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.902735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.909377] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.915733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.923407] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.936528] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.942912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.949557] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.955926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.964187] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.975300] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.981676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.988325] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.994698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.024655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.037501] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.043861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.050506] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.056881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.072503] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.081469] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.087831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.094463] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.100825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.112751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.129730] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.136096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.142737] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.149099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.161380] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.175708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.195231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.234434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.260435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.271927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.279596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.286832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.300054] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.306422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.313110] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.319463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.331234] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.233108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.951065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.979540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.034283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.103005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.162226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.191280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.354708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.370558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.420439] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.439966] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.524475] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.628635] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.645141] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.669205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.802072] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.849224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.920073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.926587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.936610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.959467] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.968794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.991579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.028436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.034716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.047442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.063730] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.072476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.093258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.136336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.152286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.176175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.193562] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.204202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.235464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.359971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.366547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.377844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.396500] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 72.407541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.439618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.516445] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.532644] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.596584] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.611659] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.639287] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.652485] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.875046] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.909115] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/19 09:51:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x0) 2018/05/19 09:51:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/05/19 09:51:18 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x541b, 0x707000) 2018/05/19 09:51:18 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x0) 2018/05/19 09:51:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/05/19 09:51:18 executing program 4: socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000040)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x402, 0x0, 0x1}, 0x2ac4}, 0x1}, 0x0) 2018/05/19 09:51:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x0) 2018/05/19 09:51:18 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x0) 2018/05/19 09:51:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x400800000000011, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/19 09:51:19 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x0) 2018/05/19 09:51:19 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x541b, 0x707000) 2018/05/19 09:51:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/05/19 09:51:19 executing program 4: socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000040)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x402, 0x0, 0x1}, 0x2ac4}, 0x1}, 0x0) 2018/05/19 09:51:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000540)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="9e8d"]}, 0x18}, 0x1}, 0x0) 2018/05/19 09:51:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x0) 2018/05/19 09:51:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x0) 2018/05/19 09:51:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000540)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="9e8d"]}, 0x18}, 0x1}, 0x0) 2018/05/19 09:51:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read(r0, &(0x7f0000000240)=""/206, 0xce) 2018/05/19 09:51:19 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x541b, 0x707000) 2018/05/19 09:51:19 executing program 4: socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000040)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x402, 0x0, 0x1}, 0x2ac4}, 0x1}, 0x0) 2018/05/19 09:51:19 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x0) 2018/05/19 09:51:19 executing program 1: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x400800000000011, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/19 09:51:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000540)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="9e8d"]}, 0x18}, 0x1}, 0x0) 2018/05/19 09:51:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 2018/05/19 09:51:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x0) 2018/05/19 09:51:19 executing program 3: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@dmask={'dmask', 0x3d}, 0x2c}]}) 2018/05/19 09:51:19 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "055679", 0x10, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x2], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xffffff89, 0x0, 0x0, "d298dc", 0x0, "7f5147"}}}}}}}, &(0x7f00000000c0)) 2018/05/19 09:51:19 executing program 1: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read(r0, &(0x7f0000000240)=""/206, 0xce) [ 76.352856] ntfs: (device loop3): parse_options(): The dmask option requires an argument. 2018/05/19 09:51:19 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "055679", 0x10, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x2], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xffffff89, 0x0, 0x0, "d298dc", 0x0, "7f5147"}}}}}}}, &(0x7f00000000c0)) 2018/05/19 09:51:19 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read(r0, &(0x7f0000000240)=""/206, 0xce) 2018/05/19 09:51:19 executing program 1: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) [ 76.435158] ntfs: (device loop3): parse_options(): The dmask option requires an argument. 2018/05/19 09:51:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x400800000000011, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/19 09:51:19 executing program 7: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:19 executing program 3: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@dmask={'dmask', 0x3d}, 0x2c}]}) 2018/05/19 09:51:19 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "055679", 0x10, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x2], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xffffff89, 0x0, 0x0, "d298dc", 0x0, "7f5147"}}}}}}}, &(0x7f00000000c0)) [ 76.670320] ntfs: (device loop3): parse_options(): The dmask option requires an argument. 2018/05/19 09:51:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 2018/05/19 09:51:19 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read(r0, &(0x7f0000000240)=""/206, 0xce) 2018/05/19 09:51:19 executing program 7: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:19 executing program 1: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:19 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "055679", 0x10, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x2], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xffffff89, 0x0, 0x0, "d298dc", 0x0, "7f5147"}}}}}}}, &(0x7f00000000c0)) 2018/05/19 09:51:19 executing program 3: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@dmask={'dmask', 0x3d}, 0x2c}]}) 2018/05/19 09:51:19 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000700), 0x4) [ 76.816675] ntfs: (device loop3): parse_options(): The dmask option requires an argument. 2018/05/19 09:51:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 2018/05/19 09:51:20 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:20 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{&(0x7f0000000400)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)}}], 0x2, 0x10000, &(0x7f00000006c0)={0x0, r1+10000000}) 2018/05/19 09:51:20 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000700), 0x4) 2018/05/19 09:51:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0xfed3, 0x0) 2018/05/19 09:51:20 executing program 7: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rdma_cm(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup3(r1, r0, 0x0) 2018/05/19 09:51:20 executing program 3: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@dmask={'dmask', 0x3d}, 0x2c}]}) 2018/05/19 09:51:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_writeback='data=writeback', 0x2c}, {@data_err_abort='data_err=abort', 0x2c}]}) [ 76.994343] EXT4-fs (loop5): bad geometry: first data block 1 is beyond end of filesystem (0) 2018/05/19 09:51:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="4c0000001200ff00fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) [ 77.044976] ntfs: (device loop3): parse_options(): The dmask option requires an argument. [ 77.066872] EXT4-fs (loop5): bad geometry: first data block 1 is beyond end of filesystem (0) 2018/05/19 09:51:20 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000700), 0x4) 2018/05/19 09:51:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0xfed3, 0x0) 2018/05/19 09:51:20 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{&(0x7f0000000400)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)}}], 0x2, 0x10000, &(0x7f00000006c0)={0x0, r1+10000000}) [ 77.111394] netlink: 44 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/19 09:51:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 2018/05/19 09:51:20 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{&(0x7f0000000400)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)}}], 0x2, 0x10000, &(0x7f00000006c0)={0x0, r1+10000000}) 2018/05/19 09:51:20 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) close(r2) close(r1) 2018/05/19 09:51:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_writeback='data=writeback', 0x2c}, {@data_err_abort='data_err=abort', 0x2c}]}) 2018/05/19 09:51:20 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000700), 0x4) [ 77.372596] EXT4-fs (loop5): bad geometry: first data block 1 is beyond end of filesystem (0) 2018/05/19 09:51:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0xfed3, 0x0) 2018/05/19 09:51:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="4c0000001200ff00fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 2018/05/19 09:51:21 executing program 3: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x53, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="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") 2018/05/19 09:51:21 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{&(0x7f0000000400)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)}}], 0x2, 0x10000, &(0x7f00000006c0)={0x0, r1+10000000}) 2018/05/19 09:51:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d}, 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) 2018/05/19 09:51:21 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(0x0, r1, 0x0) 2018/05/19 09:51:21 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) close(r2) close(r1) 2018/05/19 09:51:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_writeback='data=writeback', 0x2c}, {@data_err_abort='data_err=abort', 0x2c}]}) 2018/05/19 09:51:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0xfed3, 0x0) 2018/05/19 09:51:21 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) close(r2) close(r1) [ 78.195102] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) [ 78.197701] netlink: 44 bytes leftover after parsing attributes in process `syz-executor2'. [ 78.215860] EXT4-fs (loop5): bad geometry: first data block 1 is beyond end of filesystem (0) 2018/05/19 09:51:21 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d}, 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) 2018/05/19 09:51:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_writeback='data=writeback', 0x2c}, {@data_err_abort='data_err=abort', 0x2c}]}) 2018/05/19 09:51:21 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(0x0, r1, 0x0) 2018/05/19 09:51:21 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d}, 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) 2018/05/19 09:51:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="4c0000001200ff00fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) [ 78.418875] EXT4-fs (loop5): bad geometry: first data block 1 is beyond end of filesystem (0) 2018/05/19 09:51:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:21 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(0x0, r1, 0x0) 2018/05/19 09:51:21 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d}, 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) [ 78.494311] netlink: 44 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/19 09:51:22 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) close(r2) close(r1) 2018/05/19 09:51:22 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="4c0000001200ff00fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) [ 79.124539] netlink: 44 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/19 09:51:23 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) close(r2) close(r1) 2018/05/19 09:51:23 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) close(r2) close(r1) 2018/05/19 09:51:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:23 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(0x0, r1, 0x0) 2018/05/19 09:51:23 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:23 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:51:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:23 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 79.988894] random: crng init done 2018/05/19 09:51:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") open(&(0x7f0000000040)='..', 0x4000, 0x0) 2018/05/19 09:51:23 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x8) ioctl$fiemap(r1, 0x401c5820, &(0x7f00000000c0)=ANY=[]) 2018/05/19 09:51:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x10000) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 80.055460] syz-executor0 (6953) used greatest stack depth: 15736 bytes left 2018/05/19 09:51:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") open(&(0x7f0000000040)='..', 0x4000, 0x0) [ 80.100409] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) 2018/05/19 09:51:23 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:51:23 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x8) ioctl$fiemap(r1, 0x401c5820, &(0x7f00000000c0)=ANY=[]) 2018/05/19 09:51:24 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) close(r2) close(r1) 2018/05/19 09:51:24 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x8) ioctl$fiemap(r1, 0x401c5820, &(0x7f00000000c0)=ANY=[]) 2018/05/19 09:51:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") open(&(0x7f0000000040)='..', 0x4000, 0x0) 2018/05/19 09:51:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:51:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:24 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:51:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x10000) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") open(&(0x7f0000000040)='..', 0x4000, 0x0) 2018/05/19 09:51:24 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x8) ioctl$fiemap(r1, 0x401c5820, &(0x7f00000000c0)=ANY=[]) 2018/05/19 09:51:24 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth1_to_bond\x00', &(0x7f0000001480)=@ethtool_ringparam={0x11}}) 2018/05/19 09:51:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000540), &(0x7f00003a3fff)}, 0x20) 2018/05/19 09:51:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:51:24 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:51:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, &(0x7f00000000c0), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) 2018/05/19 09:51:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 2018/05/19 09:51:25 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:51:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, &(0x7f00000000c0), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) 2018/05/19 09:51:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x10000) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:25 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth1_to_bond\x00', &(0x7f0000001480)=@ethtool_ringparam={0x11}}) 2018/05/19 09:51:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x1}, 0x1c1) 2018/05/19 09:51:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000540), &(0x7f00003a3fff)}, 0x20) 2018/05/19 09:51:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 2018/05/19 09:51:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="6567f466b80f0000000f23d00f21f86635200000060f23f80f01d1b87d078ee026f365f4f222ad00000f20d86635080000000f22d8672e660f2093f6ff0f2255", 0x40}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1fff) 2018/05/19 09:51:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 2018/05/19 09:51:25 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth1_to_bond\x00', &(0x7f0000001480)=@ethtool_ringparam={0x11}}) 2018/05/19 09:51:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000540), &(0x7f00003a3fff)}, 0x20) 2018/05/19 09:51:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x1}, 0x1c1) 2018/05/19 09:51:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 2018/05/19 09:51:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, &(0x7f00000000c0), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) 2018/05/19 09:51:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="6567f466b80f0000000f23d00f21f86635200000060f23f80f01d1b87d078ee026f365f4f222ad00000f20d86635080000000f22d8672e660f2093f6ff0f2255", 0x40}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1fff) 2018/05/19 09:51:26 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth1_to_bond\x00', &(0x7f0000001480)=@ethtool_ringparam={0x11}}) 2018/05/19 09:51:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000540), &(0x7f00003a3fff)}, 0x20) 2018/05/19 09:51:26 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000100", 0x24) 2018/05/19 09:51:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x1}, 0x1c1) 2018/05/19 09:51:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x10000) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:26 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 2018/05/19 09:51:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x1}, 0x1c1) 2018/05/19 09:51:26 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000100", 0x24) 2018/05/19 09:51:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 2018/05/19 09:51:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="67018ac5e813406e25f0d3aac5054a1db9bd4c4f70f2cb418b19738a4ebe3aea9ed1887d7e2b9c618624c3893a35d494ccc86146cea40d3d2514417f7ce08e3c681750b6502d543a3f55f2866e5eb47af5272ca497f2a0db728f73de1b237992b98b9d26e8cc922015daae93989eae35a5210bed7d8bd7d50a3ddd45f3a83fdd7d08499fe2713ff20f4e142f9f544d90c78de329e10d95271c7432fa6be8863e7d13e4141ebfaf679af756d96a1f405ae56a186ef4619d4dcc3a73d5a385d9efaa8d49638f4c57cf584613318fdb8f1a1e442ed8cd121b383e1f7f2ba917b3158f66538f2eb3fbecd5f0a5a15db22547b99ecb42b3380f5c1c345f3f776d3a0d0ae6801153bbc011429ead83c8417524293d056581e79d51a75bdff2180aed45f69a271036f2185dcb3e3f6c845d8906c97570ed1835c8f0a597d74b86513a50f546dac788c15cbb41d0d293309eccd6192e8c9a77fd93f9b802573ae5fe131268239e2086c8526672149fb2caa5a8518c378d260538c237b4d5f2d3cfe5618608224137b587c3c195bab4077ca14226e73b8eee6266ee50c82948b1edad9317d9cec69d47e8694a6ec8d1ad20b10e14ef1251566ecab465c22364d5e5d3152189ee900d9037c6e37f8bc57aaffde9a2258a3cac9dc68abf46f829df8657d2381d8c7ca7432bfc9c285ce29cc73cd61aedeb3f55a1095b339eabb5f15911ec2a665a0bf5ded0e1dde6751b878e954b0e47f6eb4ea6f93b4eb8dc29e82632cda1905f6955143c39c934d5738143ffb7b5bc643511b27e75b09561ec15043a2a1c5e80116c61f11e9bc96e8599dbd7775940057570958c906ff829c9b69b336c34d8a4f475aeb76bb8e98cad1d3f301bcdd0b4720e125109de7fe59fed71058f472315b50c52a19a485b775e2c08a47a2d4e696910dbc3c5e9d5d63931e80bddaa3d38f1de1cb7a12da5bbb0b60fa227893f05735e8fe8c3dcd9e1a6ecd19944c8a08c393a2301eaca4071b7fd739309ba4295db0d99680dd0215dd0b922eedb66aa6e2a1e1dddb99a0d5a28c834d3e899c500b55db5d95219105b574e844e7b542dd1ff5e155070f52bf4842011996bd2957fc8ff577c1ead185a4bbf0d6784f69c91597b9afdc99394cc0db9c4b54debe6bf3736672f7478e9b3011d99f615471b10f364c4ad6a4ba13a0249c82a81e4ba2ac2c5a5704d3ad029adfc0716e4813fc017c82b559ed20ea6ac92f811579671dd0a765c4b081213c87fc5272d761267f8c4a9012baed51cbf51244bfb0b59bc9303cd411b923fe032c3e57d42f570742830f2d1387e06b9a76a69cfb5e2f7d9cad268dcafb05a30fdf596b423b590addd26f926e24e35f17994719279ead1002eb23e72e6389f9f324487e2d41911dc83cd91955c29a28ad6654d5a6514c3a1385c8c850c2d82c3550c1675c8eac1688b9dfd461f24c1e1e10877ff93626a677e286d28c9b6331990c96af426baf5c1258d59371d5f9e38ded4fabcf609a980d83df64225bd108cbeac941097ed6a7763667b6264cc9dd5cc50c9596f1002325b66946d20e108f6562c5b5ab454e83fc620a196864e34b0ebb03b9153242c772b0fbec266a357af378ed3c5c5b2e8f5db321eb296153de8874ac2c5dee232769d09772876db433609d4565e75176ad9cd0065bf5fb65bae65cc9ebcf59c3575e998c67e61a7772f825e059d3ce9ba9bce40801f47689ae6dd1b35c6d0f0854420eb384b30c0ce1b9067057722c10ee7b53a05e00d2f9417fe5e4d2b5d02687b4593a8545b45ff79c3074d59381052fb931779442639d33d740c1bb99d5229c7dcea2de509fcfea388ceda11445c02f7a0b94c6f1394f7a5d18d3dfdfde1fc8a9c3326c244ed81fc0997f7e8985db317aaf75bd4fbbfca6ab586e067f831b36b2dc01c55b47dddf82c1ad517d5c43dd431b97be5de160dfd7b763df5c686ea6708c5771eb433668efcabbea31549c0bed1a6aabb8bfa3823bdf0538812b199a72d12994e270ffef1e9a4e3b8da25fe436901ce2592c27c7e39529c80", 0x5ad, 0x8084, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r1 = socket(0x2000000011, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="6567f466b80f0000000f23d00f21f86635200000060f23f80f01d1b87d078ee026f365f4f222ad00000f20d86635080000000f22d8672e660f2093f6ff0f2255", 0x40}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1fff) 2018/05/19 09:51:27 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000100", 0x24) 2018/05/19 09:51:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 2018/05/19 09:51:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, &(0x7f00000000c0), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) 2018/05/19 09:51:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 09:51:27 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 2018/05/19 09:51:27 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000100", 0x24) 2018/05/19 09:51:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="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", 0x5ad, 0x8084, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r1 = socket(0x2000000011, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 2018/05/19 09:51:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="6567f466b80f0000000f23d00f21f86635200000060f23f80f01d1b87d078ee026f365f4f222ad00000f20d86635080000000f22d8672e660f2093f6ff0f2255", 0x40}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1fff) 2018/05/19 09:51:27 executing program 3: capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x84, &(0x7f0000000340), &(0x7f0000000400)=""/132}, 0x28) 2018/05/19 09:51:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 2018/05/19 09:51:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="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", 0x5ad, 0x8084, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r1 = socket(0x2000000011, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:28 executing program 3: capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x84, &(0x7f0000000340), &(0x7f0000000400)=""/132}, 0x28) 2018/05/19 09:51:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 2018/05/19 09:51:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000106]}) 2018/05/19 09:51:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x1c, 0x1, 'client0\x00', 0x0, "342cc9bf9bb6c038", "21584122836a19aeff833672a7e0a3b5770c88c9965f25bac89f61888c2ed633"}) 2018/05/19 09:51:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 09:51:28 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 2018/05/19 09:51:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 2018/05/19 09:51:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="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", 0x5ad, 0x8084, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r1 = socket(0x2000000011, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x1c, 0x1, 'client0\x00', 0x0, "342cc9bf9bb6c038", "21584122836a19aeff833672a7e0a3b5770c88c9965f25bac89f61888c2ed633"}) 2018/05/19 09:51:28 executing program 3: capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x84, &(0x7f0000000340), &(0x7f0000000400)=""/132}, 0x28) 2018/05/19 09:51:28 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 09:51:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000106]}) 2018/05/19 09:51:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x1c, 0x1, 'client0\x00', 0x0, "342cc9bf9bb6c038", "21584122836a19aeff833672a7e0a3b5770c88c9965f25bac89f61888c2ed633"}) 2018/05/19 09:51:28 executing program 3: capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x84, &(0x7f0000000340), &(0x7f0000000400)=""/132}, 0x28) 2018/05/19 09:51:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5, 0x1, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) 2018/05/19 09:51:28 executing program 3: prctl$seccomp(0x2b, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:51:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x1c, 0x1, 'client0\x00', 0x0, "342cc9bf9bb6c038", "21584122836a19aeff833672a7e0a3b5770c88c9965f25bac89f61888c2ed633"}) 2018/05/19 09:51:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000106]}) 2018/05/19 09:51:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5, 0x1, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) 2018/05/19 09:51:28 executing program 3: prctl$seccomp(0x2b, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:51:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 09:51:30 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 09:51:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 09:51:30 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 2018/05/19 09:51:30 executing program 3: prctl$seccomp(0x2b, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:51:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000280)={"6970365f767469300000000000000100", @ifru_mtu=0x6f3000}) 2018/05/19 09:51:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5, 0x1, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) 