[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 17.021133] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 17.765180] random: sshd: uninitialized urandom read (32 bytes read) [ 17.997566] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.801295] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 24.327042] random: sshd: uninitialized urandom read (32 bytes read) 2018/04/24 07:04:48 fuzzer started 2018/04/24 07:04:48 dialing manager at 10.128.0.26:37231 [ 49.969220] can: request_module (can-proto-0) failed. [ 49.978333] can: request_module (can-proto-0) failed. 2018/04/24 07:05:15 kcov=true, comps=true 2018/04/24 07:05:20 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) 2018/04/24 07:05:20 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x3, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000100000024000400"], 0xc}, 0x0) 2018/04/24 07:05:20 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000002900000003000000"], 0xc}}], 0x2, 0x0) 2018/04/24 07:05:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e22, @rand_addr}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/24 07:05:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000480)=""/138, 0x8a}], 0x1, 0x200) 2018/04/24 07:05:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/24 07:05:20 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$fuse(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xffffffffffffff19) creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x22, 0x11, r2, 0x0) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) 2018/04/24 07:05:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x3c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000010000000000000001000000000000000", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000340)}) [ 57.145701] IPVS: ftp: loaded support on port[0] = 21 [ 57.298136] IPVS: ftp: loaded support on port[0] = 21 [ 57.303425] IPVS: ftp: loaded support on port[0] = 21 [ 57.371895] IPVS: ftp: loaded support on port[0] = 21 [ 57.389869] IPVS: ftp: loaded support on port[0] = 21 [ 57.450945] IPVS: ftp: loaded support on port[0] = 21 [ 57.452816] IPVS: ftp: loaded support on port[0] = 21 [ 57.485944] IPVS: ftp: loaded support on port[0] = 21 [ 59.502407] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.508933] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.531500] device bridge_slave_0 entered promiscuous mode [ 59.562625] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.569107] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.597227] device bridge_slave_0 entered promiscuous mode [ 59.610745] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.617219] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.625067] device bridge_slave_0 entered promiscuous mode [ 59.642693] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.649084] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.659449] device bridge_slave_0 entered promiscuous mode [ 59.668572] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.674962] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.700306] device bridge_slave_0 entered promiscuous mode [ 59.710409] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.716863] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.724714] device bridge_slave_0 entered promiscuous mode [ 59.737854] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.744338] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.759297] device bridge_slave_1 entered promiscuous mode [ 59.771103] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.777490] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.787571] device bridge_slave_1 entered promiscuous mode [ 59.796915] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.803301] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.811293] device bridge_slave_0 entered promiscuous mode [ 59.818965] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.825330] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.834938] device bridge_slave_1 entered promiscuous mode [ 59.843805] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.850194] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.871066] device bridge_slave_1 entered promiscuous mode [ 59.880953] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.887362] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.898710] device bridge_slave_0 entered promiscuous mode [ 59.906249] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.912695] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.929168] device bridge_slave_1 entered promiscuous mode [ 59.937483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.946125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.955056] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.961452] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.970734] device bridge_slave_1 entered promiscuous mode [ 59.979199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.986583] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.992981] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.012877] device bridge_slave_1 entered promiscuous mode [ 60.028470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.038482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.051925] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.058324] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.086248] device bridge_slave_1 entered promiscuous mode [ 60.100976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.108691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.115962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.124806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.133506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.148200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.167320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.219591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.265547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.284604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.318196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.471354] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.529434] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.555347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.609917] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.638685] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.655252] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.665267] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.687979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.699855] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.718474] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.728726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.739627] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.818851] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.828146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.837321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.844612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.872172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.889252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.896236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.916072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.925305] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.934593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.943387] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.951261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.976068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.000687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.010064] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.018313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.029276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.046759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.062732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.071307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.078159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.086299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.115681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.123938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.131192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.141490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.193636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.224828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.231733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.249351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.280932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.311492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.327396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.344823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.369921] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.387507] team0: Port device team_slave_0 added [ 61.443618] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.467781] team0: Port device team_slave_0 added [ 61.496155] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.507840] team0: Port device team_slave_1 added [ 61.521506] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.534650] team0: Port device team_slave_0 added [ 61.564305] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.590873] team0: Port device team_slave_1 added [ 61.601935] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.611130] team0: Port device team_slave_0 added [ 61.618431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.628240] team0: Port device team_slave_0 added [ 61.666071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.685783] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.694695] team0: Port device team_slave_1 added [ 61.705902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.726752] team0: Port device team_slave_0 added [ 61.747739] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.763444] team0: Port device team_slave_0 added [ 61.784508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.803225] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.810745] team0: Port device team_slave_0 added [ 61.816537] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.825287] team0: Port device team_slave_1 added [ 61.831269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.843716] team0: Port device team_slave_1 added [ 61.850739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.860694] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.878431] team0: Port device team_slave_1 added [ 