2018/05/19 09:51:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000106]}) 2018/05/19 09:51:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 2018/05/19 09:51:30 executing program 3: prctl$seccomp(0x2b, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:51:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000280)={"6970365f767469300000000000000100", @ifru_mtu=0x6f3000}) 2018/05/19 09:51:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5, 0x1, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) 2018/05/19 09:51:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1, &(0x7f00000006c0)}, 0x0) 2018/05/19 09:51:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/19 09:51:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000280)={"6970365f767469300000000000000100", @ifru_mtu=0x6f3000}) 2018/05/19 09:51:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 09:51:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/83) 2018/05/19 09:51:31 executing program 2: keyctl$session_to_parent(0x11) 2018/05/19 09:51:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f00000000c0)=0xfffffffffffffe3e) 2018/05/19 09:51:31 executing program 2: keyctl$session_to_parent(0x11) 2018/05/19 09:51:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000280)={"6970365f767469300000000000000100", @ifru_mtu=0x6f3000}) 2018/05/19 09:51:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1, &(0x7f00000006c0)}, 0x0) 2018/05/19 09:51:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/83) 2018/05/19 09:51:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/83) 2018/05/19 09:51:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/19 09:51:31 executing program 2: keyctl$session_to_parent(0x11) 2018/05/19 09:51:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/19 09:51:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/83) 2018/05/19 09:51:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1, &(0x7f00000006c0)}, 0x0) 2018/05/19 09:51:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/83) 2018/05/19 09:51:31 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 2018/05/19 09:51:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/19 09:51:31 executing program 2: keyctl$session_to_parent(0x11) 2018/05/19 09:51:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/19 09:51:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/83) 2018/05/19 09:51:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1, &(0x7f00000006c0)}, 0x0) 2018/05/19 09:51:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/19 09:51:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 09:51:32 executing program 6: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) 2018/05/19 09:51:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/19 09:51:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:51:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xff8c, &(0x7f00000014c0)={&(0x7f0000000140)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/05/19 09:51:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/83) 2018/05/19 09:51:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/19 09:51:32 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='//file0/file0\x00', 0x20) [ 88.931519] mip6: mip6_destopt_init_state: state's mode is not 2: 0 2018/05/19 09:51:32 executing program 6: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) 2018/05/19 09:51:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 09:51:32 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 2018/05/19 09:51:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x0) 2018/05/19 09:51:32 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getdents(r0, &(0x7f0000000040)=""/148, 0x200000eb) 2018/05/19 09:51:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xff8c, &(0x7f00000014c0)={&(0x7f0000000140)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/05/19 09:51:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:51:32 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='//file0/file0\x00', 0x20) 2018/05/19 09:51:33 executing program 6: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) 2018/05/19 09:51:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 89.837244] mip6: mip6_destopt_init_state: state's mode is not 2: 0 2018/05/19 09:51:33 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getdents(r0, &(0x7f0000000040)=""/148, 0x200000eb) 2018/05/19 09:51:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xff8c, &(0x7f00000014c0)={&(0x7f0000000140)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/05/19 09:51:33 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='//file0/file0\x00', 0x20) 2018/05/19 09:51:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x0) [ 89.936189] mip6: mip6_destopt_init_state: state's mode is not 2: 0 2018/05/19 09:51:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 09:51:33 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getdents(r0, &(0x7f0000000040)=""/148, 0x200000eb) 2018/05/19 09:51:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xff8c, &(0x7f00000014c0)={&(0x7f0000000140)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/05/19 09:51:33 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 2018/05/19 09:51:33 executing program 6: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) 2018/05/19 09:51:33 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='//file0/file0\x00', 0x20) 2018/05/19 09:51:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:51:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x0) 2018/05/19 09:51:33 executing program 6: mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f00000012c0)=""/4096}, &(0x7f0000001280)=0x78) 2018/05/19 09:51:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x0) 2018/05/19 09:51:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) [ 90.763203] mip6: mip6_destopt_init_state: state's mode is not 2: 0 2018/05/19 09:51:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4}}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:51:33 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getdents(r0, &(0x7f0000000040)=""/148, 0x200000eb) 2018/05/19 09:51:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f000000bec0)=[{{&(0x7f0000008900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000009e40)=[{&(0x7f0000008c80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/178, 0xb2}], 0x2, &(0x7f0000009ec0)=""/153, 0x99}}], 0x1, 0x0, &(0x7f000000c0c0)={0x0, 0x1c9c380}) 2018/05/19 09:51:34 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) [ 90.873657] netlink: 'syz-executor2': attribute type 21 has an invalid length. [ 90.881241] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/05/19 09:51:34 executing program 1: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/05/19 09:51:34 executing program 6: mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f00000012c0)=""/4096}, &(0x7f0000001280)=0x78) 2018/05/19 09:51:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) 2018/05/19 09:51:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4}}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:51:34 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x179) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 2018/05/19 09:51:34 executing program 6: mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f00000012c0)=""/4096}, &(0x7f0000001280)=0x78) 2018/05/19 09:51:34 executing program 1: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/05/19 09:51:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) 2018/05/19 09:51:34 executing program 7: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/05/19 09:51:34 executing program 4: r0 = memfd_create(&(0x7f0000001f1f)='\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x20000) fallocate(r0, 0x3, 0x0, 0x20000) 2018/05/19 09:51:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:51:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) 2018/05/19 09:51:35 executing program 6: mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f00000012c0)=""/4096}, &(0x7f0000001280)=0x78) 2018/05/19 09:51:35 executing program 1: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) [ 91.864255] netlink: 'syz-executor2': attribute type 21 has an invalid length. [ 91.871786] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/05/19 09:51:35 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x179) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 2018/05/19 09:51:35 executing program 4: r0 = memfd_create(&(0x7f0000001f1f)='\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x20000) fallocate(r0, 0x3, 0x0, 0x20000) 2018/05/19 09:51:35 executing program 7: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/05/19 09:51:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4}}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:51:35 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="b65bf60c9b90134486a4118e3d1f04108599febdd4af941c73fc8e98fafa5a324c", 0x21) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:51:35 executing program 4: r0 = memfd_create(&(0x7f0000001f1f)='\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x20000) fallocate(r0, 0x3, 0x0, 0x20000) [ 92.064156] netlink: 'syz-executor2': attribute type 21 has an invalid length. [ 92.071745] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/05/19 09:51:35 executing program 1: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/05/19 09:51:35 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x179) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 2018/05/19 09:51:35 executing program 6: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./control/file0\x00') close(r0) 2018/05/19 09:51:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x803, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FRA_SRC={0x14, 0x2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x18, 'veth1_to_team\x00'}]}, 0x48}, 0x1}, 0x0) 2018/05/19 09:51:35 executing program 4: r0 = memfd_create(&(0x7f0000001f1f)='\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x20000) fallocate(r0, 0x3, 0x0, 0x20000) 2018/05/19 09:51:35 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="b65bf60c9b90134486a4118e3d1f04108599febdd4af941c73fc8e98fafa5a324c", 0x21) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:51:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4}}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:51:35 executing program 7: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) 2018/05/19 09:51:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 92.854643] netlink: 'syz-executor2': attribute type 21 has an invalid length. [ 92.862122] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/05/19 09:51:36 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="b65bf60c9b90134486a4118e3d1f04108599febdd4af941c73fc8e98fafa5a324c", 0x21) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:51:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x803, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FRA_SRC={0x14, 0x2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x18, 'veth1_to_team\x00'}]}, 0x48}, 0x1}, 0x0) 2018/05/19 09:51:36 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x179) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 2018/05/19 09:51:36 executing program 1: mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x520dad2e33676d7b, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:36 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x5, &(0x7f0000000100), 0x36b) 2018/05/19 09:51:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") mprotect(&(0x7f000015c000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff4b, 0x0) 2018/05/19 09:51:36 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="b65bf60c9b90134486a4118e3d1f04108599febdd4af941c73fc8e98fafa5a324c", 0x21) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:51:36 executing program 1: mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x520dad2e33676d7b, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x803, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FRA_SRC={0x14, 0x2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x18, 'veth1_to_team\x00'}]}, 0x48}, 0x1}, 0x0) 2018/05/19 09:51:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/19 09:51:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") mprotect(&(0x7f000015c000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff4b, 0x0) 2018/05/19 09:51:36 executing program 3: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x101, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/19 09:51:36 executing program 1: mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x520dad2e33676d7b, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x803, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FRA_SRC={0x14, 0x2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x18, 'veth1_to_team\x00'}]}, 0x48}, 0x1}, 0x0) 2018/05/19 09:51:36 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:36 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x5, &(0x7f0000000100), 0x36b) 2018/05/19 09:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/19 09:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/19 09:51:36 executing program 1: mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x520dad2e33676d7b, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:37 executing program 5: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/05/19 09:51:37 executing program 3: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x101, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/19 09:51:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/19 09:51:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") mprotect(&(0x7f000015c000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff4b, 0x0) 2018/05/19 09:51:37 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:37 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x5, &(0x7f0000000100), 0x36b) 2018/05/19 09:51:37 executing program 1: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x101, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/19 09:51:37 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/19 09:51:37 executing program 3: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x101, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/19 09:51:37 executing program 5: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/05/19 09:51:37 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/19 09:51:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") mprotect(&(0x7f000015c000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff4b, 0x0) 2018/05/19 09:51:37 executing program 5: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/05/19 09:51:37 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:37 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/19 09:51:37 executing program 3: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x101, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/19 09:51:37 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x5, &(0x7f0000000100), 0x36b) 2018/05/19 09:51:37 executing program 1: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x101, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/19 09:51:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(authenc(crct10dif-pclmul,ctr-aes-aesni)))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 2018/05/19 09:51:37 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)="3b34e9c48b6fcc7790b726999bc38dc8", 0x10}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/05/19 09:51:37 executing program 6: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x44031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mlock(&(0x7f0000499000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:37 executing program 5: r0 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fallocate(r0, 0x3, 0x0, 0x7) 2018/05/19 09:51:37 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x8010000000000083) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) 2018/05/19 09:51:37 executing program 1: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x101, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/19 09:51:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(authenc(crct10dif-pclmul,ctr-aes-aesni)))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 2018/05/19 09:51:37 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/19 09:51:37 executing program 6: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x44031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mlock(&(0x7f0000499000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:37 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"79616d300001178b00", 0x80401a}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) 2018/05/19 09:51:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) 2018/05/19 09:51:37 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/19 09:51:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(authenc(crct10dif-pclmul,ctr-aes-aesni)))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 2018/05/19 09:51:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x2012004) keyctl$get_security(0x6, r1, &(0x7f0000000000)=""/114, 0x72) 2018/05/19 09:51:37 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x8010000000000083) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:37 executing program 6: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x44031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mlock(&(0x7f0000499000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:37 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/19 09:51:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(authenc(crct10dif-pclmul,ctr-aes-aesni)))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 2018/05/19 09:51:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x2012004) keyctl$get_security(0x6, r1, &(0x7f0000000000)=""/114, 0x72) 2018/05/19 09:51:37 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x8010000000000083) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) 2018/05/19 09:51:37 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)="3b34e9c48b6fcc7790b726999bc38dc8", 0x10}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/05/19 09:51:37 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"79616d300001178b00", 0x80401a}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) 2018/05/19 09:51:37 executing program 6: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffd, 0x44031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mlock(&(0x7f0000499000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) 2018/05/19 09:51:38 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x8010000000000083) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 09:51:38 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/19 09:51:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) 2018/05/19 09:51:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x2012004) keyctl$get_security(0x6, r1, &(0x7f0000000000)=""/114, 0x72) 2018/05/19 09:51:38 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"79616d300001178b00", 0x80401a}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) 2018/05/19 09:51:38 executing program 6: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x0, 0x1d31}], 0x0, &(0x7f0000000400)={[{@resize='resize', 0x2c}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}, 0x2c}, {@noquota='noquota', 0x2c}]}) 2018/05/19 09:51:38 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)="3b34e9c48b6fcc7790b726999bc38dc8", 0x10}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/05/19 09:51:38 executing program 0: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000000a0001000a0a0c00410400000000fcff", 0x58}], 0x1) [ 95.007700] resize option for remount only [ 95.062323] resize option for remount only [ 95.067908] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure 2018/05/19 09:51:38 executing program 6: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x0, 0x1d31}], 0x0, &(0x7f0000000400)={[{@resize='resize', 0x2c}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}, 0x2c}, {@noquota='noquota', 0x2c}]}) 2018/05/19 09:51:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='numa_maps\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 2018/05/19 09:51:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x2012004) keyctl$get_security(0x6, r1, &(0x7f0000000000)=""/114, 0x72) 2018/05/19 09:51:38 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"79616d300001178b00", 0x80401a}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) 2018/05/19 09:51:38 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)="3b34e9c48b6fcc7790b726999bc38dc8", 0x10}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/05/19 09:51:38 executing program 0: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000000a0001000a0a0c00410400000000fcff", 0x58}], 0x1) 2018/05/19 09:51:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x142) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x20001, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167, 0x41100}, 0x48) [ 95.188302] resize option for remount only 2018/05/19 09:51:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)) 2018/05/19 09:51:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='numa_maps\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 2018/05/19 09:51:38 executing program 6: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x0, 0x1d31}], 0x0, &(0x7f0000000400)={[{@resize='resize', 0x2c}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}, 0x2c}, {@noquota='noquota', 0x2c}]}) 2018/05/19 09:51:38 executing program 0: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000000a0001000a0a0c00410400000000fcff", 0x58}], 0x1) [ 95.361814] resize option for remount only [ 95.378677] EXT4-fs (loop1): bad geometry: block count 2048 exceeds size of device (2 blocks) [ 95.437148] EXT4-fs (loop1): bad geometry: block count 2048 exceeds size of device (2 blocks) 2018/05/19 09:51:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x142) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x20001, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167, 0x41100}, 0x48) 2018/05/19 09:51:38 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") unshare(0x20000400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) fstatfs(r1, &(0x7f00000002c0)=""/4096) 2018/05/19 09:51:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x800000100008, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000100)=[{}]}) 2018/05/19 09:51:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='numa_maps\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 2018/05/19 09:51:38 executing program 0: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000000a0001000a0a0c00410400000000fcff", 0x58}], 0x1) 2018/05/19 09:51:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x8) 2018/05/19 09:51:38 executing program 6: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x0, 0x1d31}], 0x0, &(0x7f0000000400)={[{@resize='resize', 0x2c}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}, 0x2c}, {@noquota='noquota', 0x2c}]}) [ 95.543731] resize option for remount only 2018/05/19 09:51:38 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 2018/05/19 09:51:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x8) 2018/05/19 09:51:38 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x102, 0x0) dup3(r0, r1, 0x0) 2018/05/19 09:51:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r2, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000002180)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8080) sendto$inet6(r2, &(0x7f0000000280)="b7", 0x1, 0x8800, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r2) 2018/05/19 09:51:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='numa_maps\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 2018/05/19 09:51:38 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") unshare(0x20000400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) fstatfs(r1, &(0x7f00000002c0)=""/4096) 2018/05/19 09:51:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x800000100008, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000100)=[{}]}) 2018/05/19 09:51:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x142) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x20001, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167, 0x41100}, 0x48) 2018/05/19 09:51:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x8) 2018/05/19 09:51:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x800000100008, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000100)=[{}]}) 2018/05/19 09:51:38 executing program 2: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000002900)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f0000003000)) 2018/05/19 09:51:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x142) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x20001, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167, 0x41100}, 0x48) [ 96.494419] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:51:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x800000100008, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000100)=[{}]}) 2018/05/19 09:51:39 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x102, 0x0) dup3(r0, r1, 0x0) 2018/05/19 09:51:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x8) 2018/05/19 09:51:39 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") unshare(0x20000400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) fstatfs(r1, &(0x7f00000002c0)=""/4096) 2018/05/19 09:51:39 executing program 2: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000002900)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f0000003000)) 2018/05/19 09:51:39 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2018/05/19 09:51:39 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6a9f, &(0x7f0000000040)=0x3ff) 2018/05/19 09:51:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r2, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000002180)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8080) sendto$inet6(r2, &(0x7f0000000280)="b7", 0x1, 0x8800, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r2) 2018/05/19 09:51:39 executing program 5: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:51:39 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x102, 0x0) dup3(r0, r1, 0x0) 2018/05/19 09:51:39 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x40, 0x281, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x8, 0x0, 0x1, 0x0, 0xff, 0x4}], "e65ecc006dcfd72379ae8d733b114f4b1cbba367ff13"}, 0x8e) 2018/05/19 09:51:39 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2018/05/19 09:51:39 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") unshare(0x20000400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) fstatfs(r1, &(0x7f00000002c0)=""/4096) 2018/05/19 09:51:39 executing program 2: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000002900)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f0000003000)) 2018/05/19 09:51:39 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x102, 0x0) dup3(r0, r1, 0x0) 2018/05/19 09:51:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x40, 0x281, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x8, 0x0, 0x1, 0x0, 0xff, 0x4}], "e65ecc006dcfd72379ae8d733b114f4b1cbba367ff13"}, 0x8e) 2018/05/19 09:51:40 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6a9f, &(0x7f0000000040)=0x3ff) 2018/05/19 09:51:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/105, 0x69) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 2018/05/19 09:51:40 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2018/05/19 09:51:40 executing program 2: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000002900)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f0000003000)) 2018/05/19 09:51:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x40, 0x281, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x8, 0x0, 0x1, 0x0, 0xff, 0x4}], "e65ecc006dcfd72379ae8d733b114f4b1cbba367ff13"}, 0x8e) 2018/05/19 09:51:40 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/19 09:51:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r2, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000002180)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8080) sendto$inet6(r2, &(0x7f0000000280)="b7", 0x1, 0x8800, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r2) 2018/05/19 09:51:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x7f, &(0x7f0000000040)=""/127}, &(0x7f0000000100), &(0x7f0000000180)=""/194, 0x0, 0x0, 0x0, &(0x7f0000000280)}) [ 97.427777] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:51:40 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2018/05/19 09:51:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x40, 0x281, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x8, 0x0, 0x1, 0x0, 0xff, 0x4}], "e65ecc006dcfd72379ae8d733b114f4b1cbba367ff13"}, 0x8e) 2018/05/19 09:51:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x7f, &(0x7f0000000040)=""/127}, &(0x7f0000000100), &(0x7f0000000180)=""/194, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 09:51:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4138ae84, &(0x7f0000000100)) 2018/05/19 09:51:40 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/19 09:51:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10000000004) write(r0, &(0x7f00000000c0)="2700000014000704030e0000121f0a001100eda5ca922f4047950700d501005e4775fe0012ff00", 0x27) 2018/05/19 09:51:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x7f, &(0x7f0000000040)=""/127}, &(0x7f0000000100), &(0x7f0000000180)=""/194, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 09:51:40 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6a9f, &(0x7f0000000040)=0x3ff) 2018/05/19 09:51:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) [ 98.285640] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:51:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r2, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000002180)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8080) sendto$inet6(r2, &(0x7f0000000280)="b7", 0x1, 0x8800, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r2) 2018/05/19 09:51:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x7f, &(0x7f0000000040)=""/127}, &(0x7f0000000100), &(0x7f0000000180)=""/194, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 09:51:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4138ae84, &(0x7f0000000100)) 2018/05/19 09:51:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10000000004) write(r0, &(0x7f00000000c0)="2700000014000704030e0000121f0a001100eda5ca922f4047950700d501005e4775fe0012ff00", 0x27) 2018/05/19 09:51:41 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6a9f, &(0x7f0000000040)=0x3ff) 2018/05/19 09:51:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 2018/05/19 09:51:41 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/19 09:51:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/105, 0x69) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 2018/05/19 09:51:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0xfffffffffffffffa) [ 99.220269] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:51:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 2018/05/19 09:51:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10000000004) write(r0, &(0x7f00000000c0)="2700000014000704030e0000121f0a001100eda5ca922f4047950700d501005e4775fe0012ff00", 0x27) 2018/05/19 09:51:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x2000000000000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:42 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0xfffffffffffffffa) 2018/05/19 09:51:42 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1, &(0x7f0000002580)}, 0x0) r3 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009e40), 0x0, &(0x7f0000009ec0)=""/202, 0xca}}], 0x1, 0x0, &(0x7f000000a1c0)) 2018/05/19 09:51:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4138ae84, &(0x7f0000000100)) 2018/05/19 09:51:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/105, 0x69) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 2018/05/19 09:51:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001640)=0x225, 0x0) read(r1, &(0x7f00000001c0)=""/61, 0x3d) 2018/05/19 09:51:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) [ 99.375603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 99.384162] tc_dump_action: action bad kind 2018/05/19 09:51:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10000000004) write(r0, &(0x7f00000000c0)="2700000014000704030e0000121f0a001100eda5ca922f4047950700d501005e4775fe0012ff00", 0x27) 2018/05/19 09:51:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4138ae84, &(0x7f0000000100)) 2018/05/19 09:51:42 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0xfffffffffffffffa) 2018/05/19 09:51:42 executing program 7: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000015c0)=[{&(0x7f0000000240)}, {&(0x7f0000001400)}], 0xa000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 2018/05/19 09:51:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x2000000000000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001640)=0x225, 0x0) read(r1, &(0x7f00000001c0)=""/61, 0x3d) 2018/05/19 09:51:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 99.560605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 99.569181] tc_dump_action: action bad kind 2018/05/19 09:51:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/05/19 09:51:42 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0xfffffffffffffffa) 2018/05/19 09:51:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001640)=0x225, 0x0) read(r1, &(0x7f00000001c0)=""/61, 0x3d) 2018/05/19 09:51:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x2000000000000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:42 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000780)="814d470e3d8168d779a5524cb841b916d09aedc1f6f0959f0dbf69cd80726313eb1da426a5cdb4ae42797297147e606516de808e4a345950583478cea89b3f19115097d0725afc962978b71eedbb64da32f8ddbaa2565e63a624fba8d94622fdf494e83a37eb5df2864ffd74f484bd34a7332c455f5fdf07e4572e5737363d533a26b6cf0f430e367e5902553419556c8c6492f78dafc71a51422aeb36475c4f7f4719f6693e94f400cb05b7795c12369c410a7297bdc79c8b4ab8431f2b43dc644614ec12d5842f6f6d44ee61d175a2342e44032d949aa89663216afce95de8f99bdc95c67941ab5250d07f9868a63901436d25f9747832c895f51d7833ea22ca79bfe7b1cae95014d1e4956e05733ff2c728425255b1d247a746c581af38c3e70f9f137ed452af1f1b48d01b6d9b07f56b4efa0c8a964861802ec33a16b7f2201f3b3add0325f6f3b539148d316d40a79e513759e72b1b4eee9421e166ee771b7d174c982f430dac272f6a682a4ff804d613d2abd74b11847a43ff80b7bb82d558158255ed7a4d048de6a0c278482396b9aa6fe115edc612a3efef6e2aca73af537bed01216e2dce09fceafe37c5795c7a0b2a5888ad02e0352d42b24e373e1e666d6a905031aad08f85264cc99078c6ad0a81ed081a50e44fc3903484d2db45dad02b8cd3e502d12a21e8e3e4298fa3def5581cc6346dcf4a748097224bd9cf8d492893384637a240a63656d4df8b941bbe8141db16f8bd292e6a46d8873899c69de41537c875eea037ded1acd673609ca633339a64b1bfe502e65d948d052dfb7a19f81171d3cd58e3cf007e3d73036dde7659940d6f73a54151a77b10ee8eeeac8fb8c2bea4c1a03a4d629a7dbe11083e0e3d2ece50cc15f5afdccc3e3a15a8fdb9a060868e8bf612577ee01cd16055e75fb7af3ed3827c5b8f3b02925a742d891dcaddac173ec9c1ddaad205fc6c8d0e1e4460851551c9b2d5312034b90d45b54315b67b3352ddaa21c76f82de724aabccc970571602ffe7bc5d8a1dcb9e7d7d19c5fb3f98a9e7a5f8aa8af15e40d8d15edb53ed3645fb15582f3f33a9d6bcd45e97b0bb3439d501eeddaa58e81ad900e1e55bd5d2815b84c6629ab143d1a908d056c60b86650217903bbb7abc67ddc9cb78afe05ed80f0a34c82f94d00e3d326cac7546b70190659b4e03ce8e489a21738d71443969c3765c02eba008ecc255904143e52241573ab0561bba02b6b631ffe46a94064c0766bcfd9b5e65ceb01cbce28fddee6c14e5101d78d334a663a3094436a9e70fb9ba4c6d35d23df19c8fc563dca53288bb91e9c0a84239f8c664e304f6f9fa06d3eaa2439849207983daa64e876d313c81341b00801938902017611a60c7ffae95dc2ad982f2573788cd00ba44bd5ca3e99fa935a5adb38449ec5e2fb2c2513c99d6132374fda0b2bcc5d3804980bb4041e6138ff4b98f23e2e72de744b39b6a6618b43c14e9764e884390311706a6620781d190f31277f1db2af5d97017f0d629924b150d97c0973708559e5eb2b189faf7ee18f1be38ae04954f33e0e215017610fcbd9add9d1c92c3b4acd4a8e77a10facd31e2763523ab43966b583ba24b70c28088de5453c9539b4636addf82a684e63768d40ebf0174e34f5747419dd36efb43a5ab7d0130217c9c1bb50a7740f289bacbaba8d6aad013e959704c19d7ca0d3864d097d027a4551da5c39abb9a40204d3dc1575a28b79217d51cd83a47323011e73ebb2ee18edab7c2a0ee53f6c0ed5a0bf55453ad1ee884aff9173fd8ff78daabc7ff21e10e67b73cdbca001bfd7681e62871692dc0db0933055fd285f2171734c3aec6d4d925fce3627705791588df23bff35bc1fa540d00882d08a549c4de5badbeb1f56ef5eff11909c0d77b223cd5066cd8986996e4a98b94f7ad9e53272e4b9a95f583632cffef151bea0364eea61683f8771c73a80f81a62a42ffd65c67e22548df2b7b995d77dea1a46200fd3c039bbb31921e13f6170bb891b1b8ae66fda41dfc34e190c59dfe432e39094a47733ac59c51950a0d5fef733ab64f8ba66cb39598ff60542c3e928e71117b63541fd24d8759a33a883ac9e7c300fd1de89b26250b447475a7b30b444f2d424e89bb73629285981eee6b88fd0db00d5b90de3245f03ce34b61552ba0fb6ae83883ee00f7e746f26bad36d5d0d405a0ba193048ebed07672991a1379c53b90e17984dfb3fe7ec3a405dab62269b563f616216162ae38efb0f51bee4d0f245f3f984086143fbe2cd24a2b36a455aae8f45b1d3a71e945e3c162d2a47d53993b2e21be7dbbd77dcb14a70b38b808103b7a1028f8dd180baada4c016270831c4d0674f7a5a17230a21550a7467b4cb37ae150ad3c432f33ae8bc72a8c895b3899fd0a02436532291831571a7b3ffb93f36c7e4241156575f0641deb5476a843583806e1da2d740db96ccad68e1defe33920341a8739ca0229fdae767bc6f6baa3865f1f75b289aef94ccbce850dfb34a70e8f906bca3830e21b3d4f8e2c8f0966bd80739b4dd1603263dbcad6f036b08a24d091abe289c3d63972f48f17010f453de7b708b71a37f1f3c466adb7ece84cbf556547cdccdc1a4fce14cfe58e689b14b56b669c449cb13ab0869fdbdd06b209fc0832a425162990a006cb38643d12f766d223cd5df7068701c8cfdccc850abe7a5caadb0979cd994ade8b904950ae2db60f6eb4eccd5c8ae2ded1fcd52f5a32c140e2c4f8619fa126e13353e30ed74841c77ab5c9b891e914807a0753306b0ce1c3ab92bd785bd830487c39e021e2ddddd671d8873cb0816c284df896a5a92eb6393658103bc75f3438b098640ff31ce07dc63a42ebf3695f1f3204e2024589e639614575c7b7f596abb2b7f18bd94b85c34cc58f418192e13c46c1d7f3f211145bbce4ddc7758527c4f3be114e66bf66ddc6745814078ecd1f92fb4710d123b7aa29696b517f5c6ef51af2aac11d354b1c9b60e6165df9268694a0b09f4e4412a89fc59012d167400340af927b9a4a38dc07b128943ce4640d63c878ce48b48a6b60e29dd4799f91153295186d6674335a109959dd1dc36400f0e555ad56b44f17720cedcc7e5196c12be111245ee273476512732533d9cc5d9598fecc0332557c39640bbd8a04cbc8fdcd909e6e9ccb5f8f8300888d02e36900745a1babf306d6a399e432070c82cea8d114e3bc2e166bdab898c24127f68ab40d4beef143ba2cc0f56df177ba83dba88d4d7c0f5f8c399ea37e8df91f1011dbbe5be4f8478dc6d8a24b7fb59f7e45a2ef05203c0902f", 0x92d}], 0x1}, 0x10008000) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r0, &(0x7f0000000540)="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", 0x21c, 0x0, 0x0, 0x0) 2018/05/19 09:51:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 99.798871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.822678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 99.831313] tc_dump_action: action bad kind 2018/05/19 09:51:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/105, 0x69) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 2018/05/19 09:51:43 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x92d}], 0x1}, 0x10008000) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r0, &(0x7f0000000540)="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", 0x21c, 0x0, 0x0, 0x0) 2018/05/19 09:51:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x2000000000000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:51:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1b, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/19 09:51:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/05/19 09:51:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001640)=0x225, 0x0) read(r1, &(0x7f00000001c0)=""/61, 0x3d) 2018/05/19 09:51:43 executing program 7: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000015c0)=[{&(0x7f0000000240)}, {&(0x7f0000001400)}], 0xa000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 2018/05/19 09:51:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/05/19 09:51:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 100.336611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 100.345190] tc_dump_action: action bad kind 2018/05/19 09:51:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) 2018/05/19 09:51:43 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x92d}], 0x1}, 0x10008000) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r0, &(0x7f0000000540)="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", 0x21c, 0x0, 0x0, 0x0) 2018/05/19 09:51:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/05/19 09:51:43 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 100.405299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.539271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 2018/05/19 09:51:44 executing program 7: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000015c0)=[{&(0x7f0000000240)}, {&(0x7f0000001400)}], 0xa000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 2018/05/19 09:51:44 executing program 3: r0 = getpid() move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0) 2018/05/19 09:51:44 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) 2018/05/19 09:51:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/05/19 09:51:44 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x92d}], 0x1}, 0x10008000) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r0, &(0x7f0000000540)="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", 0x21c, 0x0, 0x0, 0x0) 2018/05/19 09:51:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "f5261e68096d5c0229a3b790564806b2d199ab53bb15d0f456464f127c998493b19e80"}, 0x2e) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000400000000000000000000000000000"], 0x2a) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 2018/05/19 09:51:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1b, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/19 09:51:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") pwritev(r0, &(0x7f0000001700)=[{&(0x7f0000000380)}, {&(0x7f00000013c0)="9b0832ed44625724c7cd58fbcf6963303e168e5afc059615d1fc47d2b2e3adb6209d32faa95714478b24ef8b582fa69db9ed600543f16210ecd4fe65272d6002d6e10e2ee258b3bc0a8dd805e0af5059b27a6b6f4f53e54eb5cd50594dcbe084ad36f23156ada457746e8d6230113e1553d17ad565fcba2301ab7a51940571770be335f853cdbae31e4aae3846b1e18d7d192cd396a03cd072876d2a", 0x9c}, {&(0x7f0000001500)="e31c5cccf305585c1c602ee98ebf85fa8b9d17a36bd4737288bdc61a7ff4b5d8ce2f42b95c9777b11595d82cf31f3d4a66d283ce0d65db3fd7d364c5013816560cfbd1f3925deb2a384306bc397af0ac542dcfed0c88afff6e2d50f551411449d4de3892ff88b78d", 0x68}, {&(0x7f0000001640)="89ca5eb5ba186fc3a136335507758c3685a2db6b1c05f100936623b64560ea55e82bbb8e035a75d386eae2548518c9d8ed896713c0daaeaa917ae06d175eef9a4a592c9d2427b1aa88d7f1db6ad1e7b72d4e484081eb43c4b315149b938f2d661e187da55de1014749a72396321d4b9f3d5a6b32e70a233e5b1c86c1e5482025e98797e36865e453a9003de6288d95d27a408678dfacc35f86", 0x99}], 0x4, 0x0) 2018/05/19 09:51:44 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) fallocate(r0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=ANY=[], 0x10000001b) 2018/05/19 09:51:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:44 executing program 3: r0 = getpid() move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0) 2018/05/19 09:51:44 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) 2018/05/19 09:51:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "f5261e68096d5c0229a3b790564806b2d199ab53bb15d0f456464f127c998493b19e80"}, 0x2e) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000400000000000000000000000000000"], 0x2a) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 101.363877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 2018/05/19 09:51:44 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(r0, r0) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x14) 2018/05/19 09:51:44 executing program 7: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000015c0)=[{&(0x7f0000000240)}, {&(0x7f0000001400)}], 0xa000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') [ 101.788335] syz-executor5 (8280) used greatest stack depth: 9304 bytes left 2018/05/19 09:51:45 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1b, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/19 09:51:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:45 executing program 3: r0 = getpid() move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0) 2018/05/19 09:51:45 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(r0, r0) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x14) 2018/05/19 09:51:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "f5261e68096d5c0229a3b790564806b2d199ab53bb15d0f456464f127c998493b19e80"}, 0x2e) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000400000000000000000000000000000"], 0x2a) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 2018/05/19 09:51:45 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 2018/05/19 09:51:45 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) 2018/05/19 09:51:45 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) fallocate(r0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=ANY=[], 0x10000001b) 2018/05/19 09:51:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "f5261e68096d5c0229a3b790564806b2d199ab53bb15d0f456464f127c998493b19e80"}, 0x2e) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000400000000000000000000000000000"], 0x2a) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 2018/05/19 09:51:45 executing program 3: r0 = getpid() move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0) 2018/05/19 09:51:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:45 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(r0, r0) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x14) 2018/05/19 09:51:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2, 0x0, 0xfffffffe}, &(0x7f00000001c0)=0x10) 2018/05/19 09:51:45 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 2018/05/19 09:51:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/19 09:51:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2018/05/19 09:51:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 09:51:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(r0, r0) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x14) 2018/05/19 09:51:46 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) fallocate(r0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=ANY=[], 0x10000001b) 2018/05/19 09:51:46 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 2018/05/19 09:51:46 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/19 09:51:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2, 0x0, 0xfffffffe}, &(0x7f00000001c0)=0x10) 2018/05/19 09:51:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1b, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/19 09:51:46 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x40045730, &(0x7f0000000100)) 2018/05/19 09:51:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 09:51:46 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 2018/05/19 09:51:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000240)=0x0) dup3(r0, r1, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)}]) 2018/05/19 09:51:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 09:51:46 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x40045730, &(0x7f0000000100)) 2018/05/19 09:51:46 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/19 09:51:46 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) 2018/05/19 09:51:47 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000240)=0x0) dup3(r0, r1, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)}]) 2018/05/19 09:51:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty={[0x3]}}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 09:51:47 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x40045730, &(0x7f0000000100)) 2018/05/19 09:51:47 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) fallocate(r0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=ANY=[], 0x10000001b) 2018/05/19 09:51:47 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) 2018/05/19 09:51:47 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/19 09:51:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2, 0x0, 0xfffffffe}, &(0x7f00000001c0)=0x10) 2018/05/19 09:51:47 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0xa, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000540)}}], 0x2, 0x8010) 2018/05/19 09:51:47 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x40045730, &(0x7f0000000100)) 2018/05/19 09:51:47 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 2018/05/19 09:51:47 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0xa, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000540)}}], 0x2, 0x8010) 2018/05/19 09:51:47 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='7', 0x1) 2018/05/19 09:51:47 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000240)=0x0) dup3(r0, r1, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)}]) 2018/05/19 09:51:47 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) 2018/05/19 09:51:47 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0xd73}, 0xb) sendto$inet(r1, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:51:47 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0xa, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000540)}}], 0x2, 0x8010) 2018/05/19 09:51:48 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='7', 0x1) 2018/05/19 09:51:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x48, &(0x7f0000000000)=0x21440ecf0f3965f0, 0x30) 2018/05/19 09:51:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000240)=0x0) dup3(r0, r1, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)}]) 2018/05/19 09:51:48 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0xd73}, 0xb) sendto$inet(r1, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:51:48 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0xa, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000540)}}], 0x2, 0x8010) 2018/05/19 09:51:48 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) 2018/05/19 09:51:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2, 0x0, 0xfffffffe}, &(0x7f00000001c0)=0x10) 2018/05/19 09:51:48 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 2018/05/19 09:51:48 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='7', 0x1) 2018/05/19 09:51:48 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 2018/05/19 09:51:48 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0xd73}, 0xb) sendto$inet(r1, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:51:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x48, &(0x7f0000000000)=0x21440ecf0f3965f0, 0x30) 2018/05/19 09:51:48 executing program 7: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback={0x0, 0x1}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}}}}}, &(0x7f0000000080)) 2018/05/19 09:51:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:51:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0xfffffffffffffd43) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/05/19 09:51:48 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='7', 0x1) 2018/05/19 09:51:48 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 2018/05/19 09:51:48 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0xd73}, 0xb) sendto$inet(r1, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:51:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0xfffffffffffffd43) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/05/19 09:51:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x48, &(0x7f0000000000)=0x21440ecf0f3965f0, 0x30) 2018/05/19 09:51:49 executing program 7: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback={0x0, 0x1}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}}}}}, &(0x7f0000000080)) 2018/05/19 09:51:49 executing program 3: r0 = userfaultfd(0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)=""/224, 0xe0) 2018/05/19 09:51:49 executing program 6: syslog(0x4, &(0x7f0000000280)=""/194, 0x3) 2018/05/19 09:51:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0xfffffffffffffd43) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/05/19 09:51:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7, 0x7ff, 0xffffffffffffffff, 0x1}, 0x2c) 2018/05/19 09:51:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:51:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:51:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7, 0x7ff, 0xffffffffffffffff, 0x1}, 0x2c) 2018/05/19 09:51:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0xfffffffffffffd43) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/05/19 09:51:49 executing program 6: syslog(0x4, &(0x7f0000000280)=""/194, 0x3) 2018/05/19 09:51:49 executing program 3: r0 = userfaultfd(0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)=""/224, 0xe0) 2018/05/19 09:51:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x48, &(0x7f0000000000)=0x21440ecf0f3965f0, 0x30) 2018/05/19 09:51:49 executing program 7: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback={0x0, 0x1}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}}}}}, &(0x7f0000000080)) 2018/05/19 09:51:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:51:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/05/19 09:51:49 executing program 6: syslog(0x4, &(0x7f0000000280)=""/194, 0x3) 2018/05/19 09:51:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7, 0x7ff, 0xffffffffffffffff, 0x1}, 0x2c) 2018/05/19 09:51:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:51:49 executing program 3: r0 = userfaultfd(0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)=""/224, 0xe0) 2018/05/19 09:51:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040), 0xfffffffffffffead) 2018/05/19 09:51:49 executing program 6: syslog(0x4, &(0x7f0000000280)=""/194, 0x3) 2018/05/19 09:51:49 executing program 7: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback={0x0, 0x1}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}}}}}, &(0x7f0000000080)) 2018/05/19 09:51:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/05/19 09:51:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:51:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7, 0x7ff, 0xffffffffffffffff, 0x1}, 0x2c) 2018/05/19 09:51:49 executing program 3: r0 = userfaultfd(0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)=""/224, 0xe0) 2018/05/19 09:51:49 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r1, 0x400442c9, &(0x7f0000000000)) 2018/05/19 09:51:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040), 0xfffffffffffffead) 2018/05/19 09:51:49 executing program 7: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000), 0x0, 0x80000000) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000002ff8)='./file0\x00') pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/05/19 09:51:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/05/19 09:51:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_ts_info={0x41}}) 2018/05/19 09:51:50 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r1, 0x400442c9, &(0x7f0000000000)) 2018/05/19 09:51:50 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 2018/05/19 09:51:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:51:50 executing program 7: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000), 0x0, 0x80000000) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000002ff8)='./file0\x00') pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/05/19 09:51:50 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r1, 0x400442c9, &(0x7f0000000000)) 2018/05/19 09:51:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/05/19 09:51:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_ts_info={0x41}}) 2018/05/19 09:51:50 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040), 0xfffffffffffffead) 2018/05/19 09:51:50 executing program 4: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000), 0x0, 0x80000000) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000002ff8)='./file0\x00') pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/05/19 09:51:51 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r1, 0x400442c9, &(0x7f0000000000)) 2018/05/19 09:51:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040), 0xfffffffffffffead) 2018/05/19 09:51:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_ts_info={0x41}}) 2018/05/19 09:51:51 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) 2018/05/19 09:51:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 2018/05/19 09:51:51 executing program 1: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x8}, &(0x7f00000001c0), 0x1400) 2018/05/19 09:51:51 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_mount_image$gfs2(&(0x7f0000000280)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={[{@hostdata={'hostdata', 0x3d, "2a2570726f637070703070707031776c616e30707070316264657629232c7365637572697479657468306d643573756d2aa45b47504c"}, 0x2c}]}) 2018/05/19 09:51:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x20, 0x6, "de29a9f418a7"}}) close(r2) close(r1) 2018/05/19 09:51:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_ts_info={0x41}}) 2018/05/19 09:51:51 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) [ 108.113864] gfs2: invalid mount option: securityeth0md5sum*¤[GPL [ 108.120240] gfs2: can't parse mount arguments [ 108.196493] gfs2: invalid mount option: securityeth0md5sum*¤[GPL [ 108.202778] gfs2: can't parse mount arguments 2018/05/19 09:51:52 executing program 4: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000), 0x0, 0x80000000) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000002ff8)='./file0\x00') pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/05/19 09:51:52 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x20, 0x6, "de29a9f418a7"}}) close(r2) close(r1) 2018/05/19 09:51:52 executing program 7: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000), 0x0, 0x80000000) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000002ff8)='./file0\x00') pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/05/19 09:51:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 2018/05/19 09:51:52 executing program 1: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x8}, &(0x7f00000001c0), 0x1400) 2018/05/19 09:51:52 executing program 2: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) r1 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r1, r1, &(0x7f0000000040)=0x800000, 0x408) 2018/05/19 09:51:52 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) 2018/05/19 09:51:52 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_mount_image$gfs2(&(0x7f0000000280)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={[{@hostdata={'hostdata', 0x3d, "2a2570726f637070703070707031776c616e30707070316264657629232c7365637572697479657468306d643573756d2aa45b47504c"}, 0x2c}]}) 2018/05/19 09:51:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) dup2(r1, r0) 2018/05/19 09:51:52 executing program 1: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x8}, &(0x7f00000001c0), 0x1400) [ 108.989636] gfs2: invalid mount option: securityeth0md5sum*¤[GPL [ 108.995861] gfs2: can't parse mount arguments 2018/05/19 09:51:52 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) 2018/05/19 09:51:53 executing program 2: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) r1 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r1, r1, &(0x7f0000000040)=0x800000, 