61.885696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.893005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.901469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.914523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.936663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.946820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.954228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.962398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.971135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.980489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.988553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.998680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.005647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.018093] team0: Port device team_slave_1 added [ 62.025010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.033633] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.046430] team0: Port device team_slave_1 added [ 62.055531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.062598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.070366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.088938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.127445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.140130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.147843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.156251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.163680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.171425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.179181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.186182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.194628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.207370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.215954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.222849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.230824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.238502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.250354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.259907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.269790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.278637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.287218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.294588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.304398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.316083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.323238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.339882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.381497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.409914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.417586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.425515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.433408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.441300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.448950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.456685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.464147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.471721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.479267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.486920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.498206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.505423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.513836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.523483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.535623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.544473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.554673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.564152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.581298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.588857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.604530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.637545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.658991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.670773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.678774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.686784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.694728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.702541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.710547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.718343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.726098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.736866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.744889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.753214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.763127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.770331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.782405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.801484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.809118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.818532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.871862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.895185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.906613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.937057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.950603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.971774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.932276] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.938795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.945788] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.952179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.974762] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.981401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.086663] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.093081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.099751] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.106132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.117092] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.134607] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.141059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.147750] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.154132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.170530] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.180454] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.186854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.193518] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.199901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.252602] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.261186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.267594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.274262] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.280658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.295776] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.316717] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.323122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.329811] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.336201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.390363] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.398555] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.404947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.411615] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.418057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.425477] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.436920] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.443314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.449960] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.456305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.465641] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.992222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.003515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.024495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.031738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.039429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.046676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.054131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.127104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.186087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.288959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.306656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.425130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.487254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.568482] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 69.683520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.696333] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 69.710380] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 69.721369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.809698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 69.866512] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 69.951294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.104936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.111492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.122628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.155460] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.164068] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.170252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.189451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.259263] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.279821] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.286231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.296069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.319639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.330503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.342331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.373766] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.380217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.402179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.423650] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.434588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.467696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.651345] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.692239] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.729662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.735897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.749749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.785604] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.798247] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.811700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.828655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.860139] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.876318] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.890158] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.303655] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.325319] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.612516] binder: 