0x408) 2018/05/19 09:51:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_mount_image$gfs2(&(0x7f0000000280)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={[{@hostdata={'hostdata', 0x3d, "2a2570726f637070703070707031776c616e30707070316264657629232c7365637572697479657468306d643573756d2aa45b47504c"}, 0x2c}]}) 2018/05/19 09:51:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x1, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000200)="dfab"}, 0x10) 2018/05/19 09:51:53 executing program 1: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x8}, &(0x7f00000001c0), 0x1400) 2018/05/19 09:51:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2018/05/19 09:51:53 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x20, 0x6, "de29a9f418a7"}}) close(r2) close(r1) 2018/05/19 09:51:53 executing program 7: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000), 0x0, 0x80000000) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000002ff8)='./file0\x00') pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/05/19 09:51:53 executing program 4: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) unshare(0x200) chdir(&(0x7f000082c000)='./file0\x00') poll(&(0x7f00006cd000), 0x0, 0x80000000) pivot_root(&(0x7f0000309000)='./file0\x00', &(0x7f0000002ff8)='./file0\x00') pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/05/19 09:51:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x1, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000200)="dfab"}, 0x10) 2018/05/19 09:51:53 executing program 1: r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f00000033c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/197, 0xc5}], 0x1}}, {{&(0x7f0000004ac0)=@hci, 0x80, &(0x7f0000006d00), 0x0, &(0x7f0000006d80)=""/157, 0x9d}}], 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) 2018/05/19 09:51:53 executing program 2: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) r1 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r1, r1, &(0x7f0000000040)=0x800000, 0x408) [ 109.919370] gfs2: invalid mount option: securityeth0md5sum*¤[GPL [ 109.925590] gfs2: can't parse mount arguments 2018/05/19 09:51:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2018/05/19 09:51:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_mount_image$gfs2(&(0x7f0000000280)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={[{@hostdata={'hostdata', 0x3d, "2a2570726f637070703070707031776c616e30707070316264657629232c7365637572697479657468306d643573756d2aa45b47504c"}, 0x2c}]}) 2018/05/19 09:51:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x1, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000200)="dfab"}, 0x10) [ 110.101385] gfs2: invalid mount option: securityeth0md5sum*¤[GPL [ 110.107604] gfs2: can't parse mount arguments 2018/05/19 09:51:54 executing program 2: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) r1 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r1, r1, &(0x7f0000000040)=0x800000, 0x408) 2018/05/19 09:51:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2018/05/19 09:51:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x1, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000200)="dfab"}, 0x10) 2018/05/19 09:51:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x20}) 2018/05/19 09:51:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x20, 0x6, "de29a9f418a7"}}) close(r2) close(r1) 2018/05/19 09:51:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:54 executing program 1: r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f00000033c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/197, 0xc5}], 0x1}}, {{&(0x7f0000004ac0)=@hci, 0x80, &(0x7f0000006d00), 0x0, &(0x7f0000006d80)=""/157, 0x9d}}], 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) 2018/05/19 09:51:54 executing program 7: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2321ffff2b6646f2"], 0x8) 2018/05/19 09:51:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x20}) 2018/05/19 09:51:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000063fc9000000000000451a0000008c01000004"], 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/19, 0x4) 2018/05/19 09:51:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2018/05/19 09:51:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48032, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001180), &(0x7f00000011c0)=""/120, 0x78, &(0x7f00000012c0)={&(0x7f0000001240)={'crc32c-intel\x00'}, &(0x7f0000001280)}) 2018/05/19 09:51:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x1) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/19 09:51:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x20}) 2018/05/19 09:51:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) [ 111.124987] device lo entered promiscuous mode [ 111.146103] device lo left promiscuous mode [ 111.182147] device lo entered promiscuous mode 2018/05/19 09:51:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48032, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001180), &(0x7f00000011c0)=""/120, 0x78, &(0x7f00000012c0)={&(0x7f0000001240)={'crc32c-intel\x00'}, &(0x7f0000001280)}) 2018/05/19 09:51:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x20}) 2018/05/19 09:51:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000007380), 0xdc, &(0x7f0000000040)}], 0x49249249249278a, 0x0) 2018/05/19 09:51:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/05/19 09:51:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x1) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/19 09:51:54 executing program 5: sendto$ax25(0xffffffffffffffff, &(0x7f0000003840)="a8072ba2d0c967cab3caabb9014c3874", 0x10, 0x0, &(0x7f0000000240)={0x3, {"7090e390ab999a"}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0xa88, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188, 0x276}, {&(0x7f00000015c0)=""/4096, 0x122}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0xa4, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 2018/05/19 09:51:54 executing program 7: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2321ffff2b6646f2"], 0x8) 2018/05/19 09:51:54 executing program 1: r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f00000033c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/197, 0xc5}], 0x1}}, {{&(0x7f0000004ac0)=@hci, 0x80, &(0x7f0000006d00), 0x0, &(0x7f0000006d80)=""/157, 0x9d}}], 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) 2018/05/19 09:51:55 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48032, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001180), &(0x7f00000011c0)=""/120, 0x78, &(0x7f00000012c0)={&(0x7f0000001240)={'crc32c-intel\x00'}, &(0x7f0000001280)}) [ 111.830515] device lo left promiscuous mode 2018/05/19 09:51:55 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48032, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001180), &(0x7f00000011c0)=""/120, 0x78, &(0x7f00000012c0)={&(0x7f0000001240)={'crc32c-intel\x00'}, &(0x7f0000001280)}) 2018/05/19 09:51:55 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2321ffff2b6646f2"], 0x8) 2018/05/19 09:51:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x1) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/19 09:51:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/05/19 09:51:55 executing program 5: sendto$ax25(0xffffffffffffffff, &(0x7f0000003840)="a8072ba2d0c967cab3caabb9014c3874", 0x10, 0x0, &(0x7f0000000240)={0x3, {"7090e390ab999a"}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0xa88, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188, 0x276}, {&(0x7f00000015c0)=""/4096, 0x122}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0xa4, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 2018/05/19 09:51:55 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48032, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001180), &(0x7f00000011c0)=""/120, 0x78, &(0x7f00000012c0)={&(0x7f0000001240)={'crc32c-intel\x00'}, &(0x7f0000001280)}) [ 111.958808] device lo entered promiscuous mode 2018/05/19 09:51:55 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48032, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001180), &(0x7f00000011c0)=""/120, 0x78, &(0x7f00000012c0)={&(0x7f0000001240)={'crc32c-intel\x00'}, &(0x7f0000001280)}) 2018/05/19 09:51:55 executing program 5: sendto$ax25(0xffffffffffffffff, &(0x7f0000003840)="a8072ba2d0c967cab3caabb9014c3874", 0x10, 0x0, &(0x7f0000000240)={0x3, {"7090e390ab999a"}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0xa88, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188, 0x276}, {&(0x7f00000015c0)=""/4096, 0x122}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0xa4, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) [ 111.982777] device lo left promiscuous mode 2018/05/19 09:51:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x1) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/19 09:51:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006161000000000000616200000000000085100000010000009500000000000000bf100000000000000f200000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/05/19 09:51:55 executing program 5: sendto$ax25(0xffffffffffffffff, &(0x7f0000003840)="a8072ba2d0c967cab3caabb9014c3874", 0x10, 0x0, &(0x7f0000000240)={0x3, {"7090e390ab999a"}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0xa88, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188, 0x276}, {&(0x7f00000015c0)=""/4096, 0x122}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0xa4, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 2018/05/19 09:51:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/05/19 09:51:55 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x48032, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001180), &(0x7f00000011c0)=""/120, 0x78, &(0x7f00000012c0)={&(0x7f0000001240)={'crc32c-intel\x00'}, &(0x7f0000001280)}) 2018/05/19 09:51:55 executing program 7: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2321ffff2b6646f2"], 0x8) 2018/05/19 09:51:55 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2321ffff2b6646f2"], 0x8) 2018/05/19 09:51:55 executing program 1: r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f00000033c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/197, 0xc5}], 0x1}}, {{&(0x7f0000004ac0)=@hci, 0x80, &(0x7f0000006d00), 0x0, &(0x7f0000006d80)=""/157, 0x9d}}], 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) [ 112.821784] device lo entered promiscuous mode 2018/05/19 09:51:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000080)={0x2b8, &(0x7f0000000040)}) 2018/05/19 09:51:56 executing program 5: splice(0xffffffffffffffff, &(0x7f00000002c0), 0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x100000) [ 112.851511] device lo left promiscuous mode 2018/05/19 09:51:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006161000000000000616200000000000085100000010000009500000000000000bf100000000000000f200000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/05/19 09:51:56 executing program 5: splice(0xffffffffffffffff, &(0x7f00000002c0), 0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x100000) 2018/05/19 09:51:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x707000) 2018/05/19 09:51:56 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 113.016666] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 113.045267] netlink: 'syz-executor4': attribute type 29 has an invalid length. 2018/05/19 09:51:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:56 executing program 5: splice(0xffffffffffffffff, &(0x7f00000002c0), 0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x100000) 2018/05/19 09:51:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x707000) 2018/05/19 09:51:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5}, 0x10) sendto$llc(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 2018/05/19 09:51:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006161000000000000616200000000000085100000010000009500000000000000bf100000000000000f200000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/05/19 09:51:56 executing program 1: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8000000000000007, 0x9e5, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0x18) 2018/05/19 09:51:56 executing program 7: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2321ffff2b6646f2"], 0x8) 2018/05/19 09:51:56 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2321ffff2b6646f2"], 0x8) 2018/05/19 09:51:56 executing program 5: splice(0xffffffffffffffff, &(0x7f00000002c0), 0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x100000) 2018/05/19 09:51:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006161000000000000616200000000000085100000010000009500000000000000bf100000000000000f200000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/05/19 09:51:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x707000) 2018/05/19 09:51:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@nested={0xc, 0x7, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2018/05/19 09:51:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x200013c0}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 113.914074] netlink: 'syz-executor5': attribute type 7 has an invalid length. 2018/05/19 09:51:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x707000) 2018/05/19 09:51:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@nested={0xc, 0x7, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2018/05/19 09:51:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x200013c0}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/19 09:51:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x200013c0}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/19 09:51:57 executing program 7: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:51:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2e2e2e6530f0", 0x40003ffd, 0x0) 2018/05/19 09:51:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x200013c0}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/19 09:51:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x200013c0}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 114.590158] netlink: 'syz-executor5': attribute type 7 has an invalid length. 2018/05/19 09:51:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/250) 2018/05/19 09:51:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x80000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r0, 0x0) 2018/05/19 09:51:57 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=0x20000005) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"643071300000000000000020001600", 0x3}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000200)=""/173, 0xad}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x2, &(0x7f0000000b80)=""/205, 0xcd}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000005dc0)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400}) 2018/05/19 09:51:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@nested={0xc, 0x7, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 114.802511] netlink: 'syz-executor5': attribute type 7 has an invalid length. 2018/05/19 09:51:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x200013c0}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/19 09:51:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/250) 2018/05/19 09:51:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2e2e2e6530f0", 0x40003ffd, 0x0) 2018/05/19 09:51:58 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x200013c0}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/19 09:51:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2e2e2e6530f0", 0x40003ffd, 0x0) 2018/05/19 09:51:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@nested={0xc, 0x7, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2018/05/19 09:51:58 executing program 7: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:51:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6601"]}, 0x1c}, 0x1}, 0x0) [ 115.519114] netlink: 'syz-executor5': attribute type 7 has an invalid length. 2018/05/19 09:51:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6601"]}, 0x1c}, 0x1}, 0x0) 2018/05/19 09:51:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/250) 2018/05/19 09:51:58 executing program 6: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:51:58 executing program 2: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:51:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2e2e2e6530f0", 0x40003ffd, 0x0) 2018/05/19 09:51:58 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@hopopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1, 0xc758}, @calipso={0x7, 0x8}]}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000001480)}, 0x0) 2018/05/19 09:51:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2e2e2e6530f0", 0x40003ffd, 0x0) 2018/05/19 09:51:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6601"]}, 0x1c}, 0x1}, 0x0) 2018/05/19 09:51:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/250) 2018/05/19 09:51:58 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@hopopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1, 0xc758}, @calipso={0x7, 0x8}]}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000001480)}, 0x0) 2018/05/19 09:51:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80) 2018/05/19 09:51:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2e2e2e6530f0", 0x40003ffd, 0x0) 2018/05/19 09:51:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6601"]}, 0x1c}, 0x1}, 0x0) 2018/05/19 09:51:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f2e2e2e6530f0", 0x40003ffd, 0x0) 2018/05/19 09:51:59 executing program 7: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:51:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80) 2018/05/19 09:51:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/19 09:51:59 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000040)='.\x00', 0x1) 2018/05/19 09:52:00 executing program 2: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:52:00 executing program 7: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:52:00 executing program 6: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:52:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d}}) 2018/05/19 09:52:00 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000040)='.\x00', 0x1) 2018/05/19 09:52:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80) 2018/05/19 09:52:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/19 09:52:00 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@hopopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1, 0xc758}, @calipso={0x7, 0x8}]}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000001480)}, 0x0) 2018/05/19 09:52:00 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000040)='.\x00', 0x1) 2018/05/19 09:52:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80) 2018/05/19 09:52:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d}}) 2018/05/19 09:52:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/19 09:52:00 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@hopopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1, 0xc758}, @calipso={0x7, 0x8}]}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000001480)}, 0x0) 2018/05/19 09:52:00 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000040)='.\x00', 0x1) 2018/05/19 09:52:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") llistxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)=""/202, 0xca) open(&(0x7f00000000c0)='./file0/file0\x00', 0x103fffa, 0x0) 2018/05/19 09:52:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d}}) 2018/05/19 09:52:01 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)="14"}, 0x20) 2018/05/19 09:52:01 executing program 2: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:52:01 executing program 6: r0 = gettid() clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/28, 0x1c}], 0x1, &(0x7f0000002900)=[{&(0x7f0000000380)=""/235, 0x7ffff000}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:52:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0x10) getdents(r0, &(0x7f0000001100)=""/182, 0x1ea) 2018/05/19 09:52:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/19 09:52:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d}}) 2018/05/19 09:52:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x20) 2018/05/19 09:52:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") llistxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)=""/202, 0xca) open(&(0x7f00000000c0)='./file0/file0\x00', 0x103fffa, 0x0) 2018/05/19 09:52:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getrandom(&(0x7f00000010c0)=""/1, 0x1, 0x2) 2018/05/19 09:52:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x20) 2018/05/19 09:52:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0x10) getdents(r0, &(0x7f0000001100)=""/182, 0x1ea) 2018/05/19 09:52:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) write$eventfd(r0, &(0x7f000025bff8), 0x25d) 2018/05/19 09:52:01 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x17e6020000000000]}, 0x6) 2018/05/19 09:52:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0x10) getdents(r0, &(0x7f0000001100)=""/182, 0x1ea) 2018/05/19 09:52:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") llistxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)=""/202, 0xca) open(&(0x7f00000000c0)='./file0/file0\x00', 0x103fffa, 0x0) 2018/05/19 09:52:01 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)="14"}, 0x20) 2018/05/19 09:52:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x20) 2018/05/19 09:52:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)) 2018/05/19 09:52:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0x10) getdents(r0, &(0x7f0000001100)=""/182, 0x1ea) 2018/05/19 09:52:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/19 09:52:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x20) 2018/05/19 09:52:02 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)="14"}, 0x20) 2018/05/19 09:52:02 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0x66f7f3d06297b9af, @time}) 2018/05/19 09:52:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") llistxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)=""/202, 0xca) open(&(0x7f00000000c0)='./file0/file0\x00', 0x103fffa, 0x0) 2018/05/19 09:52:02 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x0, "6c2dfc04690a4e3e9276f11379ffab33011fa707bcf10ca9b334a6e7477b1ad3767cfe5cd10dea21590bf8529c092ef4afe000eb680142a795fffeb01679b9a1dfd78bcb497e6522c02b85ef77c2a7ca30dcad3b324e7021d7c09e13d1be67c6b0e033cce97980bf3978a4f58d984efdefd4248fb624d4a8eefb8ba58744"}, 0x80) 2018/05/19 09:52:02 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x0, "6c2dfc04690a4e3e9276f11379ffab33011fa707bcf10ca9b334a6e7477b1ad3767cfe5cd10dea21590bf8529c092ef4afe000eb680142a795fffeb01679b9a1dfd78bcb497e6522c02b85ef77c2a7ca30dcad3b324e7021d7c09e13d1be67c6b0e033cce97980bf3978a4f58d984efdefd4248fb624d4a8eefb8ba58744"}, 0x80) [ 119.247917] FAT-fs (loop0): Directory bread(block 2563) failed [ 119.287102] FAT-fs (loop0): Directory bread(block 2564) failed 2018/05/19 09:52:02 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0x66f7f3d06297b9af, @time}) 2018/05/19 09:52:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e000084da80c200000086dd6002290f00383a00fe8000009c086c625a020000000000000000000000000027"], 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:52:02 executing program 1: unshare(0x20000000) clone(0x3f000000, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/05/19 09:52:02 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)="14"}, 0x20) [ 119.302619] FAT-fs (loop0): Directory bread(block 2565) failed [ 119.319487] FAT-fs (loop0): Directory bread(block 2566) failed [ 119.362619] FAT-fs (loop0): Directory bread(block 2567) failed 2018/05/19 09:52:02 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x0, "6c2dfc04690a4e3e9276f11379ffab33011fa707bcf10ca9b334a6e7477b1ad3767cfe5cd10dea21590bf8529c092ef4afe000eb680142a795fffeb01679b9a1dfd78bcb497e6522c02b85ef77c2a7ca30dcad3b324e7021d7c09e13d1be67c6b0e033cce97980bf3978a4f58d984efdefd4248fb624d4a8eefb8ba58744"}, 0x80) 2018/05/19 09:52:02 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000002000000000000", @ANYBLOB="ab90b147c1d62baed33c"]}) 2018/05/19 09:52:02 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0x66f7f3d06297b9af, @time}) [ 119.404757] FAT-fs (loop0): Directory bread(block 2568) failed [ 119.429641] FAT-fs (loop0): Directory bread(block 2569) failed [ 119.448508] FAT-fs (loop0): Directory bread(block 2570) failed [ 119.462361] FAT-fs (loop0): Directory bread(block 2571) failed [ 119.471108] FAT-fs (loop0): Directory bread(block 2572) failed [ 119.521496] binder_alloc: binder_alloc_mmap_handler: 9310 20001000-20004000 already mapped failed -16 [ 119.554134] binder: BINDER_SET_CONTEXT_MGR already set [ 119.559950] binder: 9310:9311 ioctl 40046207 0 returned -16 [ 119.566728] binder_alloc: 9310: binder_alloc_buf, no vma [ 119.572484] binder: 9310:9315 transaction failed 29189/-3, size 0-0 line 2971 [ 119.623902] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.632862] binder: undelivered TRANSACTION_COMPLETE [ 119.638078] binder: undelivered transaction 2, process died. 2018/05/19 09:52:03 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)) 2018/05/19 09:52:03 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0x66f7f3d06297b9af, @time}) 2018/05/19 09:52:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x20002900, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) 2018/05/19 09:52:03 executing program 4: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@statfs_percent={'statfs_percent', 0x3d, [0x35, 0x33, 0x34]}, 0x2c}]}) 2018/05/19 09:52:03 executing program 1: unshare(0x20000000) clone(0x3f000000, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/05/19 09:52:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e000084da80c200000086dd6002290f00383a00fe8000009c086c625a020000000000000000000000000027"], 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:52:03 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mlockall(0x3) mremap(&(0x7f000097b000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00000bb000/0xf000)=nil) 2018/05/19 09:52:03 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x0, "6c2dfc04690a4e3e9276f11379ffab33011fa707bcf10ca9b334a6e7477b1ad3767cfe5cd10dea21590bf8529c092ef4afe000eb680142a795fffeb01679b9a1dfd78bcb497e6522c02b85ef77c2a7ca30dcad3b324e7021d7c09e13d1be67c6b0e033cce97980bf3978a4f58d984efdefd4248fb624d4a8eefb8ba58744"}, 0x80) 2018/05/19 09:52:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x20002900, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) 2018/05/19 09:52:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e000084da80c200000086dd6002290f00383a00fe8000009c086c625a020000000000000000000000000027"], 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:52:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/19 09:52:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0xffff}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) [ 120.235666] FAT-fs (loop0): Directory bread(block 2563) failed [ 120.274659] FAT-fs (loop0): Directory bread(block 2564) failed 2018/05/19 09:52:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) [ 120.324581] FAT-fs (loop0): Directory bread(block 2565) failed [ 120.364610] FAT-fs (loop0): Directory bread(block 2566) failed [ 120.373463] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.398193] FAT-fs (loop0): Directory bread(block 2567) failed 2018/05/19 09:52:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e000084da80c200000086dd6002290f00383a00fe8000009c086c625a020000000000000000000000000027"], 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/05/19 09:52:03 executing program 1: unshare(0x20000000) clone(0x3f000000, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 120.423532] FAT-fs (loop0): Directory bread(block 2568) failed 2018/05/19 09:52:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 120.459247] FAT-fs (loop0): Directory bread(block 2569) failed [ 120.492221] FAT-fs (loop0): Directory bread(block 2570) failed [ 120.516307] FAT-fs (loop0): Directory bread(block 2571) failed [ 120.524393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.525194] FAT-fs (loop0): Directory bread(block 2572) failed 2018/05/19 09:52:04 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)) 2018/05/19 09:52:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/19 09:52:04 executing program 1: unshare(0x20000000) clone(0x3f000000, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/05/19 09:52:04 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0xffff}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 2018/05/19 09:52:04 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mlockall(0x3) mremap(&(0x7f000097b000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00000bb000/0xf000)=nil) 2018/05/19 09:52:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/05/19 09:52:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x20002900, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) 2018/05/19 09:52:04 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000014000)=[{&(0x7f000000d000)="2f000000190003000000140000000f000add00d800000000f0ef7fc908000f001001737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/05/19 09:52:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x20002900, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) [ 121.181155] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. [ 121.190525] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.213801] FAT-fs (loop0): Directory bread(block 2563) failed 2018/05/19 09:52:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mlockall(0x3) mremap(&(0x7f000097b000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00000bb000/0xf000)=nil) 2018/05/19 09:52:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/05/19 09:52:04 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000014000)=[{&(0x7f000000d000)="2f000000190003000000140000000f000add00d800000000f0ef7fc908000f001001737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/05/19 09:52:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) [ 121.255402] FAT-fs (loop0): Directory bread(block 2564) failed [ 121.286155] FAT-fs (loop0): Directory bread(block 2565) failed [ 121.320917] FAT-fs (loop0): Directory bread(block 2566) failed [ 121.357159] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. [ 121.359263] FAT-fs (loop0): Directory bread(block 2567) failed [ 121.389140] openvswitch: netlink: Either Ethernet header or EtherType is required. 2018/05/19 09:52:04 executing program 1: r0 = memfd_create(&(0x7f0000000000)="5b80f2feffffff", 0x7) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2018/05/19 09:52:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/05/19 09:52:04 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000014000)=[{&(0x7f000000d000)="2f000000190003000000140000000f000add00d800000000f0ef7fc908000f001001737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 121.416594] FAT-fs (loop0): Directory bread(block 2568) failed [ 121.440635] FAT-fs (loop0): Directory bread(block 2569) failed [ 121.467388] FAT-fs (loop0): Directory bread(block 2570) failed [ 121.488268] FAT-fs (loop0): Directory bread(block 2571) failed [ 121.505378] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. [ 121.520334] FAT-fs (loop0): Directory bread(block 2572) failed 2018/05/19 09:52:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)) 2018/05/19 09:52:05 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mlockall(0x3) mremap(&(0x7f000097b000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00000bb000/0xf000)=nil) 2018/05/19 09:52:05 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0xffff}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 2018/05/19 09:52:05 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mlockall(0x3) mremap(&(0x7f000097b000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00000bb000/0xf000)=nil) 2018/05/19 09:52:05 executing program 6: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000180)) r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) 2018/05/19 09:52:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)="5b80f2feffffff", 0x7) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2018/05/19 09:52:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000b) accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) listen(r0, 0x8) 2018/05/19 09:52:05 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000014000)=[{&(0x7f000000d000)="2f000000190003000000140000000f000add00d800000000f0ef7fc908000f001001737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 122.056323] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. [ 122.060923] FAT-fs (loop0): Directory bread(block 2563) failed 2018/05/19 09:52:05 executing program 6: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000180)) r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) 2018/05/19 09:52:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)="5b80f2feffffff", 0x7) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 122.102147] FAT-fs (loop0): Directory bread(block 2564) failed [ 122.119922] FAT-fs (loop0): Directory bread(block 2565) failed 2018/05/19 09:52:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000380)}], 0x1, 0x4008000) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) close(r0) [ 122.151787] FAT-fs (loop0): Directory bread(block 2566) failed 2018/05/19 09:52:05 executing program 6: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000180)) r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) 2018/05/19 09:52:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)="5b80f2feffffff", 0x7) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 122.222681] FAT-fs (loop0): Directory bread(block 2567) failed 2018/05/19 09:52:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000380)}], 0x1, 0x4008000) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) close(r0) 2018/05/19 09:52:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000380)}], 0x1, 0x4008000) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) close(r0) 2018/05/19 09:52:05 executing program 6: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000180)) r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) [ 122.287732] FAT-fs (loop0): Directory bread(block 2568) failed [ 122.324131] FAT-fs (loop0): Directory bread(block 2569) failed [ 122.357994] FAT-fs (loop0): Directory bread(block 2570) failed [ 122.397597] FAT-fs (loop0): Directory bread(block 2571) failed [ 122.425687] FAT-fs (loop0): Directory bread(block 2572) failed 2018/05/19 09:52:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0xa}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) 2018/05/19 09:52:06 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mlockall(0x3) mremap(&(0x7f000097b000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00000bb000/0xf000)=nil) 2018/05/19 09:52:06 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mlockall(0x3) mremap(&(0x7f000097b000/0x1000)=nil, 0x1000, 0xf000, 0x3, &(0x7f00000bb000/0xf000)=nil) 2018/05/19 09:52:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000b) accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) listen(r0, 0x8) 2018/05/19 09:52:06 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0xffff}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 2018/05/19 09:52:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000380)}], 0x1, 0x4008000) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) close(r0) 2018/05/19 09:52:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000380)}], 0x1, 0x4008000) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) close(r0) 2018/05/19 09:52:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x0, 0x1}, &(0x7f0000000080)=0x20) 2018/05/19 09:52:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000380)}], 0x1, 0x4008000) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) close(r0) 2018/05/19 09:52:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000380)}], 0x1, 0x4008000) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) close(r0) 2018/05/19 09:52:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x0, 0x1}, &(0x7f0000000080)=0x20) [ 123.009255] netlink: 'syz-executor6': attribute type 3 has an invalid length. 2018/05/19 09:52:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0xa}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) 2018/05/19 09:52:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x0, 0x1}, &(0x7f0000000080)=0x20) 2018/05/19 09:52:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) 2018/05/19 09:52:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xce, &(0x7f0000000040), 0x2) 2018/05/19 09:52:07 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) 2018/05/19 09:52:07 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x50, &(0x7f00000000c0), &(0x7f0000000140)=0x68) close(r2) close(r1) 2018/05/19 09:52:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000b) accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) listen(r0, 0x8) 2018/05/19 09:52:07 executing program 2: io_setup(0x800, &(0x7f0000000040)=0x0) r1 = socket$key(0xf, 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) 2018/05/19 09:52:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xce, &(0x7f0000000040), 0x2) 2018/05/19 09:52:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0xa}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) 2018/05/19 09:52:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x0, 0x1}, &(0x7f0000000080)=0x20) [ 123.981425] netlink: 'syz-executor6': attribute type 3 has an invalid length. 2018/05/19 09:52:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) 2018/05/19 09:52:07 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) 2018/05/19 09:52:07 executing program 2: io_setup(0x800, &(0x7f0000000040)=0x0) r1 = socket$key(0xf, 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) [ 124.086887] netlink: 'syz-executor6': attribute type 3 has an invalid length. 2018/05/19 09:52:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xce, &(0x7f0000000040), 0x2) 2018/05/19 09:52:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x1c0, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x80, 0x2, [{0x3c, 0x1, @notify_peers_count={{0x0, 0x1, 'notify_peers_count\x00'}, {0x0, 0x3, 0x3}, {0x0, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0xa, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0x3, 0x1, @bpf_hash_func={{0x0, 0x1, 'bpf_hash_func\x00'}, {0x0, 0x3, 0xb}, {0x0, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x1c0}, 0x1}, 0x0) 2018/05/19 09:52:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0xa}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) 2018/05/19 09:52:07 executing program 2: io_setup(0x800, &(0x7f0000000040)=0x0) r1 = socket$key(0xf, 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) 2018/05/19 09:52:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) 2018/05/19 09:52:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xce, &(0x7f0000000040), 0x2) 2018/05/19 09:52:07 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) [ 124.221110] netlink: 292 bytes leftover after parsing attributes in process `syz-executor0'. [ 124.278087] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. [ 124.293965] netlink: 'syz-executor6': attribute type 3 has an invalid length. 2018/05/19 09:52:08 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x50, &(0x7f00000000c0), &(0x7f0000000140)=0x68) close(r2) close(r1) 2018/05/19 09:52:08 executing program 2: io_setup(0x800, &(0x7f0000000040)=0x0) r1 = socket$key(0xf, 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) 2018/05/19 09:52:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 2018/05/19 09:52:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x1c0, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x80, 0x2, [{0x3c, 0x1, @notify_peers_count={{0x0, 0x1, 'notify_peers_count\x00'}, {0x0, 0x3, 0x3}, {0x0, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0xa, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0x3, 0x1, @bpf_hash_func={{0x0, 0x1, 'bpf_hash_func\x00'}, {0x0, 0x3, 0xb}, {0x0, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x1c0}, 0x1}, 0x0) 2018/05/19 09:52:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) 2018/05/19 09:52:08 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000080)) 2018/05/19 09:52:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000b) accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) listen(r0, 0x8) 2018/05/19 09:52:08 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:52:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 2018/05/19 09:52:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0xc0481273) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) 2018/05/19 09:52:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) [ 124.963506] netlink: 292 bytes leftover after parsing attributes in process `syz-executor0'. [ 124.982796] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/19 09:52:08 executing program 1: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 2018/05/19 09:52:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 2018/05/19 09:52:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x1c0, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x80, 0x2, [{0x3c, 0x1, @notify_peers_count={{0x0, 0x1, 'notify_peers_count\x00'}, {0x0, 0x3, 0x3}, {0x0, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0xa, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0x3, 0x1, @bpf_hash_func={{0x0, 0x1, 'bpf_hash_func\x00'}, {0x0, 0x3, 0xb}, {0x0, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x1c0}, 0x1}, 0x0) 2018/05/19 09:52:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0xc0481273) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) 2018/05/19 09:52:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) [ 125.144463] netlink: 292 bytes leftover after parsing attributes in process `syz-executor0'. [ 125.181504] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/19 09:52:09 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x50, &(0x7f00000000c0), &(0x7f0000000140)=0x68) close(r2) close(r1) 2018/05/19 09:52:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 2018/05/19 09:52:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 2018/05/19 09:52:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0xc0481273) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) 2018/05/19 09:52:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x1c0, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x80, 0x2, [{0x3c, 0x1, @notify_peers_count={{0x0, 0x1, 'notify_peers_count\x00'}, {0x0, 0x3, 0x3}, {0x0, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0xa, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0x3, 0x1, @bpf_hash_func={{0x0, 0x1, 'bpf_hash_func\x00'}, {0x0, 0x3, 0xb}, {0x0, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x1c0}, 0x1}, 0x0) 2018/05/19 09:52:09 executing program 1: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 2018/05/19 09:52:09 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:52:09 executing program 4: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 2018/05/19 09:52:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x1) 2018/05/19 09:52:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000000)) [ 125.930243] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:52:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0xc0481273) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) 2018/05/19 09:52:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000004"], 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 2018/05/19 09:52:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x1) 2018/05/19 09:52:09 executing program 2: socketpair(0x1e, 0x0, 0x6, &(0x7f0000000000)) 2018/05/19 09:52:09 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "cff5311583e841047bd7196b084ad491d4e9e65b3585f6367e2be2a6e9bc1222", "607c310c30b50a78820affe03385c38997d4f4a0f78a5dcafca8d96b1c751f69", "b64cf00f76d27fe64db7b83e40c4f15bd96cdf2fed331bef8944a1c33948808b", "dff0fd56c85b66493c1d68159acf2e8c7b6a012cc888ea159d0e37a0219f6e59", "d837213d74efb222893e00c87d6587d525f4458aa28bc01c78edcd4fce560a2c", "e5c748d311984f5669610cd7"}}) 2018/05/19 09:52:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x1) 2018/05/19 09:52:09 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x50, &(0x7f00000000c0), &(0x7f0000000140)=0x68) close(r2) close(r1) 2018/05/19 09:52:09 executing program 2: socketpair(0x1e, 0x0, 0x6, &(0x7f0000000000)) 2018/05/19 09:52:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000000)) 2018/05/19 09:52:09 executing program 1: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 2018/05/19 09:52:09 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "cff5311583e841047bd7196b084ad491d4e9e65b3585f6367e2be2a6e9bc1222", "607c310c30b50a78820affe03385c38997d4f4a0f78a5dcafca8d96b1c751f69", "b64cf00f76d27fe64db7b83e40c4f15bd96cdf2fed331bef8944a1c33948808b", "dff0fd56c85b66493c1d68159acf2e8c7b6a012cc888ea159d0e37a0219f6e59", "d837213d74efb222893e00c87d6587d525f4458aa28bc01c78edcd4fce560a2c", "e5c748d311984f5669610cd7"}}) 2018/05/19 09:52:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x1) 2018/05/19 09:52:09 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:52:09 executing program 4: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 2018/05/19 09:52:10 executing program 2: socketpair(0x1e, 0x0, 0x6, &(0x7f0000000000)) 2018/05/19 09:52:10 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) lseek(r0, 0x0, 0x1) 2018/05/19 09:52:10 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "cff5311583e841047bd7196b084ad491d4e9e65b3585f6367e2be2a6e9bc1222", "607c310c30b50a78820affe03385c38997d4f4a0f78a5dcafca8d96b1c751f69", "b64cf00f76d27fe64db7b83e40c4f15bd96cdf2fed331bef8944a1c33948808b", "dff0fd56c85b66493c1d68159acf2e8c7b6a012cc888ea159d0e37a0219f6e59", "d837213d74efb222893e00c87d6587d525f4458aa28bc01c78edcd4fce560a2c", "e5c748d311984f5669610cd7"}}) 2018/05/19 09:52:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000000)) [ 126.830658] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:52:10 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) lseek(r0, 0x0, 0x1) 2018/05/19 09:52:10 executing program 2: socketpair(0x1e, 0x0, 0x6, &(0x7f0000000000)) 2018/05/19 09:52:10 executing program 5: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "cff5311583e841047bd7196b084ad491d4e9e65b3585f6367e2be2a6e9bc1222", "607c310c30b50a78820affe03385c38997d4f4a0f78a5dcafca8d96b1c751f69", "b64cf00f76d27fe64db7b83e40c4f15bd96cdf2fed331bef8944a1c33948808b", "dff0fd56c85b66493c1d68159acf2e8c7b6a012cc888ea159d0e37a0219f6e59", "d837213d74efb222893e00c87d6587d525f4458aa28bc01c78edcd4fce560a2c", "e5c748d311984f5669610cd7"}}) 2018/05/19 09:52:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000)="f3", 0x1, 0x8000, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000003a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80, &(0x7f0000003e40), 0x0, &(0x7f0000003ec0)}}, {{&(0x7f0000004180)=@nl=@kern={0x10}, 0x80, &(0x7f0000004540), 0x11b, &(0x7f00000045c0)=[{0x10, 0x0, 0x24}], 0x10}}], 0x2, 0x0) 2018/05/19 09:52:10 executing program 4: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 2018/05/19 09:52:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000000)) 2018/05/19 09:52:10 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) lseek(r0, 0x0, 0x1) 2018/05/19 09:52:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) ftruncate(r1, 0x8800000) ftruncate(r1, 0xfff) 2018/05/19 09:52:10 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@integrity='integrity', 0x2c}, {@discard='discard', 0x2c}]}) 2018/05/19 09:52:10 executing program 1: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 2018/05/19 09:52:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000)="f3", 0x1, 0x8000, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000003a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80, &(0x7f0000003e40), 0x0, &(0x7f0000003ec0)}}, {{&(0x7f0000004180)=@nl=@kern={0x10}, 0x80, &(0x7f0000004540), 0x11b, &(0x7f00000045c0)=[{0x10, 0x0, 0x24}], 0x10}}], 0x2, 0x0) 2018/05/19 09:52:10 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/19 09:52:10 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) lseek(r0, 0x0, 0x1) 2018/05/19 09:52:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000)="f3", 0x1, 0x8000, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000003a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80, &(0x7f0000003e40), 0x0, &(0x7f0000003ec0)}}, {{&(0x7f0000004180)=@nl=@kern={0x10}, 0x80, &(0x7f0000004540), 0x11b, &(0x7f00000045c0)=[{0x10, 0x0, 0x24}], 0x10}}], 0x2, 0x0) [ 127.727997] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:52:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) ftruncate(r1, 0x8800000) ftruncate(r1, 0xfff) 2018/05/19 09:52:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x1f0000) write$tun(r1, &(0x7f00000000c0)={@val, @void, @x25={0x0, 0x0, 0x0, "71dac9882cca60463cdbbca9e246e84c6738145f2511169e805734b191d8f33b09308fa35a4838e0b61c9c0f322ee7d2226bae961bfcc5163cd46529b6376df3040618f7ac9b1df38172549c28261da1c948c93bf830ab61c84e2d0b278192e1cbfe4348a813"}}, 0x6d) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)) 2018/05/19 09:52:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/6, 0x6) 2018/05/19 09:52:11 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/19 09:52:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000)="f3", 0x1, 0x8000, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000003a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80, &(0x7f0000003e40), 0x0, &(0x7f0000003ec0)}}, {{&(0x7f0000004180)=@nl=@kern={0x10}, 0x80, &(0x7f0000004540), 0x11b, &(0x7f00000045c0)=[{0x10, 0x0, 0x24}], 0x10}}], 0x2, 0x0) 2018/05/19 09:52:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x1f0000) write$tun(r1, &(0x7f00000000c0)={@val, @void, @x25={0x0, 0x0, 0x0, "71dac9882cca60463cdbbca9e246e84c6738145f2511169e805734b191d8f33b09308fa35a4838e0b61c9c0f322ee7d2226bae961bfcc5163cd46529b6376df3040618f7ac9b1df38172549c28261da1c948c93bf830ab61c84e2d0b278192e1cbfe4348a813"}}, 0x6d) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)) 2018/05/19 09:52:11 executing program 4: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 2018/05/19 09:52:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/6, 0x6) 2018/05/19 09:52:11 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) ftruncate(r1, 0x8800000) ftruncate(r1, 0xfff) 2018/05/19 09:52:11 executing program 2: r0 = socket(0xa, 0x1, 0x0) semget(0x3, 0x7, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000300)=""/4096) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x9, &(0x7f0000000200)=0x4) semget$private(0x0, 0x0, 0x150) setitimer(0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2a140, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000014c0)={0x0, 0xf004}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001300), &(0x7f0000001340)=0x14) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 2018/05/19 09:52:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x1f0000) write$tun(r1, &(0x7f00000000c0)={@val, @void, @x25={0x0, 0x0, 0x0, "71dac9882cca60463cdbbca9e246e84c6738145f2511169e805734b191d8f33b09308fa35a4838e0b61c9c0f322ee7d2226bae961bfcc5163cd46529b6376df3040618f7ac9b1df38172549c28261da1c948c93bf830ab61c84e2d0b278192e1cbfe4348a813"}}, 0x6d) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)) 2018/05/19 09:52:11 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/19 09:52:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/19 09:52:11 executing program 6: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="dde9d81cba33", [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x304, 0x5, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/05/19 09:52:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/6, 0x6) 2018/05/19 09:52:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/19 09:52:11 executing program 6: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="dde9d81cba33", [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x304, 0x5, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) [ 128.597743] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 09:52:11 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/19 09:52:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x1f0000) write$tun(r1, &(0x7f00000000c0)={@val, @void, @x25={0x0, 0x0, 0x0, "71dac9882cca60463cdbbca9e246e84c6738145f2511169e805734b191d8f33b09308fa35a4838e0b61c9c0f322ee7d2226bae961bfcc5163cd46529b6376df3040618f7ac9b1df38172549c28261da1c948c93bf830ab61c84e2d0b278192e1cbfe4348a813"}}, 0x6d) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)) 2018/05/19 09:52:11 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) ftruncate(r1, 0x8800000) ftruncate(r1, 0xfff) 2018/05/19 09:52:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/6, 0x6) 2018/05/19 09:52:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/19 09:52:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000dc5f98)) 2018/05/19 09:52:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001840)={"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"}) 2018/05/19 09:52:12 executing program 6: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="dde9d81cba33", [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x304, 0x5, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/05/19 09:52:12 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sync() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x426) inotify_rm_watch(0xffffffffffffffff, 0x0) 2018/05/19 09:52:12 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/19 09:52:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x20, 0x21, 0x11, 0x0, 0x0, {0xa}}, 0x20}, 0x1}, 0x0) 2018/05/19 09:52:12 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x1e8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x628) 2018/05/19 09:52:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)='U', 0x1}], 0x1) close(r0) 2018/05/19 09:52:12 executing program 6: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="dde9d81cba33", [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x304, 0x5, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) [ 129.621367] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'broute' [ 129.637330] nla_parse: 2 callbacks suppressed [ 129.637339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 129.745783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/19 09:52:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000dc5f98)) 2018/05/19 09:52:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/19 09:52:12 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/83, 0x53) getdents64(r0, &(0x7f00000003c0), 0x0) 2018/05/19 09:52:12 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001840)={"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"}) 2018/05/19 09:52:12 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sync() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x426) inotify_rm_watch(0xffffffffffffffff, 0x0) 2018/05/19 09:52:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001840)={"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"}) 2018/05/19 09:52:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x20, 0x21, 0x11, 0x0, 0x0, {0xa}}, 0x20}, 0x1}, 0x0) 2018/05/19 09:52:12 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000dc5f98)) 2018/05/19 09:52:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) [ 129.876802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/19 09:52:13 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/83, 0x53) getdents64(r0, &(0x7f00000003c0), 0x0) 2018/05/19 09:52:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x20, 0x21, 0x11, 0x0, 0x0, {0xa}}, 0x20}, 0x1}, 0x0) 2018/05/19 09:52:13 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sync() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x426) inotify_rm_watch(0xffffffffffffffff, 0x0) 2018/05/19 09:52:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001840)={"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"}) 2018/05/19 09:52:13 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001840)={"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"}) [ 130.018262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/19 09:52:13 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/19 09:52:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000dc5f98)) 2018/05/19 09:52:13 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/83, 0x53) getdents64(r0, &(0x7f00000003c0), 0x0) 2018/05/19 09:52:13 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001840)={"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"}) 2018/05/19 09:52:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x20, 0x21, 0x11, 0x0, 0x0, {0xa}}, 0x20}, 0x1}, 0x0) 2018/05/19 09:52:13 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sync() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x426) inotify_rm_watch(0xffffffffffffffff, 0x0) 2018/05/19 09:52:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfdfdffff}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001840)={"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"}) 2018/05/19 09:52:13 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/83, 0x53) getdents64(r0, &(0x7f00000003c0), 0x0) 2018/05/19 09:52:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/19 09:52:13 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/83, 0x53) getdents64(r0, &(0x7f00000003c0), 0x0) [ 130.217507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/19 09:52:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/19 09:52:13 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001040)=0xfffffffffffffe73, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=@in6={0xa}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000002680)="b9773b67dcafabc9ebe09cbe985079e62ed432be3982d4b96892b621201f276b3aae337317a62839ad1b56fdbd9af898da5f3f0b0b8c2c93684a09479dd9b3f58ce9a850802e15bcd3abb9064d01146836d5f1443181ed4b60a711ecd885ba4bbe481f73e534ab278fc29e9d028250cc26ae6f20266db836c8d1d192e57d81f8", 0x80}], 0x1}], 0x1, 0x0) 2018/05/19 09:52:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/19 09:52:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xea, &(0x7f00000004c0)=""/234, 0x1000, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f00000015c0)=""/4096}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0044dff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000200)=""/136, 0xc8, &(0x7f00000003c0)=""/200}) 2018/05/19 09:52:13 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:13 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/19 09:52:13 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4012}) pread64(r0, &(0x7f0000000040), 0x0, 0x0) 2018/05/19 09:52:13 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001040)=0xfffffffffffffe73, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=@in6={0xa}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000002680)="b9773b67dcafabc9ebe09cbe985079e62ed432be3982d4b96892b621201f276b3aae337317a62839ad1b56fdbd9af898da5f3f0b0b8c2c93684a09479dd9b3f58ce9a850802e15bcd3abb9064d01146836d5f1443181ed4b60a711ecd885ba4bbe481f73e534ab278fc29e9d028250cc26ae6f20266db836c8d1d192e57d81f8", 0x80}], 0x1}], 0x1, 0x0) 2018/05/19 09:52:13 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/83, 0x53) getdents64(r0, &(0x7f00000003c0), 0x0) 2018/05/19 09:52:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/05/19 09:52:13 