6529:6530 transaction failed 29189/-22, size 16-16 line 2848 2018/04/24 07:05:37 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000080)='./file0\x00') clone(0x3002017f, &(0x7f0000c75000), &(0x7f0000695000), &(0x7f000014e000), &(0x7f0000fef000)) 2018/04/24 07:05:37 executing program 5: 2018/04/24 07:05:37 executing program 1: 2018/04/24 07:05:37 executing program 2: 2018/04/24 07:05:37 executing program 3: [ 73.762867] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/24 07:05:37 executing program 5: 2018/04/24 07:05:37 executing program 4: 2018/04/24 07:05:37 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000080)='./file0\x00') clone(0x3002017f, &(0x7f0000c75000), &(0x7f0000695000), &(0x7f000014e000), &(0x7f0000fef000)) 2018/04/24 07:05:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000000), 0x200000000000010a, 0x10000003) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002c40)=ANY=[], 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000040)}, {&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/175, 0x2e1}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000003c0)={{0x3a, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x2, 'lblcr\x00', 0x1, 0x5, 0x2d}, {@multicast1=0xe0000001, 0x4e22, 0x4, 0x7, 0x8, 0x9}}, 0x44) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) 2018/04/24 07:05:37 executing program 1: 2018/04/24 07:05:37 executing program 2: 2018/04/24 07:05:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x6a, 0x800000020000000, &(0x7f0000000300)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000500)="16", 0x1}], 0x1) 2018/04/24 07:05:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/26, 0x1a) 2018/04/24 07:05:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000600)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)="647e2a652232639cbcde0b32e70219823491978b87b0a5bd3a18393a0f1a21989c3617b2", 0x24}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @empty, 0xa0000000}, 0x1c) r2 = socket$inet_icmp(0x2, 0x2, 0x1) readahead(r0, 0x9, 0xfffffffffffffff7) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8, 0x7f, 0x20, 0x400, 0x1, 0x0, r3}) sendto$inet6(r1, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) getgid() getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) sendto$inet6(r1, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r1) 2018/04/24 07:05:37 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000000)={&(0x7f0000000100)=""/4096, 0xfffffffffffffd2a}) 2018/04/24 07:05:37 executing program 6: timer_create(0x2, &(0x7f0000005fb0)={0x4, 0x0, 0x1}, &(0x7f0000002ffc)) timer_settime(0x0, 0x1, &(0x7f0000001fe0)={{}, {0x0, 0x6}}, &(0x7f0000001000)) 2018/04/24 07:05:37 executing program 1: 2018/04/24 07:05:37 executing program 2: 2018/04/24 07:05:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/116, 0x74}], 0x1, 0x0) 2018/04/24 07:05:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="80", 0x1}], 0x1) 2018/04/24 07:05:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x9249249249249b6, 0x0) connect$unix(r0, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) 2018/04/24 07:05:37 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x9) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 2018/04/24 07:05:37 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x2) write$fuse(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='P'], 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) creat(&(0x7f0000000240)='./bus\x00', 0x0) 2018/04/24 07:05:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f00000005c0)="405d2600926889981bef9d8b1dd16df7d961a7933cfadcbc709887b1f3fdb72163d242a0693271f816f126c18bc485320142192186ffc9592d3b6e972dd134e9fa613917df8634da7b70d4de65ab620af811f34e0913493b20bbcf99fbb12e923cae22200ffdcea45475b0849b406ffbb9b747ee97ab1fd0e92c78ea28f4039148a3dcb37fc10e3eac1ff47ea17155ebdafcb5dbbb413ce7e9ce856324399413b3f3ec215783922ea3", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe271190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) 2018/04/24 07:05:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001c000105000000000000000007000000", @ANYBLOB="000000000c000200000000000000000014000100ff020000000000000000000000000001"], 0x2}, 0x1}, 0x0) 2018/04/24 07:05:38 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000d40)={0x1, &(0x7f0000000080)=[{0x40006, 0x0, 0x0, 0xa85}]}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) write$binfmt_script(r1, &(0x7f00000023c0)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/24 07:05:38 executing program 6: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x1ff, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @control}], 0x1c) 2018/04/24 07:05:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$fuse(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) creat(&(0x7f0000000240)='./bus\x00', 0x0) 2018/04/24 07:05:38 executing program 7: clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x989680}) 2018/04/24 07:05:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$eventfd(r0, &(0x7f0000000080), 0x8) 2018/04/24 07:05:38 executing program 3: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000003c0)="6601000000000000000bc3e9329b31a600794dc89300b7b11c25000001000000000027a5190bb7e8279dd0a7a80e0802004332642f11a2", 0x37) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000000bfe0)) 2018/04/24 07:05:39 executing program 4: 2018/04/24 07:05:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000028ff0)={&(0x7f000002dfcc)=ANY=[@ANYBLOB="3400000018002100ffffff0100ffffff020000000000000100000000100016000c000000000000000800150004000000"], 0x1}, 0x1}, 0x0) 2018/04/24 07:05:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 2018/04/24 07:05:39 executing program 5: ioprio_set$uid(0x4000000000000003, 0x0, 0x0) 2018/04/24 07:05:39 executing program 2: 2018/04/24 07:05:39 executing program 0: 2018/04/24 07:05:39 executing program 3: 2018/04/24 07:05:39 executing program 7: 2018/04/24 07:05:39 executing program 4: 2018/04/24 07:05:39 executing program 2: 2018/04/24 07:05:39 executing program 0: 2018/04/24 07:05:39 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x9) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100), 0x4) 2018/04/24 07:05:39 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={"33793a278fa08e33ae1a1fab39ca2c00", 0xb}) 2018/04/24 07:05:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001800)=""/222, 0xde}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000001c0)={0x14, 0x16, 0x301}, 0x14}, 0x1}, 0x0) 2018/04/24 07:05:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x3f, 0x4) sendto$inet6(r0, &(0x7f00002a0b14), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x20000000c, &(0x7f0000000000)=0x7ff, 0x13) 2018/04/24 07:05:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) write$fuse(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000000000000000000000000000070000001a"], 0x15) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) creat(&(0x7f0000000240)='./bus\x00', 0x0) 2018/04/24 07:05:39 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000200), 0x4) setsockopt$inet_int(r0, 0x0, 0xc9, &(0x7f0000000000), 0xffffffffffffff55) [ 75.830645] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 2018/04/24 07:05:40 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}], 0x1, 0x0) 2018/04/24 07:05:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) readahead(r0, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 2018/04/24 07:05:40 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000fbfc8)={&(0x7f0000975ff4)={0x10}, 0xc, &(0x7f00000b1000)={&(0x7f00007cc000)={0x14, 0x2, 0x3, 0x7a8b566d789388b3}, 0x14}, 0x1}, 0x0) 2018/04/24 07:05:40 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) readahead(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ddff8), 0x0) 2018/04/24 07:05:40 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp}}}}, &(0x7f00003b5000)) 2018/04/24 07:05:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x1, 0x4) 2018/04/24 07:05:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) 2018/04/24 07:05:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x7fe, 0x51) 2018/04/24 07:05:40 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x2) write$fuse(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000000000000000000000000000070000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009100000000000000a16eb330c8e282fe6c8e3938ef0db9cfa54c51b7151722d2648d016f2fbbf4722da2dc5b4faba3e5d7aee5794b575282425e2e8b474862bd12abfb2d52367a41"], 0x96) sendfile(r1, r1, &(0x7f0000000040), 0x80000001) creat(&(0x7f0000000240)='./bus\x00', 0x0) 2018/04/24 07:05:40 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x104) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') preadv(r0, &(0x7f00000003c0), 0x3fe, 0x10400003) 2018/04/24 07:05:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890c, &(0x7f00000000c0)={"696662300200", @ifru_hwaddr=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}) 2018/04/24 07:05:40 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) listen(r0, 0x0) 2018/04/24 07:05:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:40 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000980)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x6, [{{0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x7fff}}, {{0xa, 0x4e22, 0x7, @loopback={0x0, 0x1}, 0x79e}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x9}}, {{0xa, 0x200000004e24, 0x9, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, {{0xa, 0x4e23, 0x6c}}, {{0xa, 0x0, 0x2576, @mcast1={0xff, 0x1, [], 0x1}, 0xda6}}]}, 0x38c) 2018/04/24 07:05:40 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df704011100fe800000000000000000000000000000fe8000000000000000000000000000aa00004e2004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8664b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690913bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007754dc2fb0678890d9ff5d9"], &(0x7f0000001780)) recvfrom$inet6(r0, &(0x7f0000000000)=""/173, 0xad, 0x122, 0x0, 0xfffffffffffffe99) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/24 07:05:41 executing program 5: 2018/04/24 07:05:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) readahead(r0, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) 2018/04/24 07:05:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xa, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) pread64(r0, &(0x7f00000000c0)=""/8, 0x12f, 0x0) 2018/04/24 07:05:41 executing program 7: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmmsg$unix(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000440)}], 0x1, 0x0) 2018/04/24 07:05:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000e81ff0)={0x2, 0x4e20}, 0x10) 2018/04/24 07:05:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:41 executing program 6: 2018/04/24 07:05:41 executing program 3: 2018/04/24 07:05:41 executing program 5: [ 77.849078] raw_sendmsg: syz-executor7 forgot to set AF_INET. Fix