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/83, 0x53) getdents64(r0, &(0x7f00000003c0), 0x0) 2018/05/19 09:52:13 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001040)=0xfffffffffffffe73, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=@in6={0xa}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000002680)="b9773b67dcafabc9ebe09cbe985079e62ed432be3982d4b96892b621201f276b3aae337317a62839ad1b56fdbd9af898da5f3f0b0b8c2c93684a09479dd9b3f58ce9a850802e15bcd3abb9064d01146836d5f1443181ed4b60a711ecd885ba4bbe481f73e534ab278fc29e9d028250cc26ae6f20266db836c8d1d192e57d81f8", 0x80}], 0x1}], 0x1, 0x0) 2018/05/19 09:52:13 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/19 09:52:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xea, &(0x7f00000004c0)=""/234, 0x1000, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f00000015c0)=""/4096}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0044dff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000200)=""/136, 0xc8, &(0x7f00000003c0)=""/200}) 2018/05/19 09:52:13 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4012}) pread64(r0, &(0x7f0000000040), 0x0, 0x0) 2018/05/19 09:52:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") rmdir(&(0x7f0000000040)='./control\x00') 2018/05/19 09:52:13 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@bridge_getlink={0x28, 0x12, 0xa01, 0x0, 0x0, {0x7}, [@IFLA_IF_NETNSID={0x8, 0x1d, 0xf0ffffff}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:52:13 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000001040)=0xfffffffffffffe73, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=@in6={0xa}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000002680)="b9773b67dcafabc9ebe09cbe985079e62ed432be3982d4b96892b621201f276b3aae337317a62839ad1b56fdbd9af898da5f3f0b0b8c2c93684a09479dd9b3f58ce9a850802e15bcd3abb9064d01146836d5f1443181ed4b60a711ecd885ba4bbe481f73e534ab278fc29e9d028250cc26ae6f20266db836c8d1d192e57d81f8", 0x80}], 0x1}], 0x1, 0x0) 2018/05/19 09:52:14 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/19 09:52:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xea, &(0x7f00000004c0)=""/234, 0x1000, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f00000015c0)=""/4096}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0044dff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000200)=""/136, 0xc8, &(0x7f00000003c0)=""/200}) 2018/05/19 09:52:14 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4012}) pread64(r0, &(0x7f0000000040), 0x0, 0x0) 2018/05/19 09:52:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) 2018/05/19 09:52:14 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@bridge_getlink={0x28, 0x12, 0xa01, 0x0, 0x0, {0x7}, [@IFLA_IF_NETNSID={0x8, 0x1d, 0xf0ffffff}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:52:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") rmdir(&(0x7f0000000040)='./control\x00') 2018/05/19 09:52:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/05/19 09:52:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/05/19 09:52:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) 2018/05/19 09:52:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xea, &(0x7f00000004c0)=""/234, 0x1000, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f00000015c0)=""/4096}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0044dff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000200)=""/136, 0xc8, &(0x7f00000003c0)=""/200}) 2018/05/19 09:52:14 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@bridge_getlink={0x28, 0x12, 0xa01, 0x0, 0x0, {0x7}, [@IFLA_IF_NETNSID={0x8, 0x1d, 0xf0ffffff}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:52:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") rmdir(&(0x7f0000000040)='./control\x00') 2018/05/19 09:52:14 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4012}) pread64(r0, &(0x7f0000000040), 0x0, 0x0) 2018/05/19 09:52:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) 2018/05/19 09:52:14 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/19 09:52:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") rmdir(&(0x7f0000000040)='./control\x00') 2018/05/19 09:52:15 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@bridge_getlink={0x28, 0x12, 0xa01, 0x0, 0x0, {0x7}, [@IFLA_IF_NETNSID={0x8, 0x1d, 0xf0ffffff}]}, 0x28}, 0x1}, 0x0) 2018/05/19 09:52:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) 2018/05/19 09:52:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0xff) r1 = socket(0x9, 0x80000, 0x3) ioctl(r1, 0x100, &(0x7f0000000280)="693ca323ad6ddb74ec7b3db32ec09905b60d7d17ec7167f7e951474aa9359a23bbccdd7da9c6879bcbfcdb367de3fdc3d2a22245757b6f0af5e7baa86de655a6897d8b1c51d176ae36a4cb9a360c8e1302af8706f62db5f40c130c038e9e29d96a92a2f661694ca55344f090d158ae07b9ca76b0cb13721ed3f22ba89b3de0b7a1c9ccc3bb674e7310e1a6a62894d0ee97c6bdacbdebb8c5d2af70e3bb39d5c390b9e4ec5948fa5159ab72722971658e37d0b254126537ef4dc281007312867cf86f31bf9a9d0ead676ece361d3d1f748e03ac38b9c3d38f9965e206cddf6d5d62ae569e257d9e72bfe338e94aaa02f7") ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x3, 0x4) r2 = dup(r0) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/19 09:52:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}], 0x1c) 2018/05/19 09:52:15 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/19 09:52:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/05/19 09:52:15 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/19 09:52:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/05/19 09:52:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000f6dfe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 2018/05/19 09:52:15 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x2, 0x80000004) 2018/05/19 09:52:15 executing program 7: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', @ifru_data=&(0x7f0000000000)="00b4ae9fca19fba868f03158de8d12d04ed14126c514de7b02ade828cb2a0180"}) 2018/05/19 09:52:15 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000000080), &(0x7f0000000040), 0x8) 2018/05/19 09:52:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000f6dfe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 2018/05/19 09:52:15 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x2, 0x80000004) 2018/05/19 09:52:16 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, &(0x7f0000001900)="8f", 0x1, 0x0, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "3adb91317667"}, 0x80) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x27b, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000980)=@hci, 0xc, &(0x7f00000009c0), 0xa3, &(0x7f0000000a00)=""/240, 0xf0}}], 0x2d5, 0x2042, &(0x7f0000000b80)={0x77359400}) 2018/05/19 09:52:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x2, 0x80000004) 2018/05/19 09:52:16 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000000080), &(0x7f0000000040), 0x8) 2018/05/19 09:52:16 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000f6dfe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 2018/05/19 09:52:16 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/19 09:52:16 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/19 09:52:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/05/19 09:52:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 2018/05/19 09:52:16 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000000080), &(0x7f0000000040), 0x8) 2018/05/19 09:52:16 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000f6dfe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 2018/05/19 09:52:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x2, 0x80000004) 2018/05/19 09:52:16 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, &(0x7f0000001900)="8f", 0x1, 0x0, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "3adb91317667"}, 0x80) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x27b, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000980)=@hci, 0xc, &(0x7f00000009c0), 0xa3, &(0x7f0000000a00)=""/240, 0xf0}}], 0x2d5, 0x2042, &(0x7f0000000b80)={0x77359400}) 2018/05/19 09:52:16 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, &(0x7f0000001900)="8f", 0x1, 0x0, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "3adb91317667"}, 0x80) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x27b, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000980)=@hci, 0xc, &(0x7f00000009c0), 0xa3, &(0x7f0000000a00)=""/240, 0xf0}}], 0x2d5, 0x2042, &(0x7f0000000b80)={0x77359400}) 2018/05/19 09:52:16 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000000080), &(0x7f0000000040), 0x8) 2018/05/19 09:52:16 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="7383dea6b136"}, 0x14) 2018/05/19 09:52:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000000000000024, 0xfffffffffffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/19 09:52:16 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000100)=[{}, {0xffffffff7fffffff}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/19 09:52:17 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, &(0x7f0000001900)="8f", 0x1, 0x0, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "3adb91317667"}, 0x80) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x27b, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000980)=@hci, 0xc, &(0x7f00000009c0), 0xa3, &(0x7f0000000a00)=""/240, 0xf0}}], 0x2d5, 0x2042, &(0x7f0000000b80)={0x77359400}) 2018/05/19 09:52:17 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="7383dea6b136"}, 0x14) 2018/05/19 09:52:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000000000000024, 0xfffffffffffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/19 09:52:17 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000100)=[{}, {0xffffffff7fffffff}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/19 09:52:17 executing program 1: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x100c002, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/05/19 09:52:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6a, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/05/19 09:52:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, &(0x7f00000012c0), &(0x7f0000000100), &(0x7f00000022c0), &(0x7f0000000000)) 2018/05/19 09:52:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:52:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6a, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/05/19 09:52:17 executing program 1: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x100c002, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/05/19 09:52:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000000000000024, 0xfffffffffffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/19 09:52:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:52:17 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 2018/05/19 09:52:17 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000100)=[{}, {0xffffffff7fffffff}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/19 09:52:17 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="7383dea6b136"}, 0x14) 2018/05/19 09:52:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, &(0x7f00000012c0), &(0x7f0000000100), &(0x7f00000022c0), &(0x7f0000000000)) 2018/05/19 09:52:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6a, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/05/19 09:52:17 executing program 1: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x100c002, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/05/19 09:52:17 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="7383dea6b136"}, 0x14) 2018/05/19 09:52:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000000000000024, 0xfffffffffffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 134.811833] device lo entered promiscuous mode [ 134.876441] device lo left promiscuous mode 2018/05/19 09:52:18 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6a, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/05/19 09:52:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:52:18 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000100)=[{}, {0xffffffff7fffffff}]}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/19 09:52:18 executing program 1: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x100c002, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 2018/05/19 09:52:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2}, 0x2c) 2018/05/19 09:52:18 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x411}, 0x14}, 0x1}, 0x0) 2018/05/19 09:52:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, &(0x7f00000012c0), &(0x7f0000000100), &(0x7f00000022c0), &(0x7f0000000000)) 2018/05/19 09:52:18 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000040)) 2018/05/19 09:52:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002]}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/19 09:52:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 09:52:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2}, 0x2c) 2018/05/19 09:52:18 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) dup3(r0, r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/19 09:52:18 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x411}, 0x14}, 0x1}, 0x0) 2018/05/19 09:52:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002]}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/19 09:52:19 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) dup3(r0, r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/19 09:52:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="e2ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:52:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, &(0x7f00000012c0), &(0x7f0000000100), &(0x7f00000022c0), &(0x7f0000000000)) 2018/05/19 09:52:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7027}, 0x20) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x0) 2018/05/19 09:52:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2}, 0x2c) 2018/05/19 09:52:19 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x411}, 0x14}, 0x1}, 0x0) 2018/05/19 09:52:19 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) dup3(r0, r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/19 09:52:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002]}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/19 09:52:19 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x411}, 0x14}, 0x1}, 0x0) 2018/05/19 09:52:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2}, 0x2c) 2018/05/19 09:52:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002]}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/19 09:52:19 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) dup3(r0, r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/19 09:52:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="e2ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:52:19 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) 2018/05/19 09:52:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b231d17db106a27f1986935791c9ac9ee380506b46bd0770599f12709aff5541c4520f73e91716fbdc789740ac9a0696c3c4b2d5fd3c436db813f321230e419a"}}, 0x80}, 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 2018/05/19 09:52:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7027}, 0x20) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x0) 2018/05/19 09:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mlockall(0x2) 2018/05/19 09:52:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x6, &(0x7f0000000040)="40efd94a", 0x4) 2018/05/19 09:52:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="e2ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:52:20 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) dup3(r0, r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/19 09:52:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b231d17db106a27f1986935791c9ac9ee380506b46bd0770599f12709aff5541c4520f73e91716fbdc789740ac9a0696c3c4b2d5fd3c436db813f321230e419a"}}, 0x80}, 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 2018/05/19 09:52:20 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) dup3(r0, r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/19 09:52:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b231d17db106a27f1986935791c9ac9ee380506b46bd0770599f12709aff5541c4520f73e91716fbdc789740ac9a0696c3c4b2d5fd3c436db813f321230e419a"}}, 0x80}, 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 2018/05/19 09:52:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x6, &(0x7f0000000040)="40efd94a", 0x4) 2018/05/19 09:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mlockall(0x2) 2018/05/19 09:52:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b231d17db106a27f1986935791c9ac9ee380506b46bd0770599f12709aff5541c4520f73e91716fbdc789740ac9a0696c3c4b2d5fd3c436db813f321230e419a"}}, 0x80}, 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 2018/05/19 09:52:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b231d17db106a27f1986935791c9ac9ee380506b46bd0770599f12709aff5541c4520f73e91716fbdc789740ac9a0696c3c4b2d5fd3c436db813f321230e419a"}}, 0x80}, 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 2018/05/19 09:52:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="e2ec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 09:52:20 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 2018/05/19 09:52:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x6, &(0x7f0000000040)="40efd94a", 0x4) 2018/05/19 09:52:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b231d17db106a27f1986935791c9ac9ee380506b46bd0770599f12709aff5541c4520f73e91716fbdc789740ac9a0696c3c4b2d5fd3c436db813f321230e419a"}}, 0x80}, 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 2018/05/19 09:52:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac0fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b231d17db106a27f1986935791c9ac9ee380506b46bd0770599f12709aff5541c4520f73e91716fbdc789740ac9a0696c3c4b2d5fd3c436db813f321230e419a"}}, 0x80}, 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/44, 0x2c}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/116, 0x74}], 0x1, &(0x7f00000047c0)=""/153, 0x99}}], 0x2, 0x0, 0x0) 2018/05/19 09:52:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x6, &(0x7f0000000040)="40efd94a", 0x4) 2018/05/19 09:52:20 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") 2018/05/19 09:52:20 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0d0000000000000000306f000000000001"]}) 2018/05/19 09:52:20 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 2018/05/19 09:52:20 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) dup3(r0, r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/19 09:52:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7027}, 0x20) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x0) 2018/05/19 09:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mlockall(0x2) 2018/05/19 09:52:21 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001240)=[{&(0x7f0000000080)="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", 0xff7, 0x9}], 0x3000000, &(0x7f00000012c0)) 2018/05/19 09:52:21 executing program 5: r0 = eventfd2(0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 2018/05/19 09:52:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 2018/05/19 09:52:21 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") 2018/05/19 09:52:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mlockall(0x2) 2018/05/19 09:52:21 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0d0000000000000000306f000000000001"]}) [ 137.942805] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x3ed289fd) [ 137.950672] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 137.976096] F2FS-fs (loop6): Unable to read 2th superblock [ 137.982615] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x3ed289fd) [ 137.990349] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 2018/05/19 09:52:21 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0d0000000000000000306f000000000001"]}) 2018/05/19 09:52:21 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") [ 138.017850] F2FS-fs (loop6): Unable to read 2th superblock [ 138.053614] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x3ed289fd) 2018/05/19 09:52:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x1}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) [ 138.061369] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 138.113830] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 138.120327] F2FS-fs (loop6): Unable to read 2th superblock [ 138.128258] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x3ed289fd) [ 138.158421] netlink: 'syz-executor4': attribute type 2 has an invalid length. 2018/05/19 09:52:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 2018/05/19 09:52:22 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0d0000000000000000306f000000000001"]}) 2018/05/19 09:52:22 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") 2018/05/19 09:52:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000040)=0x401, 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) 2018/05/19 09:52:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x1}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/05/19 09:52:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7027}, 0x20) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x0) 2018/05/19 09:52:22 executing program 5: r0 = eventfd2(0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 2018/05/19 09:52:22 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="bd60787c95499889e456a21d1a4695dc", 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:52:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 2018/05/19 09:52:22 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0xff, 0x0, 0x3, 0xfff}, 0x1b4) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) [ 138.913200] netlink: 'syz-executor4': attribute type 2 has an invalid length. 2018/05/19 09:52:22 executing program 7: symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/70, 0x1) 2018/05/19 09:52:22 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="bd60787c95499889e456a21d1a4695dc", 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:52:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000040)=0x401, 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) 2018/05/19 09:52:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x1}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/05/19 09:52:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000040)=0x401, 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) 2018/05/19 09:52:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 2018/05/19 09:52:22 executing program 7: symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/70, 0x1) [ 139.100904] netlink: 'syz-executor4': attribute type 2 has an invalid length. 2018/05/19 09:52:23 executing program 5: r0 = eventfd2(0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 2018/05/19 09:52:23 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000040)=0x401, 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) 2018/05/19 09:52:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 2018/05/19 09:52:23 executing program 7: symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/70, 0x1) 2018/05/19 09:52:23 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0xff, 0x0, 0x3, 0xfff}, 0x1b4) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/05/19 09:52:23 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a020002260af801", 0x17}], 0x0, &(0x7f00000000c0)) 2018/05/19 09:52:23 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="bd60787c95499889e456a21d1a4695dc", 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:52:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x1}, [@FOU_ATTR_AF={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) [ 139.886151] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 139.890866] FAT-fs (loop0): Directory bread(block 2563) failed [ 139.918758] FAT-fs (loop0): Directory bread(block 2564) failed [ 139.924935] FAT-fs (loop0): Directory bread(block 2565) failed 2018/05/19 09:52:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 2018/05/19 09:52:23 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0xff, 0x0, 0x3, 0xfff}, 0x1b4) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/05/19 09:52:23 executing program 7: symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/70, 0x1) 2018/05/19 09:52:23 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="bd60787c95499889e456a21d1a4695dc", 0x10) dup3(r0, r1, 0x0) 2018/05/19 09:52:23 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x8100, 0xb, @dev={0xfe, 0x80}}, 0x1c) 2018/05/19 09:52:23 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x709, &(0x7f0000000000)=[{}]}, 0x10) [ 139.931481] FAT-fs (loop0): Directory bread(block 2566) failed [ 139.939446] FAT-fs (loop0): Directory bread(block 2567) failed [ 139.945646] FAT-fs (loop0): Directory bread(block 2568) failed [ 139.952085] FAT-fs (loop0): Directory bread(block 2569) failed [ 139.958191] FAT-fs (loop0): Directory bread(block 2570) failed [ 139.964531] FAT-fs (loop0): Directory bread(block 2571) failed [ 139.970628] FAT-fs (loop0): Directory bread(block 2572) failed 2018/05/19 09:52:23 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a020002260af801", 0x17}], 0x0, &(0x7f00000000c0)) [ 140.143699] FAT-fs (loop0): Directory bread(block 2563) failed [ 140.183512] FAT-fs (loop0): Directory bread(block 2564) failed [ 140.189767] FAT-fs (loop0): Directory bread(block 2565) failed [ 140.196568] FAT-fs (loop0): Directory bread(block 2566) failed [ 140.205194] FAT-fs (loop0): Directory bread(block 2567) failed [ 140.211901] FAT-fs (loop0): Directory bread(block 2568) failed [ 140.220359] FAT-fs (loop0): Directory bread(block 2569) failed [ 140.226580] FAT-fs (loop0): Directory bread(block 2570) failed [ 140.232906] FAT-fs (loop0): Directory bread(block 2571) failed [ 140.240013] FAT-fs (loop0): Directory bread(block 2572) failed 2018/05/19 09:52:23 executing program 5: r0 = eventfd2(0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 2018/05/19 09:52:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 2018/05/19 09:52:23 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0xff, 0x0, 0x3, 0xfff}, 0x1b4) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/05/19 09:52:23 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x40045542, &(0x7f00000000c0)) 2018/05/19 09:52:23 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 2018/05/19 09:52:23 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a020002260af801", 0x17}], 0x0, &(0x7f00000000c0)) 2018/05/19 09:52:23 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x8100, 0xb, @dev={0xfe, 0x80}}, 0x1c) 2018/05/19 09:52:23 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x709, &(0x7f0000000000)=[{}]}, 0x10) [ 140.849960] FAT-fs (loop0): Directory bread(block 2563) failed 2018/05/19 09:52:24 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 2018/05/19 09:52:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 2018/05/19 09:52:24 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x8100, 0xb, @dev={0xfe, 0x80}}, 0x1c) 2018/05/19 09:52:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) [ 140.891649] FAT-fs (loop0): Directory bread(block 2564) failed [ 140.900746] FAT-fs (loop0): Directory bread(block 2565) failed [ 140.919118] FAT-fs (loop0): Directory bread(block 2566) failed [ 140.940596] FAT-fs (loop0): Directory bread(block 2567) failed 2018/05/19 09:52:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000001840)) 2018/05/19 09:52:24 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) [ 140.991923] FAT-fs (loop0): Directory bread(block 2568) failed [ 141.028077] FAT-fs (loop0): Directory bread(block 2569) failed [ 141.052138] FAT-fs (loop0): Directory bread(block 2570) failed [ 141.073185] FAT-fs (loop0): Directory bread(block 2571) failed [ 141.103505] FAT-fs (loop0): Directory bread(block 2572) failed 2018/05/19 09:52:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 2018/05/19 09:52:24 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x8100, 0xb, @dev={0xfe, 0x80}}, 0x1c) 2018/05/19 09:52:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 2018/05/19 09:52:24 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 2018/05/19 09:52:24 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a020002260af801", 0x17}], 0x0, &(0x7f00000000c0)) 2018/05/19 09:52:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x60}, 0x1}, 0x0) 2018/05/19 09:52:24 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554114df45bad382d0ec01857fa07421a5de901d2da75af1f0200f5ab26d7a071ccf1cd182ffdecfb35331c5a6be1bd118f4728e9a29f8c482d9c34") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/05/19 09:52:24 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x709, &(0x7f0000000000)=[{}]}, 0x10) 2018/05/19 09:52:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 2018/05/19 09:52:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, 0x0, 0x0, 0x0, 0x10000}, 0x98) [ 141.790247] netlink: 'syz-executor5': attribute type 7 has an invalid length. [ 141.797723] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 141.812496] FAT-fs (loop0): Directory bread(block 2563) failed 2018/05/19 09:52:25 executing program 7: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/05/19 09:52:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 2018/05/19 09:52:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 141.855189] FAT-fs (loop0): Directory bread(block 2564) failed [ 141.874444] netlink: 'syz-executor5': attribute type 7 has an invalid length. [ 141.881810] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 141.899763] FAT-fs (loop0): Directory bread(block 2565) failed 2018/05/19 09:52:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, 0x0, 0x0, 0x0, 0x10000}, 0x98) [ 141.931181] FAT-fs (loop0): Directory bread(block 2566) failed [ 141.955688] FAT-fs (loop0): Directory bread(block 2567) failed 2018/05/19 09:52:25 executing program 6: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)=""/4, &(0x7f0000000080)=0x4) 2018/05/19 09:52:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x60}, 0x1}, 0x0) [ 141.998186] FAT-fs (loop0): Directory bread(block 2568) failed [ 142.042096] FAT-fs (loop0): Directory bread(block 2569) failed [ 142.067606] netlink: 'syz-executor5': attribute type 7 has an invalid length. [ 142.078556] FAT-fs (loop0): Directory bread(block 2570) failed [ 142.108157] FAT-fs (loop0): Directory bread(block 2571) failed [ 142.123676] FAT-fs (loop0): Directory bread(block 2572) failed 2018/05/19 09:52:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000100)=[0x2fe]) 2018/05/19 09:52:25 executing program 7: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:25 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) r2 = socket(0xa, 0x200000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) 2018/05/19 09:52:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, 0x0, 0x0, 0x0, 0x10000}, 0x98) 2018/05/19 09:52:25 executing program 6: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)=""/4, &(0x7f0000000080)=0x4) 2018/05/19 09:52:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x60}, 0x1}, 0x0) 2018/05/19 09:52:25 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x709, &(0x7f0000000000)=[{}]}, 0x10) 2018/05/19 09:52:25 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) 2018/05/19 09:52:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x60}, 0x1}, 0x0) 2018/05/19 09:52:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, 0x0, 0x0, 0x0, 0x10000}, 0x98) 2018/05/19 09:52:25 executing program 6: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)=""/4, &(0x7f0000000080)=0x4) 2018/05/19 09:52:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000100)=[0x2fe]) 2018/05/19 09:52:25 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) 2018/05/19 09:52:26 executing program 7: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:26 executing program 2: r0 = gettid() socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000bce000), 0xffffff36) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 2018/05/19 09:52:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000100)=[0x2fe]) 2018/05/19 09:52:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0xfde4, 0x0, 0x0, 0x0, @sint}]}) 2018/05/19 09:52:35 executing program 6: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)=""/4, &(0x7f0000000080)=0x4) 2018/05/19 09:52:35 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) 2018/05/19 09:52:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000100)=[0x2fe]) 2018/05/19 09:52:35 executing program 7: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0xfde4, 0x0, 0x0, 0x0, @sint}]}) 2018/05/19 09:52:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009cc0)=[{{&(0x7f0000002b40)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)="c8", 0x1}], 0x1, &(0x7f0000005540)=[{0x30, 0x107, 0x326c, "a68c701d459f9ae56c24d6b52c6f3ea8be4dc2211bb42de128229d6d7e92"}], 0x30, 0x811}, 0x6}, {{&(0x7f00000076c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip_vti0\x00'}}, 0x80, &(0x7f0000008a80)=[{&(0x7f00000089c0)="af", 0x1}], 0x1, &(0x7f0000008b00)}}], 0x2, 0x40400d4) 2018/05/19 09:52:35 executing program 2: r0 = gettid() socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000bce000), 0xffffff36) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 2018/05/19 09:52:35 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) r2 = socket(0xa, 0x200000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) 2018/05/19 09:52:35 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @loopback}}, &(0x7f0000000080)=0x80) 2018/05/19 09:52:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0xfde4, 0x0, 0x0, 0x0, @sint}]}) 2018/05/19 09:52:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000900)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000940)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], r1, 0x1, 0x1}}, 0xfd69) 2018/05/19 09:52:35 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)) 2018/05/19 09:52:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009cc0)=[{{&(0x7f0000002b40)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)="c8", 0x1}], 0x1, &(0x7f0000005540)=[{0x30, 0x107, 0x326c, "a68c701d459f9ae56c24d6b52c6f3ea8be4dc2211bb42de128229d6d7e92"}], 0x30, 0x811}, 0x6}, {{&(0x7f00000076c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip_vti0\x00'}}, 0x80, &(0x7f0000008a80)=[{&(0x7f00000089c0)="af", 0x1}], 0x1, &(0x7f0000008b00)}}], 0x2, 0x40400d4) 2018/05/19 09:52:35 executing program 7: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/19 09:52:35 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @loopback}}, &(0x7f0000000080)=0x80) 2018/05/19 09:52:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000900)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000940)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], r1, 0x1, 0x1}}, 0xfd69) 2018/05/19 09:52:35 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @loopback}}, &(0x7f0000000080)=0x80) 2018/05/19 09:52:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0xfde4, 0x0, 0x0, 0x0, @sint}]}) 2018/05/19 09:52:44 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@expose_privroot='expose_privroot', 0x2c}, {@barrier_none='barrier=none', 0x2c}, {@usrjquota='usrjquota', 0x2c}]}) 2018/05/19 09:52:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009cc0)=[{{&(0x7f0000002b40)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)="c8", 0x1}], 0x1, &(0x7f0000005540)=[{0x30, 0x107, 0x326c, "a68c701d459f9ae56c24d6b52c6f3ea8be4dc2211bb42de128229d6d7e92"}], 0x30, 0x811}, 0x6}, {{&(0x7f00000076c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip_vti0\x00'}}, 0x80, &(0x7f0000008a80)=[{&(0x7f00000089c0)="af", 0x1}], 0x1, &(0x7f0000008b00)}}], 0x2, 0x40400d4) 2018/05/19 09:52:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000900)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000940)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], r1, 0x1, 0x1}}, 0xfd69) 2018/05/19 09:52:44 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 2018/05/19 09:52:44 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @loopback}}, &(0x7f0000000080)=0x80) 2018/05/19 09:52:44 executing program 2: r0 = gettid() socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000bce000), 0xffffff36) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 2018/05/19 09:52:44 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) r2 = socket(0xa, 0x200000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) 2018/05/19 09:52:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000900)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000940)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], r1, 0x1, 0x1}}, 0xfd69) 2018/05/19 09:52:44 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000140)) 2018/05/19 09:52:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$F_GET_RW_HINT(r0, 0x5, &(0x7f00000000c0)) 2018/05/19 09:52:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009cc0)=[{{&(0x7f0000002b40)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)="c8", 0x1}], 0x1, &(0x7f0000005540)=[{0x30, 0x107, 0x326c, "a68c701d459f9ae56c24d6b52c6f3ea8be4dc2211bb42de128229d6d7e92"}], 0x30, 0x811}, 0x6}, {{&(0x7f00000076c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip_vti0\x00'}}, 0x80, &(0x7f0000008a80)=[{&(0x7f00000089c0)="af", 0x1}], 0x1, &(0x7f0000008b00)}}], 0x2, 0x40400d4) [ 161.300956] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 161.300956] 2018/05/19 09:52:44 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') [ 161.405983] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 161.405983] 2018/05/19 09:52:53 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) r2 = socket(0xa, 0x200000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) 2018/05/19 09:52:53 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000140)) 2018/05/19 09:52:53 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) 2018/05/19 09:52:53 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000080affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/05/19 09:52:53 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 2018/05/19 09:52:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@expose_privroot='expose_privroot', 0x2c}, {@barrier_none='barrier=none', 0x2c}, {@usrjquota='usrjquota', 0x2c}]}) 2018/05/19 09:52:53 executing program 2: r0 = gettid() socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000bce000), 0xffffff36) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 2018/05/19 09:52:53 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28}, {0x6}]}, 0x10) 2018/05/19 09:52:53 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 2018/05/19 09:52:53 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000140)) 2018/05/19 09:52:53 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) [ 170.490610] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 170.508163] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 170.508163] 2018/05/19 09:52:53 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000140)) 2018/05/19 09:52:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}], 0x2c) 2018/05/19 09:52:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@expose_privroot='expose_privroot', 0x2c}, {@barrier_none='barrier=none', 0x2c}, {@usrjquota='usrjquota', 0x2c}]}) 2018/05/19 09:52:53 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000080affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/05/19 09:52:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) [ 170.630850] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 170.657458] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 170.657458] 2018/05/19 09:53:02 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) mmap(&(0x7f0000ac5000/0x3000)=nil, 0x3000, 0x0, 0x20013, r0, 0x0) 2018/05/19 09:53:02 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000080affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/05/19 09:53:02 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) 2018/05/19 09:53:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) 2018/05/19 09:53:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@expose_privroot='expose_privroot', 0x2c}, {@barrier_none='barrier=none', 0x2c}, {@usrjquota='usrjquota', 0x2c}]}) 2018/05/19 09:53:02 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/19 09:53:02 executing program 6: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') creat(&(0x7f0000000000)='./.ile1\x00', 0x0) 2018/05/19 09:53:02 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0x1801, &(0x7f0000ffd000/0x3000)=nil) 2018/05/19 09:53:02 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/19 09:53:02 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0x1801, &(0x7f0000ffd000/0x3000)=nil) 2018/05/19 09:53:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 2018/05/19 09:53:02 executing program 6: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') creat(&(0x7f0000000000)='./.ile1\x00', 0x0) 2018/05/19 09:53:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) 2018/05/19 09:53:02 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) [ 179.709418] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 179.729901] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 179.729901] 2018/05/19 09:53:02 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000080affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/05/19 09:53:03 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0xffffff94, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/05/19 09:53:03 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0x1801, &(0x7f0000ffd000/0x3000)=nil) 2018/05/19 09:53:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) [ 179.830278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/19 09:53:03 executing program 6: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') creat(&(0x7f0000000000)='./.ile1\x00', 0x0) 2018/05/19 09:53:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) 2018/05/19 09:53:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x20000050, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) 2018/05/19 09:53:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="81", &(0x7f00000000c0)}, 0x20) 2018/05/19 09:53:03 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0xffffff94, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/05/19 09:53:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/19 09:53:03 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0x1801, &(0x7f0000ffd000/0x3000)=nil) 2018/05/19 09:53:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) [ 179.980755] validate_nla: 5 callbacks suppressed [ 179.980765] netlink: 'syz-executor5': attribute type 2 has an invalid length. [ 179.993037] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/05/19 09:53:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18, {{0x4}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x4}}}}]}]}, 0x1e8) 2018/05/19 09:53:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="81", &(0x7f00000000c0)}, 0x20) 2018/05/19 09:53:03 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0xffffff94, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/05/19 09:53:03 executing program 6: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') creat(&(0x7f0000000000)='./.ile1\x00', 0x0) [ 180.039951] netlink: 'syz-executor5': attribute type 2 has an invalid length. [ 180.047321] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/05/19 09:53:03 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x2) 2018/05/19 09:53:03 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x3c1, 0x2, 0x2b0, [0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x140, 0x140, 0x178, [@physdev={'physdev\x00', 0x70, {{'veth1_to_bond\x00', {}, 'syzkaller1\x00'}}}, @cluster={'cluster\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0x5, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}]}, 0x328) 2018/05/19 09:53:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 2018/05/19 09:53:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x20000050, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) [ 180.116253] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 180.164466] kernel msg: ebtables bug: please report to author: Chains don't start at beginning [ 180.176387] netlink: 'syz-executor5': attribute type 2 has an invalid length. [ 180.183731] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 180.200109] xt_AUDIT: Audit type out of range (valid range: 0..2) 2018/05/19 09:53:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="81", &(0x7f00000000c0)}, 0x20) 2018/05/19 09:53:03 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0xffffff94, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/05/19 09:53:03 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5fdebd04a2316f13"}, 0x10}, 0x1}, 0x0) 2018/05/19 09:53:03 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x2) 2018/05/19 09:53:03 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x3c1, 0x2, 0x2b0, [0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x140, 0x140, 0x178, [@physdev={'physdev\x00', 0x70, {{'veth1_to_bond\x00', {}, 'syzkaller1\x00'}}}, @cluster={'cluster\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0x5, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}]}, 0x328) 2018/05/19 09:53:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x20000050, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) 2018/05/19 09:53:03 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 2018/05/19 09:53:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18, {{0x4}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x4}}}}]}]}, 0x1e8) 2018/05/19 09:53:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="81", &(0x7f00000000c0)}, 0x20) 2018/05/19 09:53:03 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x2) 2018/05/19 09:53:03 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5fdebd04a2316f13"}, 0x10}, 0x1}, 0x0) 2018/05/19 09:53:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4)={0x0, 0x4, 0x4000020030}, 0xc) writev(r0, &(0x7f00006d6000)=[{&(0x7f0000000100)='3', 0x1}], 0x1) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000513f59)="c5", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000674000), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="4c69dd5a275eae918d3f379a661c0b08f8d075a373131edf7e48dd86257b353c2376a6ac0eac18437a294dfa80ca7f3eb86f5b0268629f0984bcd89c921e72daeb971305e274d908a25c3c091437a15d729186705eeec62e8f56317c294bc142c92b69190bee5f8957d8c08480b8419876714942888c36acad62dac6a4b39b8c228560a56e5336e77d02ff0fd706988929e4ec0d797e5aaa578131198e932fe0d0c4869051f8931ea84b9ec7cfa8a91956", 0xb1}], 0x1) write(r0, &(0x7f00000003c0)=':', 0x1) write(r0, &(0x7f0000000140)="19", 0x1) [ 180.307199] netlink: 'syz-executor5': attribute type 2 has an invalid length. [ 180.314527] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 180.325007] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 180.332054] kernel msg: ebtables bug: please report to author: Chains don't start at beginning 2018/05/19 09:53:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18, {{0x4}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x4}}}}]}]}, 0x1e8) 2018/05/19 09:53:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0xffffffff}) 2018/05/19 09:53:03 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5fdebd04a2316f13"}, 0x10}, 0x1}, 0x0) 2018/05/19 09:53:03 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x3c1, 0x2, 0x2b0, [0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x140, 0x140, 0x178, [@physdev={'physdev\x00', 0x70, {{'veth1_to_bond\x00', {}, 'syzkaller1\x00'}}}, @cluster={'cluster\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0x5, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}]}, 0x328) 2018/05/19 09:53:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x20000050, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) [ 180.472155] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 180.485540] netlink: 'syz-executor5': attribute type 2 has an invalid length. [ 180.492864] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 180.501348] kernel msg: ebtables bug: please report to author: Chains don't start at beginning 2018/05/19 09:53:03 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getresuid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x2) 2018/05/19 09:53:03 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5fdebd04a2316f13"}, 0x10}, 0x1}, 0x0) 2018/05/19 09:53:03 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}) 2018/05/19 09:53:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18, {{0x4}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x4}}}}]}]}, 0x1e8) 2018/05/19 09:53:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4)={0x0, 0x4, 0x4000020030}, 0xc) writev(r0, &(0x7f00006d6000)=[{&(0x7f0000000100)='3', 0x1}], 0x1) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000513f59)="c5", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000674000), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="4c69dd5a275eae918d3f379a661c0b08f8d075a373131edf7e48dd86257b353c2376a6ac0eac18437a294dfa80ca7f3eb86f5b0268629f0984bcd89c921e72daeb971305e274d908a25c3c091437a15d729186705eeec62e8f56317c294bc142c92b69190bee5f8957d8c08480b8419876714942888c36acad62dac6a4b39b8c228560a56e5336e77d02ff0fd706988929e4ec0d797e5aaa578131198e932fe0d0c4869051f8931ea84b9ec7cfa8a91956", 0xb1}], 0x1) write(r0, &(0x7f00000003c0)=':', 0x1) write(r0, &(0x7f0000000140)="19", 0x1) 2018/05/19 09:53:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x200, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f00000000c0)=""/239, 0xef) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)=@l2={0x1f}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)="c83d74ad42b13db7b567996ced16a2cc3ecfa8971e93e7b365564e577256838db8da096ba4e819051a9599a8ecf0f76b8b476d053e0c91fdbc5d36a5bf323bf8315aa97928b26e297c8afe3604cd5ddcf640cde6663ba744a13c1b38864eb3cc07d6f53b69af692c46d53bb7469e5f29880300c790d1b9c276ada62dd6784fd107ae", 0x82}], 0x1, &(0x7f0000002200)}}], 0x1, 0x0) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/05/19 09:53:03 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x3c1, 0x2, 0x2b0, [0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x140, 0x140, 0x178, [@physdev={'physdev\x00', 0x70, {{'veth1_to_bond\x00', {}, 'syzkaller1\x00'}}}, @cluster={'cluster\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0x5, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}]}, 0x328) 2018/05/19 09:53:03 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:03 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) read(r0, &(0x7f0000000100)=""/231, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) write$tun(r1, &(0x7f0000000040)={@val, @val, @llc={@snap={0x0, 0x0, "d5", "f4d32f"}}}, 0x16) 2018/05/19 09:53:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0xffffffff}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 2018/05/19 09:53:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) r3 = shmget(0x2, 0x1000, 0x54000020, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/214) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) [ 180.723914] kernel msg: ebtables bug: please report to author: Chains don't start at beginning [ 180.738347] audit: type=1326 audit(1526723583.895:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11046 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 [ 180.760496] xt_AUDIT: Audit type out of range (valid range: 0..2) 2018/05/19 09:53:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x200, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f00000000c0)=""/239, 0xef) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)=@l2={0x1f}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)="c83d74ad42b13db7b567996ced16a2cc3ecfa8971e93e7b365564e577256838db8da096ba4e819051a9599a8ecf0f76b8b476d053e0c91fdbc5d36a5bf323bf8315aa97928b26e297c8afe3604cd5ddcf640cde6663ba744a13c1b38864eb3cc07d6f53b69af692c46d53bb7469e5f29880300c790d1b9c276ada62dd6784fd107ae", 0x82}], 0x1, &(0x7f0000002200)}}], 0x1, 0x0) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/05/19 09:53:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x81}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x20) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)) 2018/05/19 09:53:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0xffffffff}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 2018/05/19 09:53:04 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}) 2018/05/19 09:53:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) r3 = shmget(0x2, 0x1000, 0x54000020, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/214) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) 2018/05/19 09:53:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0xffffffff}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 2018/05/19 09:53:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x200, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f00000000c0)=""/239, 0xef) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)=@l2={0x1f}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)="c83d74ad42b13db7b567996ced16a2cc3ecfa8971e93e7b365564e577256838db8da096ba4e819051a9599a8ecf0f76b8b476d053e0c91fdbc5d36a5bf323bf8315aa97928b26e297c8afe3604cd5ddcf640cde6663ba744a13c1b38864eb3cc07d6f53b69af692c46d53bb7469e5f29880300c790d1b9c276ada62dd6784fd107ae", 0x82}], 0x1, &(0x7f0000002200)}}], 0x1, 0x0) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/05/19 09:53:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x81}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x20) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)) 2018/05/19 09:53:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0xffffffff}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) [ 180.928815] audit: type=1326 audit(1526723584.086:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11088 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 2018/05/19 09:53:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4)={0x0, 0x4, 0x4000020030}, 0xc) writev(r0, &(0x7f00006d6000)=[{&(0x7f0000000100)='3', 0x1}], 0x1) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000513f59)="c5", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000674000), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="4c69dd5a275eae918d3f379a661c0b08f8d075a373131edf7e48dd86257b353c2376a6ac0eac18437a294dfa80ca7f3eb86f5b0268629f0984bcd89c921e72daeb971305e274d908a25c3c091437a15d729186705eeec62e8f56317c294bc142c92b69190bee5f8957d8c08480b8419876714942888c36acad62dac6a4b39b8c228560a56e5336e77d02ff0fd706988929e4ec0d797e5aaa578131198e932fe0d0c4869051f8931ea84b9ec7cfa8a91956", 0xb1}], 0x1) write(r0, &(0x7f00000003c0)=':', 0x1) write(r0, &(0x7f0000000140)="19", 0x1) 2018/05/19 09:53:04 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}) 2018/05/19 09:53:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) r3 = shmget(0x2, 0x1000, 0x54000020, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/214) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) [ 181.089219] audit: type=1326 audit(1526723584.247:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11108 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 2018/05/19 09:53:04 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:05 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) read(r0, &(0x7f0000000100)=""/231, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) write$tun(r1, &(0x7f0000000040)={@val, @val, @llc={@snap={0x0, 0x0, "d5", "f4d32f"}}}, 0x16) 2018/05/19 09:53:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x200, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f00000000c0)=""/239, 0xef) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)=@l2={0x1f}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)="c83d74ad42b13db7b567996ced16a2cc3ecfa8971e93e7b365564e577256838db8da096ba4e819051a9599a8ecf0f76b8b476d053e0c91fdbc5d36a5bf323bf8315aa97928b26e297c8afe3604cd5ddcf640cde6663ba744a13c1b38864eb3cc07d6f53b69af692c46d53bb7469e5f29880300c790d1b9c276ada62dd6784fd107ae", 0x82}], 0x1, &(0x7f0000002200)}}], 0x1, 0x0) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/05/19 09:53:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x81}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x20) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)) 2018/05/19 09:53:05 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/05/19 09:53:05 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}) 2018/05/19 09:53:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) r3 = shmget(0x2, 0x1000, 0x54000020, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/214) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) 2018/05/19 09:53:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4)={0x0, 0x4, 0x4000020030}, 0xc) writev(r0, &(0x7f00006d6000)=[{&(0x7f0000000100)='3', 0x1}], 0x1) writev(r0, &(0x7f0000f7ffe0)=[{&(0x7f0000513f59)="c5", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000674000), 0xc) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="4c69dd5a275eae918d3f379a661c0b08f8d075a373131edf7e48dd86257b353c2376a6ac0eac18437a294dfa80ca7f3eb86f5b0268629f0984bcd89c921e72daeb971305e274d908a25c3c091437a15d729186705eeec62e8f56317c294bc142c92b69190bee5f8957d8c08480b8419876714942888c36acad62dac6a4b39b8c228560a56e5336e77d02ff0fd706988929e4ec0d797e5aaa578131198e932fe0d0c4869051f8931ea84b9ec7cfa8a91956", 0xb1}], 0x1) write(r0, &(0x7f00000003c0)=':', 0x1) write(r0, &(0x7f0000000140)="19", 0x1) 2018/05/19 09:53:05 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:05 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) [ 182.558007] audit: type=1326 audit(1526723585.715:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11132 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 2018/05/19 09:53:05 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:05 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x200000002f, 0x3) 2018/05/19 09:53:05 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/05/19 09:53:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x81}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x20) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)) 2018/05/19 09:53:05 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/05/19 09:53:05 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b1ff4)={0x10}, 0xc, &(0x7f0000711ff0)={&(0x7f0000830000)=@bridge_newneigh={0x30, 0x1c, 0x813, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}, @NDA_LLADDR={0xc, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x30}, 0x1}, 0x0) 2018/05/19 09:53:06 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) read(r0, &(0x7f0000000100)=""/231, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) write$tun(r1, &(0x7f0000000040)={@val, @val, @llc={@snap={0x0, 0x0, "d5", "f4d32f"}}}, 0x16) 2018/05/19 09:53:06 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:06 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:06 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x200000002f, 0x3) 2018/05/19 09:53:06 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/05/19 09:53:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b1ff4)={0x10}, 0xc, &(0x7f0000711ff0)={&(0x7f0000830000)=@bridge_newneigh={0x30, 0x1c, 0x813, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}, @NDA_LLADDR={0xc, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x30}, 0x1}, 0x0) 2018/05/19 09:53:06 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='umask=4,nobarrier,nls=i']) 2018/05/19 09:53:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b1ff4)={0x10}, 