it! 2018/04/24 07:05:41 executing program 3: 2018/04/24 07:05:41 executing program 2: 2018/04/24 07:05:41 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0xfffffffffffffffd) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 2018/04/24 07:05:41 executing program 7: r0 = memfd_create(&(0x7f0000000540)='/dev/input/mice\x00', 0x3) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) fchdir(r1) write$fuse(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x161) ioctl$int_out(r1, 0x5460, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000400), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x3, 0x0, "568ba1532d9fa4a4a0b2ac7fed1ba5df6183c56aab4b149a87b45ecde423213c30734da7de0daefc4f85152077b0196e06e5a1d95840e8dc7eb18f5f2781abadec7c9d4ef97335343396d95c6c3a63db"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r3, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x1000000000004e23}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f0000000380)="a8f1be5355d740ca6791da215ccd133c71adeb2c8c48541886fc7f32f5a881b45c66e024efb19d9c7813c871d7de2918bcac611cda57e57831a5621a5ac287de49deff1e43934b0bd06a6fb63d5120773797ad4cbede5e398e5ff92426e6f668b2723c2a516d6791125695666a9a0f487936c2959fd358f89617", 0x7a, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) recvfrom$inet(r3, &(0x7f0000000240)=""/247, 0xf7, 0x0, &(0x7f0000000200)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r3, &(0x7f00006fd000)="c3401c344654f3c7009aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4000000000000", 0x7a, 0x51, &(0x7f0000e66000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/164, 0xa4, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r3, &(0x7f0000000180)="ea", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/24 07:05:41 executing program 1: perf_event_open(&(0x7f0000000240)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/24 07:05:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000febff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000fe1ff4)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000fee000)) 2018/04/24 07:05:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:41 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) shmget$private(0x0, 0x1000, 0x78001012, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x40) ioctl(r0, 0x1276, &(0x7f00007bc000)) 2018/04/24 07:05:41 executing program 6: syslog(0x3, &(0x7f0000000980)=""/215, 0xd7) 2018/04/24 07:05:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x1276, &(0x7f00007bc000)) 2018/04/24 07:05:41 executing program 1: perf_event_open(&(0x7f0000000240)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/24 07:05:41 executing program 7: r0 = memfd_create(&(0x7f0000000540)='/dev/input/mice\x00', 0x3) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) fchdir(r1) write$fuse(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="349685a3b480807a00000000dedc49c517cc1b2c073174f63fb842104f7803ed11697da0963a79e550be97abc38a24a48813156d138665d2a7cfba6a267f1b0aacf0f2a118364c1199843c4793201ee3893fc984d4e8aea7b58513a4ba5b857fd56b35d7da3dd1a83f58ac3a7b935436945b54427b8c664f880468e0de121e70f15d8df7b799ef0f22ca04ea92e9f413a80e5774b29943ec160eaf8e4eb904528745e1db3b60ac6ce07aa14074e407471d0f13d1eb741d44ae0415fbd29ddc6e876f0baa416478a66aa8bae5fa769b4dab0392f7433995945b5056f3967149aab020f8d951666ab18e45ef5c9fd9c81867c9babe3c8f8281e6c861d9c2723a425dc30611bb890a2d3a5a6a53d49492c858e2f01f9f143299985202bb3a74d9bba805b86e7b28fe2cc409c1d7fc8b142bbd0d11b0269b3595e3351579c57a0213a912946a2716dce33c4196611db1d6168b5ef65d7f2608af8e181a9edc2acd5e72"], 0x161) ioctl$int_out(r1, 0x5460, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000400), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x3, 0x0, "568ba1532d9fa4a4a0b2ac7fed1ba5df6183c56aab4b149a87b45ecde423213c30734da7de0daefc4f85152077b0196e06e5a1d95840e8dc7eb18f5f2781abadec7c9d4ef97335343396d95c6c3a63db"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r3, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x1000000000004e23}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f0000000380)="a8f1be5355d740ca6791da215ccd133c71adeb2c8c48541886fc7f32f5a881b45c66e024efb19d9c7813c871d7de2918bcac611cda57e57831a5621a5ac287de49deff1e43934b0bd06a6fb63d5120773797ad4cbede5e398e5ff92426e6f668b2723c2a516d6791125695666a9a0f487936c2959fd358f89617", 0x7a, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) recvfrom$inet(r3, &(0x7f0000000240)=""/247, 0xf7, 0x0, &(0x7f0000000200)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r3, &(0x7f00006fd000)="c3401c344654f3c7009aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4000000000000", 0x7a, 0x51, &(0x7f0000e66000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/164, 0xa4, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r3, &(0x7f0000000180)="ea", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/24 07:05:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/24 07:05:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000f8ff4)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast=0xffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r2, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x1000}], 0x1) 2018/04/24 07:05:42 executing program 1: r0 = eventfd(0xbfe) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000009000)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92100, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4, &(0x7f0000000040), 0x2, r2, 0xa}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae00, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0xc0189436, &(0x7f0000001fc0)={0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x7412, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) 2018/04/24 07:05:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572840000000000000000000000000000000000000000000000000002000000000000000000000000000000000000400000000000000000000000000000000000000000"], 0x48) 2018/04/24 07:05:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000074}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0xd2d0) 2018/04/24 07:05:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000240)=""/230, &(0x7f0000000340)=0xe6) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@loopback=0x7f000001, @loopback=0x7f000001]}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000eee000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) socket$bt_cmtp(0x1f, 0x3, 0x5) 2018/04/24 07:05:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) dup3(r0, r1, 0x0) 2018/04/24 07:05:42 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)="01800d05662ab8e85d110fa51514babd51", 0x0) r1 = syz_open_dev$sndseq(&(0x7f000092e000)='/dev/snd/seq\x00', 0x0, 0x2000a) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x84) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000a6af74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x0, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x233, @time={0x0, 0x989680}}) [ 78.555531] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 2018/04/24 07:05:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000ffc)=0x8, 0x4) write(r1, &(0x7f0000000000)="0f", 0x1) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x0, &(0x7f000001a000), 0x0, &(0x7f0000019000)}, 0x0) 2018/04/24 07:05:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) dup3(r0, r1, 0x0) [ 78.651223] kvm [6872]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000074 2018/04/24 07:05:42 executing program 3: r0 = socket(0x801000000010, 0x6, 0x19) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = getpgid(0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400001, 0x0) perf_event_open(&(0x7f0000000200)={0x6, 0x70, 0x8, 0x1, 0x2d, 0xd5, 0x0, 0xfffffffffffff001, 0x10, 0x0, 0x8, 0x9, 0x81, 0x4, 0x4, 0x96, 0x0, 0x5, 0x3, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x3f, 0x2, 0x1, 0xff, 0x8, 0x8, 0x8, 0x5, 0x7, 0x100000001, 0x9, 0xfffffffffffffff9, 0x8e, 0x80000000, 0x7fff, 0x4, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x41, 0x80, 0x6, 0x4, 0x2, 0x6, 0x40}, r2, 0xa, r3, 0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xc4, &(0x7f00000004c0)=[@in={0x2, 0x4e20}, @in={0x2, 0x4e23}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0x101, @local={0xfe, 0x80, [], 0xaa}, 0xb4ec}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x101}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e22, 0x9, @loopback={0x0, 0x1}}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000600)={r4, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x8, 0x9}, &(0x7f00000006c0)=0x90) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000526110b634998421e7179aaa4ed8a35100cc00000800010086fa62cb64094a664c747aa6d01d1839a6e4c39747ab66ce61c5a5aa1902e034634338dacdd9ed6ae0330bdd68038fa128b18b97997778a663fd58e8d951e6c1e0dd385070532f2787e0643e1563cc4c04721bbae8d87306f0229f6206d758bd0fd270ca4efe94187af3e01d58477f54e5a48a2e92c48fe53d9970d652ff70640846317f22962135535ad83a8e70aff91ef2ac4f53aa0698ca0f22bcc006212d9c5ef06359aed251b51d213f4649e72a8821119f9e894866bd162f724d72b240541c4b5f31fcdc835871ada201acbf40b6d2fddf2cbd", @ANYRES32=r1], 0x1c}, 0x1}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x41e080, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000300)=""/177, 0xb1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0xe, 0x4) 2018/04/24 07:05:42 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="e930965b20475b7714a62a32a667eef407107676ec975be0e90824800000000000000000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000000003000000000007000000000000009b98a1370665d3218146e604777b0000000000002000000000000000211bf50bc1746467e349c76718c8083ba4a4f1b4d841474037b096851868a6b4864ac39f3d165621bd98"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0xffffffffffffffff}, 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) write(r0, &(0x7f0000000080)="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", 0x3cb) getpeername$packet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', r3}) 2018/04/24 07:05:42 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x4, 0x1) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000002d40)={0x6, r0, 0x1}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000002fc0)=""/131, &(0x7f00000030c0)=0x83) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002e80)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000002f80)=0xe8) recvmsg$kcm(r1, &(0x7f0000006e40)={&(0x7f0000005880)=@can, 0x80, &(0x7f0000006d80)=[{&(0x7f0000005900)=""/42, 0x2a}, {&(0x7f0000005940)=""/233, 0xe9}, {&(0x7f0000005a40)=""/118, 0x76}, {&(0x7f0000005ac0)=""/121, 0x79}, {&(0x7f0000005b40)=""/29, 0x1d}, {&(0x7f0000005b80)=""/170, 0xaa}, {&(0x7f0000005c40)=""/86, 0x56}, {&(0x7f0000005cc0)=""/143, 0x8f}, {&(0x7f0000005d80)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x7fffffff}, 0x103) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000006e80)={@ipv4={[], [], @multicast1}}, &(0x7f0000006ec0)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000006f00)={r2, 0x1, 0x6}, 0x10) recvmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/244, 0xf4}], 0x1, &(0x7f00000002c0)=""/170, 0xaa}}, {{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000440)=""/178, 0xfffffffffffffe82}], 0x2, &(0x7f0000000540)=""/132, 0x84}}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/82, 0x52}], 0x2, &(0x7f0000000780)=""/92, 0xfffffffffffffe2e}}, {{&(0x7f0000000800)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/30, 0x1e}, {&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000000980)=""/248, 0xffffffc3}, {&(0x7f0000000a80)=""/115, 0x73}], 0x4, &(0x7f0000000b40)=""/80, 0x50}}, {{&(0x7f0000000bc0)=@can, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/52, 0x34}, {&(0x7f0000000c80)=""/238, 0xee}, {&(0x7f0000000d80)=""/116, 0x74}, {&(0x7f0000000e00)=""/239, 0xef}, {&(0x7f0000000f00)=""/102, 0x66}, {&(0x7f0000000f80)=""/172, 0xac}], 0x6, &(0x7f00000010c0)=""/81, 0x51}}, {{&(0x7f0000001140)=@nl=@proc, 0x80, &(0x7f0000002600)=[{&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001240)=""/105, 0x69}, {&(0x7f00000012c0)=""/124, 0x7c}, {&(0x7f0000001340)=""/32, 0x18a}, {&(0x7f0000001380)=""/228, 0xe4}, {&(0x7f0000001480)=""/6, 0x6}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/213, 0xd5}, {&(0x7f00000025c0)=""/15, 0xf}], 0x9, &(0x7f00000026c0)=""/191, 0xbf}}, {{&(0x7f0000002780)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002800)=""/95, 0x5f}, {&(0x7f0000002880)=""/53, 0x35}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/93, 0x5d}, {&(0x7f0000002a00)=""/106, 0x6a}], 0x5, &(0x7f0000002b00)=""/2, 0x2}}], 0x7, 0x0, &(0x7f0000002d00)={0x0, 0x1c9c380}) getsockname$netlink(r3, &(0x7f0000000080), &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xffffffffffffb4bc, @dev={0xfe, 0x80, [], 0x20}}], 0x1c) sendmsg(r0, &(0x7f0000003080)={&(0x7f0000002d80)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(rfc4106-gcm-aesni)\x00'}, 0x80, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)}, 0x0) [ 78.705513] kvm [6872]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000074 2018/04/24 07:05:42 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20b}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x9, 0x7, 0x1ff, 0x7ff, 0x100000000, 0x1, 0x9, 0x0, 0x5, 0x5}) 2018/04/24 07:05:42 executing program 7: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'os2.', '/dev/snd/seq\x00'}, &(0x7f0000000040)='/dev/snd/seq\x00', 0xd, 0x2) r1 = memfd_create(&(0x7f0000000180)="405378e6d886813696726980670052ce75126c3af0464a53b12aff9434fa2fb1837ad48e473f31c4e880c18e81c3fcc60c99d578d76c1bc911be67cf2cb2a7ff3e267314e23e71a90a1ee42c733a6fc1d9edce57a91a708ea494b106a39bfd3ce060b06c09b0a93c2a6d4b857b81969bf23e170c8307aad89399fb452b4e83a409d4da32342727c7d4d22172a0b8cc6f8f3810ba681612706e868654de596f77acae4f0a26b434ce0a50cb9ad8bdd32988f9b778cf70d803ed5bd7698564796bc7d354e8c1e495e089fb48170426eab0e51e8e97ac2a19a8b652118b1f75c604", 0x0) syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000080)={0x9, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e22}, 0x4, 0xffff, 0x1, 0x8001, 0x9, 0x0, 0x81, 0x1f, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc0bc5310, &(0x7f0000044000)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in6=@ipv4={[], [], @local}}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) 2018/04/24 07:05:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) dup3(r0, r1, 0x0) 2018/04/24 07:05:42 executing program 6: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffffffffffff001, 0x3}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x8001, 0x3b, "ddfc4dea8747f80ad5185e8dbdd4f3249f7d7be9b23d08556f1a3bf962d211a994ab57698ac052d6d08aac54c2053b1f3999592d0c8fb9eeb87bea"}, 0x43) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)="2eb7721739b0c6f234b5394cef61dbe86a34d6ce954a8b98574e8165ded66757ccc388323f5a41decbe663df3f18221e6ea88aad0f4993a527b45439c6b77368adddc33a11bc2261fecb8f92beca838e63754a868143e92c5c48b3be00474b396cb8b49f40c1f4c68985830ee35997cf64d523bf94f4d8502924ae350f6427b6b4a1209876d994334ca27d5849e6b57c82e52a976087dc130a16faf219", 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) write$cgroup_int(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5) 2018/04/24 07:05:42 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x10001, 0x0) pread64(r0, &(0x7f00000000c0)=""/134, 0x86, 0x745a440) r1 = socket$bt_rfcomm(0x1f, 0x3d65493f037583af, 0x3) r2 = request_key(&(0x7f00000004c0)='.request_key_auth\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000540)='keyring\x00', 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f0000000580)=""/199, 0xc7) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0xfa4, 0x6, 0x8, 0x2}) clock_gettime(0x0, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_getevents(0x0, 0x2fed, 0x7ffff77, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={r3, r4+10000000}) r5 = add_key$user(&(0x7f0000000900)='user\x00', &(0x7f00000008c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="5362d7ec6098cbbe83d5d5c4a087b77b1b9cf264b9457f5c3c44744b8b04b63e9d9d2c7e0f3ef2189d640c6b68de7907703fbebceb6a94d008216824f4ae56c4d26d566d064a9e60f63ea4f847b9d8936d2f54b4571d1066f131d214ac4bdb31e0d2b1389b71a4622daef743bf661b5b204086234e", 0x75, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000700)={0x6, 0x0, 0x10000, 0x3}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000740)=0xffffffffffffff00, &(0x7f0000000780)=0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000680)={0x6, r6, 0x10000, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000006c0)={r7, 0x4}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000340)={0x9, 0x7ff, 0x800, 0x80000000, 0x8, 0x0, 0x7, 0xded6, 0x9, 0x7}) setsockopt(r0, 0x0, 0x5, &(0x7f00000007c0)="e3d2dff325c1facd3a7d13815611ef118f724bdd35fceadfa0f9345f72b9f85928b6cf8d937f4f8d3a922d271a13dfbcb94666a571ff913ee75e3912fd936e55a2e7f05bf9f9", 0x46) keyctl$assume_authority(0x10, r5) r8 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x49c2, 0x400, r8}) r9 = getpgid(0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) kcmp(r9, r10, 0x4, r0, r0) syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x9e, 0x7ca01) 2018/04/24 07:05:42 executing program 3: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000300)=0x0) sched_getattr(r1, &(0x7f0000000340), 0x30, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x180, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000002c0)) setresuid(r0, r2, r3) r5 = socket$key(0xf, 0x3, 0x2) accept4$packet(r4, 0x0, &(0x7f0000000440), 0x800) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a00000700000000000000000e487636d00d6000000005000a3c9fe500000000000000000000000000000000000000000000000000000000000000000000"], 0x38}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 2018/04/24 07:05:42 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) dup2(r0, r1) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_fuse_mount(&(0x7f00000006c0)="2e2f66696c65302f5c2e6c6530ff00", 0x0, 0x0, r2, 0x0, 0x0) 2018/04/24 07:05:42 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={r1, r2/1000+10000}, 0x10) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x100) 2018/04/24 07:05:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000adc000)="6e756d615f6d61707300b5c62eeedbc2799e2c854cfb9ead220e698a9e8de9f243640adf803c64577aa9e4e33f9f72e5185191246f8fe224cc925050e2a9e57dbf6b530a5ebbec861baf4dc4f84bb1df13f0b152aa3b6e781c81b6a8d091f88658ef4f16a21417d83d") mbind(&(0x7f0000bd4000/0x2000)=nil, 0x2000, 0x4003, &(0x7f00002aeff8)=0x9, 0x63, 0x0) pread64(r0, &(0x7f0000df6000), 0x0, 0x800000000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) msync(&(0x7f0000bd5000/0x1000)=nil, 0x1000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x90002001}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x400, 0x6, 0x7fff}) 2018/04/24 07:05:42 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/24 07:05:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4c}, 0x2c) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x36, &(0x7f00001a7f05)=""/251}, 0x18) 2018/04/24 07:05:42 executing program 0: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@loopback}}, {{@in6=@remote}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) syz_fuseblk_mount(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0xa00000000000c000, r1, r0, 0x7, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/24 07:05:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x62700, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/61, 0x3d) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003fd0)={0x10, 0x0, &(0x7f0000015000)=[@request_death={0x400c630e}]}) 2018/04/24 07:05:42 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x647, 0x4, 0xff, 0x9}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x7, 0x1, 0x64e, 0x3, r4}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040), 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000140)=0x43) 2018/04/24 07:05:42 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x46a, &(0x7f0000000240)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1f, 0x0, 0x7fffffff}, 0x2c) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000180)=0x800000000006, &(0x7f00000001c0)=0x2) setsockopt$sock_int(r0, 0x1, 0x1f, &(0x7f0000000140)=0x2000000000000000, 0x4) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x12c}]) [ 79.266082] skbuff: bad partial csum: csum=0/65535 len=290 [ 79.486576] device bridge_slave_1 left promiscuous mode [ 79.492489] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.505896] device bridge_slave_0 left promiscuous mode [ 79.511394] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.549285] team0 (unregistering): Port device team_slave_1 removed [ 79.559429] team0 (unregistering): Port device team_slave_0 removed [ 79.571908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 79.591760] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 79.621160] bond0 (unregistering): Released all slaves 2018/04/24 07:05:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000080)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2002, 0x0) 2018/04/24 07:05:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:43 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/prvs/drop_packet\x00', 0x7ffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x400) setsockopt$inet_dccp_buf(r0, 0x21, 0xc2, &(0x7f0000000000)="48c12a8be3e3fbf80d8f14c8dfbd55844c717721aca3353fb6092b44c27e9bb58dc1a5f1a0da67f6a7dcca8eab67635e7d3b47e01a3a6ceb4fbe177f40acccb7a8ef28830b79c44f5dd08cc9ce", 0x4d) keyctl$join(0x1, 0x0) 2018/04/24 07:05:43 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x647, 0x4, 0xff, 0x9}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x7, 0x1, 0x64e, 0x3, r4}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040), 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000140)=0x43) 2018/04/24 07:05:43 executing program 