0xc, &(0x7f0000711ff0)={&(0x7f0000830000)=@bridge_newneigh={0x30, 0x1c, 0x813, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}, @NDA_LLADDR={0xc, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x30}, 0x1}, 0x0) 2018/05/19 09:53:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x0) close(r1) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/19 09:53:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f0000dc5f98)) 2018/05/19 09:53:06 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x200000002f, 0x3) [ 183.528057] hfsplus: unable to load nls mapping "i" [ 183.533427] hfsplus: unable to parse mount options 2018/05/19 09:53:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x0) close(r1) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/19 09:53:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b1ff4)={0x10}, 0xc, &(0x7f0000711ff0)={&(0x7f0000830000)=@bridge_newneigh={0x30, 0x1c, 0x813, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}, @NDA_LLADDR={0xc, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x30}, 0x1}, 0x0) [ 183.592324] hfsplus: unable to load nls mapping "i" [ 183.597545] hfsplus: unable to parse mount options 2018/05/19 09:53:06 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r3, 0x3, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r2) 2018/05/19 09:53:06 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x200000002f, 0x3) 2018/05/19 09:53:07 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) read(r0, &(0x7f0000000100)=""/231, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) write$tun(r1, &(0x7f0000000040)={@val, @val, @llc={@snap={0x0, 0x0, "d5", "f4d32f"}}}, 0x16) 2018/05/19 09:53:07 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 2018/05/19 09:53:07 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r3, 0x3, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r2) 2018/05/19 09:53:07 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000300), 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 2018/05/19 09:53:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) 2018/05/19 09:53:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x0) close(r1) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/19 09:53:07 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='umask=4,nobarrier,nls=i']) 2018/05/19 09:53:07 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200100000114, 0x0, &(0x7f00000002c0)=""/1, &(0x7f0000000280)=0xffb1) 2018/05/19 09:53:07 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200100000114, 0x0, &(0x7f00000002c0)=""/1, &(0x7f0000000280)=0xffb1) 2018/05/19 09:53:07 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) [ 184.676460] sctp: [Deprecated]: syz-executor2 (pid 11252) Use of int in maxseg socket option. [ 184.676460] Use struct sctp_assoc_value instead [ 184.709390] sctp: [Deprecated]: syz-executor2 (pid 11252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.709390] Use struct sctp_sack_info instead 2018/05/19 09:53:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x0) close(r1) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/19 09:53:07 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200100000114, 0x0, &(0x7f00000002c0)=""/1, &(0x7f0000000280)=0xffb1) 2018/05/19 09:53:07 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) [ 184.748217] hfsplus: unable to load nls mapping "i" [ 184.753386] hfsplus: unable to parse mount options [ 184.756171] sctp: [Deprecated]: syz-executor2 (pid 11268) Use of int in maxseg socket option. [ 184.756171] Use struct sctp_assoc_value instead 2018/05/19 09:53:08 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='umask=4,nobarrier,nls=i']) 2018/05/19 09:53:08 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200100000114, 0x0, &(0x7f00000002c0)=""/1, &(0x7f0000000280)=0xffb1) 2018/05/19 09:53:08 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) [ 184.938765] hfsplus: unable to load nls mapping "i" [ 184.943969] hfsplus: unable to parse mount options 2018/05/19 09:53:08 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/19 09:53:08 executing program 7: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000002000)={0x1d}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x48}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6e) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00006e8000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x1fd) 2018/05/19 09:53:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, {}, 0x0, 0x5bbee132}, 0xe) 2018/05/19 09:53:08 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r3, 0x3, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r2) 2018/05/19 09:53:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) 2018/05/19 09:53:08 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='umask=4,nobarrier,nls=i']) 2018/05/19 09:53:08 executing program 1: prctl$seccomp(0x29, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:53:08 executing program 6: r0 = memfd_create(&(0x7f0000000240)='dev ', 0x2) write(r0, &(0x7f0000000080)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) fchmod(r0, 0x0) fcntl$addseals(r0, 0x409, 0x0) [ 185.589615] sctp: [Deprecated]: syz-executor2 (pid 11313) Use of int in maxseg socket option. [ 185.589615] Use struct sctp_assoc_value instead [ 185.651825] sctp: [Deprecated]: syz-executor2 (pid 11313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.651825] Use struct sctp_sack_info instead [ 185.673886] hfsplus: unable to load nls mapping "i" [ 185.679117] hfsplus: unable to parse mount options 2018/05/19 09:53:09 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getcwd(&(0x7f0000000000)=""/207, 0xcf) 2018/05/19 09:53:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, {}, 0x0, 0x5bbee132}, 0xe) 2018/05/19 09:53:09 executing program 1: prctl$seccomp(0x29, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:53:09 executing program 7: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000002000)={0x1d}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x48}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6e) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00006e8000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x1fd) 2018/05/19 09:53:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) 2018/05/19 09:53:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x11, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000180)="3c1a016b527d9b534c1b83060141a0fcf1", &(0x7f0000000240)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 09:53:09 executing program 6: r0 = memfd_create(&(0x7f0000000240)='dev ', 0x2) write(r0, &(0x7f0000000080)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) fchmod(r0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 2018/05/19 09:53:09 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r3, 0x3, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r2) 2018/05/19 09:53:09 executing program 1: prctl$seccomp(0x29, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:53:09 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getcwd(&(0x7f0000000000)=""/207, 0xcf) 2018/05/19 09:53:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, {}, 0x0, 0x5bbee132}, 0xe) [ 186.677381] sctp: [Deprecated]: syz-executor2 (pid 11346) Use of int in maxseg socket option. [ 186.677381] Use struct sctp_assoc_value instead 2018/05/19 09:53:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x11, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000180)="3c1a016b527d9b534c1b83060141a0fcf1", &(0x7f0000000240)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 09:53:09 executing program 7: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000002000)={0x1d}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x48}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6e) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00006e8000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x1fd) [ 186.746297] sctp: [Deprecated]: syz-executor2 (pid 11346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.746297] Use struct sctp_sack_info instead 2018/05/19 09:53:10 executing program 1: prctl$seccomp(0x29, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) 2018/05/19 09:53:10 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getcwd(&(0x7f0000000000)=""/207, 0xcf) 2018/05/19 09:53:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, {}, 0x0, 0x5bbee132}, 0xe) 2018/05/19 09:53:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x11, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000180)="3c1a016b527d9b534c1b83060141a0fcf1", &(0x7f0000000240)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 09:53:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) 2018/05/19 09:53:10 executing program 7: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000002000)={0x1d}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x48}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6e) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00006e8000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x1fd) 2018/05/19 09:53:10 executing program 6: r0 = memfd_create(&(0x7f0000000240)='dev ', 0x2) write(r0, &(0x7f0000000080)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) fchmod(r0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 2018/05/19 09:53:10 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x1, 0x0) semtimedop(r1, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r1, &(0x7f0000033816)=[{0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x808d}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) 2018/05/19 09:53:10 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getcwd(&(0x7f0000000000)=""/207, 0xcf) 2018/05/19 09:53:10 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, 0xc) [ 187.719460] sctp: [Deprecated]: syz-executor2 (pid 11380) Use of int in maxseg socket option. [ 187.719460] Use struct sctp_assoc_value instead 2018/05/19 09:53:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x11, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000180)="3c1a016b527d9b534c1b83060141a0fcf1", &(0x7f0000000240)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 09:53:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1f, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x20000040}]) 2018/05/19 09:53:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) [ 187.819795] sctp: [Deprecated]: syz-executor2 (pid 11380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.819795] Use struct sctp_sack_info instead 2018/05/19 09:53:11 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000068fe8)="ff0209000000000100000000000000001500000000000205", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000b0c000), 0x8) 2018/05/19 09:53:11 executing program 3: r0 = socket$rds(0x2, 0x2, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000003000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f0000008000), 0x0, &(0x7f0000001000)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001000)=0x24, &(0x7f0000000ff8), 0x14, 0x200000000, 0x2}}], 0x42}, 0x0) 2018/05/19 09:53:11 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, 0xc) 2018/05/19 09:53:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1f, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x20000040}]) 2018/05/19 09:53:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0xfffffe63) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/19 09:53:11 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000068fe8)="ff0209000000000100000000000000001500000000000205", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000b0c000), 0x8) 2018/05/19 09:53:11 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, 0xc) 2018/05/19 09:53:11 executing program 3: r0 = socket$rds(0x2, 0x2, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000003000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f0000008000), 0x0, &(0x7f0000001000)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001000)=0x24, &(0x7f0000000ff8), 0x14, 0x200000000, 0x2}}], 0x42}, 0x0) 2018/05/19 09:53:11 executing program 7: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x10, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000040)=0x100) 2018/05/19 09:53:11 executing program 6: r0 = memfd_create(&(0x7f0000000240)='dev ', 0x2) write(r0, &(0x7f0000000080)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) fchmod(r0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 2018/05/19 09:53:11 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x1, 0x0) semtimedop(r1, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r1, &(0x7f0000033816)=[{0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x808d}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) 2018/05/19 09:53:11 executing program 3: r0 = socket$rds(0x2, 0x2, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000003000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f0000008000), 0x0, &(0x7f0000001000)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001000)=0x24, &(0x7f0000000ff8), 0x14, 0x200000000, 0x2}}], 0x42}, 0x0) 2018/05/19 09:53:11 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, 0xc) 2018/05/19 09:53:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1f, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x20000040}]) 2018/05/19 09:53:12 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000068fe8)="ff0209000000000100000000000000001500000000000205", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000b0c000), 0x8) 2018/05/19 09:53:12 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000068fe8)="ff0209000000000100000000000000001500000000000205", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000b0c000), 0x8) 2018/05/19 09:53:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1f, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x20000040}]) 2018/05/19 09:53:12 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TTUNGETFILTER(r0, 0x894c, &(0x7f0000000140)=""/185) 2018/05/19 09:53:12 executing program 3: r0 = socket$rds(0x2, 0x2, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000003000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f0000008000), 0x0, &(0x7f0000001000)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000001000)=0x24, &(0x7f0000000ff8), 0x14, 0x200000000, 0x2}}], 0x42}, 0x0) 2018/05/19 09:53:12 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x1, 0x0) semtimedop(r1, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r1, &(0x7f0000033816)=[{0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x808d}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) 2018/05/19 09:53:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0xfffffe63) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/19 09:53:12 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c00}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/19 09:53:12 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0xfffffe63) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/19 09:53:13 executing program 3: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/206, 0xce}], 0x1, 0xfffffff5) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/19 09:53:13 executing program 0: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={'nouuid,', {[{@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}, {@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}]}}) 2018/05/19 09:53:13 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TTUNGETFILTER(r0, 0x894c, &(0x7f0000000140)=""/185) 2018/05/19 09:53:13 executing program 5: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f000003b000)='./file0\x00', r0, &(0x7f0000011000)='./file0\x00') readlinkat(r0, &(0x7f0000019000)='./file0\x00', &(0x7f0000000f67)=""/153, 0x99) renameat(r0, &(0x7f000001b000)='./file0\x00', r0, &(0x7f0000009000)='./control\x00') readlinkat(r0, &(0x7f0000038ff6)='./control\x00', &(0x7f0000002000)=""/213, 0xd5) 2018/05/19 09:53:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c00}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) [ 189.940094] XFS (loop0): Invalid device [./file0], error=-2 [ 189.947175] ================================================================== [ 189.954757] BUG: KASAN: use-after-free in radix_tree_next_chunk+0xf9f/0xfb0 [ 189.961856] Read of size 4 at addr ffff8801afafea08 by task syz-executor7/4558 [ 189.969211] [ 189.970847] CPU: 0 PID: 4558 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #58 [ 189.978033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.987396] Call Trace: 2018/05/19 09:53:13 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TTUNGETFILTER(r0, 0x894c, &(0x7f0000000140)=""/185) [ 189.989990] dump_stack+0x1b9/0x294 [ 189.993624] ? dump_stack_print_info.cold.2+0x52/0x52 [ 189.998813] ? printk+0x9e/0xba [ 190.002086] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 190.006836] ? kasan_check_write+0x14/0x20 [ 190.011072] print_address_description+0x6c/0x20b [ 190.015913] ? radix_tree_next_chunk+0xf9f/0xfb0 [ 190.020672] kasan_report.cold.7+0x242/0x2fe [ 190.025088] __asan_report_load4_noabort+0x14/0x20 [ 190.030026] radix_tree_next_chunk+0xf9f/0xfb0 [ 190.034618] ? debug_check_no_locks_freed+0x310/0x310 2018/05/19 09:53:13 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TTUNGETFILTER(r0, 0x894c, &(0x7f0000000140)=""/185) [ 190.039814] ? __lock_acquire+0x7f5/0x5140 [ 190.044053] ? graph_lock+0x170/0x170 [ 190.047858] ? mark_held_locks+0xc9/0x160 [ 190.052010] ? idr_preload+0x40/0x40 [ 190.055733] ? debug_check_no_locks_freed+0x310/0x310 [ 190.060923] ? find_held_lock+0x36/0x1c0 [ 190.064999] ? lock_downgrade+0x8e0/0x8e0 [ 190.069155] ? kasan_check_read+0x11/0x20 [ 190.073302] ? do_raw_spin_unlock+0x9e/0x2e0 [ 190.077715] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 190.082292] ? __lock_is_held+0xb5/0x140 2018/05/19 09:53:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4400ae8f, &(0x7f0000000080)) [ 190.086360] radix_tree_gang_lookup_tag+0x3d4/0x5f0 [ 190.091381] ? radix_tree_gang_lookup_slot+0x420/0x420 [ 190.096655] ? xfs_perag_get+0x600/0x600 [ 190.100726] ? kasan_check_read+0x11/0x20 [ 190.104870] ? rcu_is_watching+0x85/0x140 [ 190.109004] ? find_held_lock+0x36/0x1c0 [ 190.113057] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 190.118234] xfs_perag_get_tag+0x12d/0x7c0 [ 190.122468] ? xfs_perag_get+0x600/0x600 [ 190.126513] ? rcu_is_watching+0x85/0x140 [ 190.130644] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 190.135821] ? list_lru_count_one+0x27f/0x440 [ 190.140302] xfs_reclaim_inodes_count+0x82/0xb0 [ 190.144959] xfs_fs_nr_cached_objects+0x37/0x50 [ 190.149611] ? xfs_fs_free_cached_objects+0x80/0x80 [ 190.154611] super_cache_count+0x98/0x280 [ 190.158743] shrink_slab.part.39+0x330/0xf90 [ 190.163142] ? kswapd_cpu_online+0x1e0/0x1e0 [ 190.167543] ? shrink_active_list+0x17f0/0x17f0 [ 190.172201] ? kasan_check_read+0x11/0x20 [ 190.176330] ? rcu_is_watching+0x85/0x140 [ 190.180475] shrink_slab+0xa1/0xc0 [ 190.184013] shrink_node+0x4f2/0x1740 [ 190.187811] ? shrink_node_memcg+0x1910/0x1910 [ 190.192382] ? kasan_check_read+0x11/0x20 [ 190.196515] ? queue_work_on+0xe8/0x1e0 [ 190.200483] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 190.205482] ? trace_hardirqs_on+0xd/0x10 [ 190.209614] ? queue_work_on+0x12c/0x1e0 [ 190.213667] do_try_to_free_pages+0x3c9/0x1240 [ 190.218240] ? shrink_node+0x1740/0x1740 [ 190.222285] ? rcu_is_watching+0x85/0x140 [ 190.226417] ? rcu_pm_notify+0xc0/0xc0 [ 190.230296] try_to_free_mem_cgroup_pages+0x475/0xc50 [ 190.235470] ? try_to_free_pages+0xb30/0xb30 [ 190.239869] ? lock_downgrade+0x8e0/0x8e0 [ 190.244001] ? kasan_check_read+0x11/0x20 [ 190.248140] ? kasan_check_read+0x11/0x20 [ 190.252269] ? do_raw_spin_unlock+0x9e/0x2e0 [ 190.256659] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 190.261231] ? trace_hardirqs_on+0xd/0x10 [ 190.265384] reclaim_high.constprop.67+0x12f/0x1d0 [ 190.270299] ? memcg_event_wake+0x410/0x410 [ 190.274601] ? __do_page_fault+0x441/0xe40 [ 190.278818] ? exit_to_usermode_loop+0x87/0x310 [ 190.283474] mem_cgroup_handle_over_high+0x8d/0x130 [ 190.288478] exit_to_usermode_loop+0x274/0x310 [ 190.293048] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 190.297876] do_syscall_64+0x6ac/0x800 [ 190.301748] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 190.306576] ? syscall_return_slowpath+0x5c0/0x5c0 [ 190.311488] ? syscall_return_slowpath+0x30f/0x5c0 [ 190.316403] ? retint_user+0x18/0x18 [ 190.320103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.324940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.330117] RIP: 0033:0x4540ba [ 190.333286] RSP: 002b:00007ffccf1506e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 190.340979] RAX: 0000000000000274 RBX: 00007ffccf1506e0 RCX: 00000000004540ba [ 190.348231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 190.355482] RBP: 00007ffccf150720 R08: 0000000000000001 R09: 0000000000fdd940 [ 190.362732] R10: 0000000000fddc10 R11: 0000000000000246 R12: 0000000000000001 [ 190.369982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001380 [ 190.377242] [ 190.378850] Allocated by task 11500: [ 190.382549] save_stack+0x43/0xd0 [ 190.385985] kasan_kmalloc+0xc4/0xe0 [ 190.389684] kmem_cache_alloc_trace+0x152/0x780 [ 190.394338] xfs_fs_fill_super+0xda/0x1560 [ 190.398564] mount_bdev+0x30c/0x3e0 [ 190.402173] xfs_fs_mount+0x34/0x40 [ 190.405779] mount_fs+0xae/0x328 [ 190.409126] vfs_kern_mount.part.34+0xd4/0x4d0 [ 190.413690] do_mount+0x564/0x3070 [ 190.417210] ksys_mount+0x12d/0x140 [ 190.420819] __x64_sys_mount+0xbe/0x150 [ 190.424777] do_syscall_64+0x1b1/0x800 [ 190.428645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.433811] [ 190.435418] Freed by task 11500: [ 190.438769] save_stack+0x43/0xd0 [ 190.442204] __kasan_slab_free+0x11a/0x170 [ 190.446421] kasan_slab_free+0xe/0x10 [ 190.450202] kfree+0xd9/0x260 [ 190.453291] xfs_fs_fill_super+0x66a/0x1560 [ 190.457594] mount_bdev+0x30c/0x3e0 [ 190.461199] xfs_fs_mount+0x34/0x40 [ 190.464807] mount_fs+0xae/0x328 [ 190.468155] vfs_kern_mount.part.34+0xd4/0x4d0 [ 190.472716] do_mount+0x564/0x3070 [ 190.476235] ksys_mount+0x12d/0x140 [ 190.479844] __x64_sys_mount+0xbe/0x150 [ 190.483798] do_syscall_64+0x1b1/0x800 [ 190.487668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.492829] [ 190.494438] The buggy address belongs to the object at ffff8801afafe600 [ 190.494438] which belongs to the cache kmalloc-4096 of size 4096 [ 190.507260] The buggy address is located 1032 bytes inside of [ 190.507260] 4096-byte region [ffff8801afafe600, ffff8801afaff600) [ 190.519288] The buggy address belongs to the page: [ 190.524198] page:ffffea0006bebf80 count:1 mapcount:0 mapping:ffff8801afafe600 index:0x0 compound_mapcount: 0 [ 190.534150] flags: 0x2fffc0000008100(slab|head) [ 190.538808] raw: 02fffc0000008100 ffff8801afafe600 0000000000000000 0000000100000001 [ 190.546673] raw: ffffea00062319a0 ffffea0007256820 ffff8801da800dc0 0000000000000000 [ 190.554528] page dumped because: kasan: bad access detected [ 190.560214] [ 190.561818] Memory state around the buggy address: [ 190.566728] ffff8801afafe900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.574066] ffff8801afafe980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.581403] >ffff8801afafea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.588739] ^ 2018/05/19 09:53:13 executing program 5: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f000003b000)='./file0\x00', r0, &(0x7f0000011000)='./file0\x00') readlinkat(r0, &(0x7f0000019000)='./file0\x00', &(0x7f0000000f67)=""/153, 0x99) renameat(r0, &(0x7f000001b000)='./file0\x00', r0, &(0x7f0000009000)='./control\x00') readlinkat(r0, &(0x7f0000038ff6)='./control\x00', &(0x7f0000002000)=""/213, 0xd5) [ 190.592345] ffff8801afafea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.599689] ffff8801afafeb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.607023] ================================================================== [ 190.614356] Disabling lock debugging due to kernel taint [ 190.619990] Kernel panic - not syncing: panic_on_warn set ... [ 190.619990] [ 190.627358] CPU: 0 PID: 4558 Comm: syz-executor7 Tainted: G B 4.17.0-rc5+ #58 2018/05/19 09:53:13 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = semget$private(0x0, 0x1, 0x0) semtimedop(r1, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r1, &(0x7f0000033816)=[{0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x808d}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) [ 190.635922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.645269] Call Trace: [ 190.647854] dump_stack+0x1b9/0x294 [ 190.651480] ? dump_stack_print_info.cold.2+0x52/0x52 [ 190.656669] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 190.661423] ? radix_tree_next_chunk+0xf70/0xfb0 [ 190.666172] panic+0x22f/0x4de [ 190.669362] ? add_taint.cold.5+0x16/0x16 [ 190.673512] ? do_raw_spin_unlock+0x9e/0x2e0 [ 190.677916] ? do_raw_spin_unlock+0x9e/0x2e0 [ 190.682326] ? radix_tree_next_chunk+0xf9f/0xfb0 [ 190.687083] kasan_end_report+0x47/0x4f 2018/05/19 09:53:13 executing program 5: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f000003b000)='./file0\x00', r0, &(0x7f0000011000)='./file0\x00') readlinkat(r0, &(0x7f0000019000)='./file0\x00', &(0x7f0000000f67)=""/153, 0x99) renameat(r0, &(0x7f000001b000)='./file0\x00', r0, &(0x7f0000009000)='./control\x00') readlinkat(r0, &(0x7f0000038ff6)='./control\x00', &(0x7f0000002000)=""/213, 0xd5) 2018/05/19 09:53:13 executing program 5: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f000003b000)='./file0\x00', r0, &(0x7f0000011000)='./file0\x00') readlinkat(r0, &(0x7f0000019000)='./file0\x00', &(0x7f0000000f67)=""/153, 0x99) renameat(r0, &(0x7f000001b000)='./file0\x00', r0, &(0x7f0000009000)='./control\x00') readlinkat(r0, &(0x7f0000038ff6)='./control\x00', &(0x7f0000002000)=""/213, 0xd5) [ 190.691058] kasan_report.cold.7+0x76/0x2fe [ 190.695378] __asan_report_load4_noabort+0x14/0x20 [ 190.700307] radix_tree_next_chunk+0xf9f/0xfb0 [ 190.704884] ? debug_check_no_locks_freed+0x310/0x310 [ 190.710071] ? __lock_acquire+0x7f5/0x5140 [ 190.714303] ? graph_lock+0x170/0x170 [ 190.718100] ? mark_held_locks+0xc9/0x160 [ 190.722242] ? idr_preload+0x40/0x40 [ 190.725957] ? debug_check_no_locks_freed+0x310/0x310 [ 190.731142] ? find_held_lock+0x36/0x1c0 [ 190.735204] ? lock_downgrade+0x8e0/0x8e0 [ 190.739350] ? kasan_check_read+0x11/0x20 2018/05/19 09:53:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 190.743495] ? do_raw_spin_unlock+0x9e/0x2e0 [ 190.747899] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 190.752478] ? __lock_is_held+0xb5/0x140 [ 190.756540] radix_tree_gang_lookup_tag+0x3d4/0x5f0 [ 190.761556] ? radix_tree_gang_lookup_slot+0x420/0x420 [ 190.766825] ? xfs_perag_get+0x600/0x600 [ 190.770888] ? kasan_check_read+0x11/0x20 [ 190.775031] ? rcu_is_watching+0x85/0x140 [ 190.779162] ? find_held_lock+0x36/0x1c0 [ 190.783205] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 190.788380] xfs_perag_get_tag+0x12d/0x7c0 [ 190.792598] ? xfs_perag_get+0x600/0x600 [ 190.796641] ? rcu_is_watching+0x85/0x140 [ 190.800772] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 190.805949] ? list_lru_count_one+0x27f/0x440 [ 190.810430] xfs_reclaim_inodes_count+0x82/0xb0 [ 190.815081] xfs_fs_nr_cached_objects+0x37/0x50 [ 190.819728] ? xfs_fs_free_cached_objects+0x80/0x80 [ 190.824724] super_cache_count+0x98/0x280 [ 190.828852] shrink_slab.part.39+0x330/0xf90 [ 190.833242] ? kswapd_cpu_online+0x1e0/0x1e0 [ 190.837638] ? shrink_active_list+0x17f0/0x17f0 [ 190.842287] ? kasan_check_read+0x11/0x20 [ 190.846412] ? rcu_is_watching+0x85/0x140 [ 190.850545] shrink_slab+0xa1/0xc0 [ 190.854065] shrink_node+0x4f2/0x1740 [ 190.857851] ? shrink_node_memcg+0x1910/0x1910 [ 190.862414] ? kasan_check_read+0x11/0x20 [ 190.866548] ? queue_work_on+0xe8/0x1e0 [ 190.870502] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 190.875497] ? trace_hardirqs_on+0xd/0x10 [ 190.879624] ? queue_work_on+0x12c/0x1e0 [ 190.883668] do_try_to_free_pages+0x3c9/0x1240 [ 190.888234] ? shrink_node+0x1740/0x1740 [ 190.892273] ? rcu_is_watching+0x85/0x140 [ 190.896400] ? rcu_pm_notify+0xc0/0xc0 [ 190.900269] try_to_free_mem_cgroup_pages+0x475/0xc50 [ 190.905441] ? try_to_free_pages+0xb30/0xb30 [ 190.909833] ? lock_downgrade+0x8e0/0x8e0 [ 190.913961] ? kasan_check_read+0x11/0x20 [ 190.918093] ? kasan_check_read+0x11/0x20 [ 190.922220] ? do_raw_spin_unlock+0x9e/0x2e0 [ 190.926607] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 190.931172] ? trace_hardirqs_on+0xd/0x10 [ 190.935304] reclaim_high.constprop.67+0x12f/0x1d0 [ 190.940213] ? memcg_event_wake+0x410/0x410 [ 190.944517] ? __do_page_fault+0x441/0xe40 [ 190.948740] ? exit_to_usermode_loop+0x87/0x310 [ 190.953388] mem_cgroup_handle_over_high+0x8d/0x130 [ 190.958385] exit_to_usermode_loop+0x274/0x310 [ 190.962951] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 190.967778] do_syscall_64+0x6ac/0x800 [ 190.971647] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 190.976469] ? syscall_return_slowpath+0x5c0/0x5c0 [ 190.981387] ? syscall_return_slowpath+0x30f/0x5c0 [ 190.986299] ? retint_user+0x18/0x18 [ 190.989993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.994818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.999998] RIP: 0033:0x4540ba [ 191.003171] RSP: 002b:00007ffccf1506e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 191.010859] RAX: 0000000000000274 RBX: 00007ffccf1506e0 RCX: 00000000004540ba [ 191.018106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 191.025353] RBP: 00007ffccf150720 R08: 0000000000000001 R09: 0000000000fdd940 [ 191.032603] R10: 0000000000fddc10 R11: 0000000000000246 R12: 0000000000000001 [ 191.039859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001380 [ 191.047563] Dumping ftrace buffer: [ 191.051076] (ftrace buffer empty) [ 191.054760] Kernel Offset: disabled [ 191.058362] Rebooting in 86400 seconds..