0: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@loopback}}, {{@in6=@remote}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) syz_fuseblk_mount(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0xa00000000000c000, r1, r0, 0x7, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/24 07:05:43 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000001c0)="efaf7edd552f85145afa9f20c12cdb40766edbe34e1c2624"}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffff9c, 0x28, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r0, 0x1f, 0x10}, 0xffffffffffffffe4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x1f, 0x6, 0x1, 0x10000, 0x2, r1, 0xffffffff}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000200)=""/134) socketpair$inet(0x16, 0x0, 0x40, &(0x7f0000000180)) 2018/04/24 07:05:43 executing program 3: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@loopback}}, {{@in6=@remote}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) syz_fuseblk_mount(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0xa00000000000c000, r1, r0, 0x7, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/24 07:05:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000adc000)="6e756d615f6d61707300b5c62eeedbc2799e2c854cfb9ead220e698a9e8de9f243640adf803c64577aa9e4e33f9f72e5185191246f8fe224cc925050e2a9e57dbf6b530a5ebbec861baf4dc4f84bb1df13f0b152aa3b6e781c81b6a8d091f88658ef4f16a21417d83d") mbind(&(0x7f0000bd4000/0x2000)=nil, 0x2000, 0x4003, &(0x7f00002aeff8)=0x9, 0x63, 0x0) pread64(r0, &(0x7f0000df6000), 0x0, 0x800000000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) msync(&(0x7f0000bd5000/0x1000)=nil, 0x1000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x90002001}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x400, 0x6, 0x7fff}) [ 80.983381] device bridge_slave_1 left promiscuous mode [ 80.988951] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.005935] device bridge_slave_0 left promiscuous mode [ 81.011444] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.042651] team0 (unregistering): Port device team_slave_1 removed [ 81.052685] team0 (unregistering): Port device team_slave_0 removed [ 81.064636] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 81.076964] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 81.107529] bond0 (unregistering): Released all slaves [ 81.746205] IPVS: ftp: loaded support on port[0] = 21 [ 82.143102] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.149480] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.156575] device bridge_slave_0 entered promiscuous mode [ 82.180227] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.186593] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.193687] device bridge_slave_1 entered promiscuous mode [ 82.217522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.242095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.306484] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.333400] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.431640] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.438828] team0: Port device team_slave_0 added [ 82.461779] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.468880] team0: Port device team_slave_1 added [ 82.492292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.517186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.542154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.567803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.779793] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.786173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.792812] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.799167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.545202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.622131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.696689] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.702881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.710400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.784609] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/24 07:05:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000011c0)=""/20, &(0x7f0000001200)=0x14) 2018/04/24 07:05:47 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x647, 0x4, 0xff, 0x9}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x7, 0x1, 0x64e, 0x3, r4}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040), 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000140)=0x43) 2018/04/24 07:05:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:47 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x141}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000071100000000000000000000000000000950000000000000005a8493b1e3caadbe3f9c447eb0ceecef79531745833ec5a0cf7a53d7a7425c60d68f3f38a2f219f50c691c931a65b88e162bfda64294f26"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x50, &(0x7f00000000c0)}, 0xfffffffffffffe2d) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7f, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x5, 0x70bd2a, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040054) socketpair$inet(0xb, 0x6, 0xfffffffffffffffc, &(0x7f0000000140)) 2018/04/24 07:05:47 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xb, 0x359, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x19}, @ldst={0x0, 0x1, 0x2, 0x7, 0x9, 0xfffffff4, 0xfffffffffffffffc}, @exit={0x95}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x67, &(0x7f00000002c0)=""/103, 0x0, 0x0, [], r0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x5, 0x232, &(0x7f0000011f3d)=""/195}, 0x48) pread64(r1, &(0x7f00000004c0)=""/150, 0x96, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x840, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000008c0), &(0x7f0000000900)=0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)=@delsa={0x208, 0x11, 0x301, 0x70bd29, 0x25dfdbfe, {@in=@multicast1=0xe0000001, 0x4d5, 0x0, 0xff}, [@migrate={0x10c, 0x11, [{@in6=@dev={0xfe, 0x80, [], 0x1e}, @in=@rand_addr=0x100, 0x7e, 0x7, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1=0xe0000001, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x3c, 0x0, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x32, 0x2, 0x0, 0x3502, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80}, @in=@multicast1=0xe0000001, 0xff, 0x3, 0x0, 0x3505, 0xa}, {@in=@multicast1=0xe0000001, @in6=@loopback={0x0, 0x1}, 0x3e, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x33, 0x0, 0x0, 0x3500, 0xa, 0x2}]}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0xd}}, @address_filter={0x28, 0x1a, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0xa, 0xfffffffffffffff8, 0x80000001}}, @tmpl={0x84, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d5, 0x3b}, 0xa, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x3504, 0x7, 0x7cb80ceab8abe06f, 0x0, 0x2, 0x7f, 0x462}, {{@in=@multicast2=0xe0000002, 0x4d4, 0x32}, 0x2, @in6, 0x3505, 0x0, 0x1, 0x1, 0x7, 0x100000000, 0x400}]}, @extra_flags={0x8, 0x18, 0x80}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x208}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/61) r3 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x4aee, 0x4000) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000880)=0x0) fcntl$setown(r2, 0x8, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001e0002002cbd7000fbdbdf2500000000000000000000000001000004d30a003200ffffffff00000000000000000000000003000000053500001c000000ffff4e204e21000000000000000000000000000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2018/04/24 07:05:47 executing program 6: pselect6(0x40, &(0x7f0000005000)={0x0, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x8}, &(0x7f0000005fc0), &(0x7f0000000000), &(0x7f0000005ff8), &(0x7f0000000000)={&(0x7f0000005ff8)={0xffffffffffffff7f}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x34) 2018/04/24 07:05:47 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0xc0180, 0x80) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000b80)='tls\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6, 0x200, 0x9, 0x5, 0x2, 0xcc6445cfbe260677, 0x5, 0x1a, 0x40, 0x2f5, 0x1, 0x7ff, 0x38, 0x1, 0x0, 0x5, 0x80000000}, [{0x7474e557, 0x100000000, 0x6, 0x9, 0x4, 0x3f, 0xfffffffffffffffc, 0x8000}, {0x6474e557, 0x5, 0x0, 0x3, 0xe5, 0xedd, 0x3, 0x8000}], "9d4a53faaf5c7e5a5f9c2c6d0760af097c817884956e34dc62b78aa309fa9063148738403a1e1d060536d68d6e6c8764c8f02648404cc88c8d960a1efd11ee0b4f363304ffc801689a511b8584159f7f76a7d173c86dc8ae7e914131da89dfe0dd92e334672a7c3b8ffb62dff00e02da7c32a84060f495abe9afb4f98de7", [[], [], [], [], [], [], []]}, 0x82e) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) r3 = add_key$keyring(&(0x7f0000000bc0)='keyring\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000280)=ANY=[], 0x0) add_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000cc0)="994672dbbb78ec823f4389706e14dbf2cd6245acee279017c3206f1051d8fd86502ea942eebcd208100b4e1b9c91150a2b09817662177f61d88635b243caf045635e5a071a15752ff7bf64c72e65edb75dfdae3626384d6ebe75916c3c250b19515319f08b882e51c9bb262aad6fd08ff4281ec4b4aa0d4cc5028c6e880075", 0x7f, r3) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x1, r0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 2018/04/24 07:05:47 executing program 2: r0 = socket$inet(0x2, 0x5, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000100)={@remote}, &(0x7f0000000140)=0xc) sendto$inet(r4, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500003c000000000029907800000000ffffffff4e20000000289078d02a7139f9c90fc60a88e3f37cddc41681d77617e7454999475152fdb170b61424acda5d14c28fe3862384e3183743732781210050a7f07190a683269e6b6f560460462696e8ba7c"], &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=r5, 0x4) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000080), 0x0) msgget$private(0x0, 0x600) close(r0) prctl$setmm(0x23, 0x0, &(0x7f0000fff000/0x1000)=nil) 2018/04/24 07:05:47 executing program 6: socketpair(0x0, 0x0, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x5, 0x1f}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="9c0000009ee6d1940ce0afd4524b91f3c2597ef8703ebdb024b7466ff2f54ef47dca2d2ac15c9230f3895cc86c4ec1bbda7fd2a0b1b5117125231ea65254e75805589b23d2ec0104d0f4bf778918440fab53408d470bcdb4e0b61b322b8814182dafe99f4e1bdc5d1059f06a3864f71a040798e7185deae72e5a1cbea5de8da258060424bb963960cc86966554899394889cd0f93249b2b9f8f0d3eaf1000000"], &(0x7f0000000280)=0xa4) r3 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00008f4000)={&(0x7f000076fff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000e2effe)=ANY=[@ANYBLOB="280000001000090000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001a0004000a00"], 0x3}, 0x1}, 0x0) 2018/04/24 07:05:47 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x647, 0x4, 0xff, 0x9}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x7, 0x1, 0x64e, 0x3, r4}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040), 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000140)=0x43) 2018/04/24 07:05:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) eventfd(0xfffffffffffffff9) io_setup(0x20, &(0x7f0000c6b000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001ec0)}]) 2018/04/24 07:05:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, 0xffffffffffffffff, 0x0) 2018/04/24 07:05:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000000, @mcast2={0xff, 0x2, [], 0x1}, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000540fe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1b) socket$alg(0x26, 0x5, 0x0) 2018/04/24 07:05:48 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x647, 0x4, 0xff, 0x9}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x7, 0x1, 0x64e, 0x3, r4}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040), 0x4) 2018/04/24 07:05:48 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x10000, 0x0) 2018/04/24 07:05:48 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(0xffffffffffffffff, r0, 0x0) [ 84.596488] device bridge_slave_1 left promiscuous mode [ 84.602172] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.697674] device bridge_slave_0 left promiscuous mode [ 84.703358] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.796675] team0 (unregistering): Port device team_slave_1 removed [ 84.809536] team0 (unregistering): Port device team_slave_0 removed [ 84.815623] IPVS: ftp: loaded support on port[0] = 21 [ 84.834237] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 84.858912] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 84.890912] bond0 (unregistering): Released all slaves [ 85.490283] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.496717] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.504393] device bridge_slave_0 entered promiscuous mode [ 85.543402] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.549833] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.557520] device bridge_slave_1 entered promiscuous mode [ 85.593907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 85.630654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 85.739581] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.778575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.967348] IPVS: ftp: loaded support on port[0] = 21 [ 86.007871] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 86.015554] team0: Port device team_slave_0 added [ 86.085457] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 86.093888] team0: Port device team_slave_1 added [ 86.135550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.192083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.230367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.268799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.632381] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.638807] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.645968] device bridge_slave_0 entered promiscuous mode [ 86.654434] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.660846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.667539] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.673937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.681390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.690473] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.696970] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.705066] device bridge_slave_1 entered promiscuous mode [ 86.739673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 86.776196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 86.876430] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.913772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.070942] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.079280] team0: Port device team_slave_0 added [ 87.111269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.118521] team0: Port device team_slave_1 added [ 87.152523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.188006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.224241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.258754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.359803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.600914] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.607305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.613957] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.620314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.627585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 88.101912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.226477] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.350383] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.357286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.371122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.386169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.495837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.914444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.037275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.157133] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.163402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.170907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.294738] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/24 07:05:53 executing program 0: rt_sigtimedwait(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200), 0x1d3) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0xd000, 0x11f000}) 2018/04/24 07:05:53 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x220000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000140)={0x82e, 0x48d, 0x4, 'queue0\x00', 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x7fff}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r2}, 0x8) 2018/04/24 07:05:53 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3f, 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r1, 0x3, 0x0, "f7eeeb11e57129b3cba1"}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000014c0)="240000004e001f0014f9f4070008f414020806f70d000100020001000400000000040008", 0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f0000000000)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x80000001}, @in={0x2, 0x4e21, @multicast2=0xe0000002}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0xffff, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x3, 0x2b, 0x1, 0x8, 0x10000}, 0x14) 2018/04/24 07:05:53 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x7, 0x4}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) futex(&(0x7f0000000040), 0x82, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0) 2018/04/24 07:05:53 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8a, 0x302) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'bridge_slave_0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000000140)={0x1c, 0x2, 0x206, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/24 07:05:53 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x647, 0x4, 0xff, 0x9}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x7, 0x1, 0x64e, 0x3, r4}, 0x10) 2018/04/24 07:05:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3}, &(0x7f0000000040)=0x28130687cd249e7b) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/157, &(0x7f0000000140)=0x9d) [ 89.766301] netlink: 'syz-executor6': attribute type 1 has an invalid length. 2018/04/24 07:05:53 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) mremap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x8, 0x8, 0x3) 2018/04/24 07:05:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000040)=[0x6, 0x100000000, 0x400, 0x8, 0xa], 0x68, 0x2, 0xa, 0x8003, 0x8, 0x8, {0x5, 0x9, 0x2ead50ce, 0x10001, 0x7, 0x75, 0x5, 0xfffffffffffffffe, 0x6318, 0x40007657, 0x1, 0x8, 0x0, 0x78, "95a1c6a0a037133b64ee86d74185f39dc0dd3f022c2fe38a01b1f75f93a492ac"}}) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x7f9f, &(0x7f00000000c0)=0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000002d000000000000000000000000004a0475ce000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000000000000d1c7c272ee781fbd68add8e03d9135d29ef172490478d5f93392ad336b89bfd37fe54ff56778ac"], 0x8c) 2018/04/24 07:05:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:53 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x647, 0x4, 0xff, 0x9}, &(0x7f00000001c0)=0x14) 2018/04/24 07:05:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:53 executing program 3: r0 = socket$inet6(0xa, 0x7, 0x44) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000565ffc)=0x5, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/95, &(0x7f00000001c0)=0xfffffffffffffe50) 2018/04/24 07:05:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000d32fc0), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5f) sync() ioprio_set$pid(0x0, 0x0, 0x4001) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80, 0xfffffffffffffffd}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x8000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick, 0x0, {}, 0xfffffffffffffffc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0xd2, 0x5}, 'port0\x00', 0x8, 0x10000, 0x4, 0x3, 0x2, 0x8001, 0x2, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x3, 0x63}, 'port0\x00', 0x10, 0x10401, 0x100, 0x229, 0x7f, 0xffffffffffffffc0, 0x80000000, 0x0, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x80, @time, 0x0, {0xfff, 0x7}, 0x0, 0x0, 0x3e8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) ptrace$peek(0x2, r4, &(0x7f0000000580)) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r5 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000044ff6)='./control\x00', 0x0) r6 = fanotify_init(0x4, 0x800) fanotify_mark(r6, 0x32, 0x40000002, r5, &(0x7f0000000000)='./control\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000680)={r3, 0x1, 0xfffffffffffffca9, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff96) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/89) [ 89.814509] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 89.887867] mmap: syz-executor2 (7875) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/04/24 07:05:53 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'teql0\x00'}}) 2018/04/24 07:05:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000200)='./file0/file0\x00', 0x3fffa, 0x0) bind(r0, &(0x7f0000000140)=@nfc={0x27, 0x1, 0x0, 0x5}, 0x80) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/24 07:05:53 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) 2018/04/24 07:05:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f00000001c0)="b9880a0000b800000000ba000000000f30b8010000000f01d9b9960a00000f32430fc72ec46219a8f5460f01cbc46225079d8000c0feb9800000c00f32b9800000c00f3235000400000f30460f01f8", 0x4f}], 0x1, 0x0, &(0x7f0000000040), 0x0) 2018/04/24 07:05:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:53 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x101, 0x2a4203) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"69666230000006dc01583370b31700", 0xa201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000240)=0x1) r4 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$fuse(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1200000000000000000000"], 0x12) 2018/04/24 07:05:53 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x100) r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) inotify_rm_watch(r0, r1) r2 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000200)={{}, 0x2000001}) 2018/04/24 07:05:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:53 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x30401, 0x0) [ 90.188439] FAT-fs (loop0): Directory bread(block 112) failed 2018/04/24 07:05:53 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000220000000700000000009b009500000000000000"], &(0x7f00000001c0)="73797a6b616c6c65720001be826e8f833152f795b4d9f4bc3ea582523aed371b084fccfc3d2ef2cbe65d30642ca8dcd0f8479be52e66937908f1d8112489e8099d9d4edb806d81189c0fbb6818d028546c35d3363d54db0db780f54977ae6359d617c1d233d8e18abfc75f9a76cd8e1f77583bc02f07a33de6f304e95db82fd4da55ebd25162df6f88e7d1bb0654ffb31e008967", 0x1, 0x66, &(0x7f00000003c0)=""/153, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1e, 0x18, &(0x7f0000000380)="0aac1ac22028d576e0e5504088ca9e4994e25b35831f64ffd77376b81f8b", &(0x7f0000000140)=""/24}, 0x28) io_setup(0xfffffffffffff800, &(0x7f0000000100)=0x0) io_getevents(r1, 0xff, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x1c9c380}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4802ab6de9fec0ca, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) [ 90.234462] FAT-fs (loop0): Directory bread(block 113) failed [ 90.269481] FAT-fs (loop0): Directory bread(block 114) failed 2018/04/24 07:05:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:53 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xfffffffffffffffc, 0x0) r0 = syz_open_dev$amidi(&(0x7f000052bff4)='/dev/amidi#\x00', 0x34, 0x1) write$evdev(r0, &(0x7f0000a37000)=[{{0x77359400}}], 0x797) [ 90.314506] FAT-fs (loop0): Directory bread(block 112) failed [ 90.331185] FAT-fs (loop0): Directory bread(block 113) failed 2018/04/24 07:05:53 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r1, r2+30000000}) 2018/04/24 07:05:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") fchmod(r0, 0x55) ioctl$fiemap(r0, 0x40106614, &(0x7f0000000080)) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000000)={0x1, 0x80000000, [{0x3ff, 0x0, 0x10001}]}) [ 90.381052] FAT-fs (loop0): Directory bread(block 114) failed [ 90.435907] FAT-fs (loop0): Directory bread(block 112) failed [ 90.468345] FAT-fs (loop0): Directory bread(block 113) failed [ 90.499406] FAT-fs (loop0): Directory bread(block 114) failed 2018/04/24 07:05:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0xfffffffffffffffc, 0x8, 0x2}, 0x2c) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0)={0x1d}, 0x10) recvmmsg(r2, &(0x7f0000015000)=[{{&(0x7f000000e000)=@rc, 0xa, &(0x7f000000cfb0), 0x0, &(0x7f0000015000)=""/90, 0x5a}, 0xfffffffffffffe00}, {{&(0x7f0000015000)=@can, 0xffffffffffffff11, &(0x7f0000015000)=[{&(0x7f000000e000)=""/34, 0x22}, {&(0x7f0000013fe7)=""/25, 0x1ce}], 0x2, &(0x7f00000000c0)=""/184, 0xb8}}], 0x2, 0x0, &(0x7f0000013000)={0x77359400}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$ipx(r3, &(0x7f00000017c0), &(0x7f0000001800)=0x10) 2018/04/24 07:05:54 executing program 3: sched_setattr(0x0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x3f, 0x9, 0x5, 0x4, 0x7, 0x6, 0x4}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) lseek(r2, 0xfffffffffffffffc, 0x4) fcntl$addseals(r2, 0x409, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) r3 = dup2(r0, r1) write$sndseq(r3, &(0x7f0000000100), 0x0) 2018/04/24 07:05:54 executing program 6: mlockall(0x3) clock_adjtime(0x0, &(0x7f0000000100)={0xf15, 0xffc99a3b00000000, 0x0, 0x0, 0x0, 0x9}) 2018/04/24 07:05:54 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000d80)) 2018/04/24 07:05:54 executing program 2: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x101002) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000280)="46bfe4fba05a76d970df0b50e22afebd1246abcdb6bd48edc8148c7921ca3ccd1bb65b23f6bc63d78826af1a2a24725b396736ab3d40d75495e244a190c1c5b392331b0172f69ac697ae") r4 = syz_open_pts(r2, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) r5 = socket(0x8, 0xa, 0x627) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) ptrace$setopts(0x4206, r1, 0x401, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000240)) dup2(r0, r2) 2018/04/24 07:05:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup3(r0, r1, 0x0) 2018/04/24 07:05:54 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xfffffffffffffffc, 0x0) r0 = syz_open_dev$amidi(&(0x7f000052bff4)='/dev/amidi#\x00', 0x34, 0x1) write$evdev(r0, &(0x7f0000a37000)=[{{0x77359400}}], 0x797) 2018/04/24 07:05:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10048100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd0, r2, 0x200, 0x70bd29, 0x25dfdbfe, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffff001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) read$eventfd(r1, &(0x7f0000000080), 0x8) 2018/04/24 07:05:54 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x100001}, 0xc) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000004740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000004780)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x8, 0xffff, 0x5, 0x3f, 0x6a}, &(0x7f0000004840)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000004880)=@assoc_value={r3, 0x1}, &(0x7f00000048c0)=0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c, 0x101}, 0x14}, 0x1}, 0x0) 2018/04/24 07:05:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000"}) dup3(r0, r1, 0x0) 2018/04/24 07:05:54 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/04/24 07:05:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0xa, 0x0, 0x0, 0x1}, {0x1}, {0x7}]}) 2018/04/24 07:05:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000"}) dup3(r0, r1, 0x0) 2018/04/24 07:05:54 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/04/24 07:05:54 executing program 0: 2018/04/24 07:05:54 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 91.505039] ================================================================== [ 91.512589] BUG: KASAN: null-ptr-deref in refcount_inc_not_zero+0x8f/0x2d0 [ 91.519598] Read of size 4 at addr 0000000000000004 by task syz-executor7/8016 [ 91.526941] [ 91.528564] CPU: 1 PID: 8016 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #14 [ 91.535729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.545073] Call Trace: [ 91.547651] dump_stack+0x1b9/0x294 [ 91.551267] ? dump_stack_print_info.cold.2+0x52/0x52 [ 91.556441] ? kasan_check_write+0x14/0x20 [ 91.560662] ? do_raw_spin_lock+0xc1/0x200 [ 91.564882] ? vprintk_func+0x81/0xe7 [ 91.568670] ? refcount_inc_not_zero+0x8f/0x2d0 [ 91.573322] kasan_report.cold.7+0x6d/0x2fe [ 91.577633] check_memory_region+0x13e/0x1b0 [ 91.582047] kasan_check_read+0x11/0x20 [ 91.586007] refcount_inc_not_zero+0x8f/0x2d0 [ 91.590495] ? refcount_add_not_zero+0x320/0x320 [ 91.595239] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 91.600241] ? lock_sock_nested+0x9f/0x120 [ 91.604465] refcount_inc+0x15/0x70 [ 91.608076] llc_ui_release+0xba/0x2b0 [ 91.611947] ? fsnotify_first_mark+0x330/0x330 [ 91.616528] sock_release+0x96/0x1b0 [ 91.620228] ? sock_alloc_file+0x4e0/0x4e0 [ 91.624445] sock_close+0x16/0x20 [ 91.627882] __fput+0x34d/0x890 [ 91.631148] ? fput+0x1a0/0x1a0 [ 91.634419] ? _raw_spin_unlock_irq+0x27/0x70 [ 91.638901] ____fput+0x15/0x20 [ 91.642164] task_work_run+0x1e4/0x290 [ 91.646041] ? task_work_cancel+0x240/0x240 [ 91.650350] ? switch_task_namespaces+0xbd/0xd0 [ 91.655011] do_exit+0x1aee/0x2730 [ 91.658540] ? plist_add+0x770/0x770 [ 91.662247] ? mm_update_next_owner+0x980/0x980 [ 91.666901] ? print_usage_bug+0xc0/0xc0 [ 91.670948] ? graph_lock+0x170/0x170 [ 91.674745] ? do_raw_spin_unlock+0x9e/0x2e0 [ 91.679140] ? rcu_note_context_switch+0x710/0x710 [ 91.684050] ? lock_acquire+0x1dc/0x520 [ 91.688017] ? __might_sleep+0x95/0x190 [ 91.691983] ? __lock_acquire+0x7f5/0x5140 [ 91.696215] ? debug_check_no_locks_freed+0x310/0x310 [ 91.701390] ? do_raw_spin_unlock+0x9e/0x2e0 [ 91.705785] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 91.710354] ? kasan_check_write+0x14/0x20 [ 91.714574] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 91.719753] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 91.725274] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 91.730365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.735887] ? futex_wait+0x5c1/0x9f0 [ 91.739684] ? perf_trace_lock_acquire+0xe3/0x980 [ 91.744520] ? futex_wait_setup+0x400/0x400 [ 91.748830] ? perf_trace_lock+0x900/0x900 [ 91.753052] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 91.758571] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 91.763657] ? futex_wake+0x2f6/0x750 [ 91.767440] ? graph_lock+0x170/0x170 [ 91.771234] ? memset+0x31/0x40 [ 91.774502] ? find_held_lock+0x36/0x1c0 [ 91.778553] ? lock_downgrade+0x8e0/0x8e0 [ 91.782698] do_group_exit+0x16f/0x430 [ 91.786576] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 91.791141] ? __ia32_sys_exit+0x50/0x50 [ 91.795191] ? _raw_spin_unlock_irq+0x27/0x70 [ 91.799673] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 91.804677] get_signal+0x886/0x1960 [ 91.808386] ? ptrace_notify+0x130/0x130 [ 91.812436] ? kasan_check_read+0x11/0x20 [ 91.816568] ? rcu_is_watching+0x85/0x140 [ 91.820708] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 91.825886] ? sock_ioctl+0x32e/0x680 [ 91.829673] do_signal+0x98/0x2040 [ 91.833204] ? expand_files.part.8+0x9a0/0x9a0 [ 91.837771] ? lock_downgrade+0x8e0/0x8e0 [ 91.841905] ? setup_sigcontext+0x7d0/0x7d0 [ 91.846213] ? dlci_ioctl_set+0x40/0x40 [ 91.850183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.855706] ? do_vfs_ioctl+0x1f2/0x16a0 [ 91.859759] ? ioctl_preallocate+0x2e0/0x2e0 [ 91.864165] ? exit_to_usermode_loop+0x87/0x310 [ 91.868822] exit_to_usermode_loop+0x28a/0x310 [ 91.873388] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 91.878216] ? ksys_ioctl+0x81/0xd0 [ 91.881841] ? do_syscall_64+0x92/0x800 [ 91.885805] do_syscall_64+0x6ac/0x800 [ 91.889677] ? finish_task_switch+0x1ca/0x810 [ 91.894157] ? syscall_return_slowpath+0x5c0/0x5c0 [ 91.899072] ? syscall_return_slowpath+0x30f/0x5c0 [ 91.903991] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 91.909348] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 91.914177] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.919348] RIP: 0033:0x455389 [ 91.922519] RSP: 002b:00007effcd41dce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.930217] RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 0000000000455389 [ 91.937468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 [ 91.944725] RBP: 000000000072bec8 R08: 0000000000000000 R09: 000000000072bea0 [ 91.951978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.959231] R13: 00007ffe407ef0af R14: 00007effcd41e9c0 R15: 0000000000000000 [ 91.966492] ================================================================== [ 91.973827] Disabling lock debugging due to kernel taint [ 91.979997] Kernel panic - not syncing: panic_on_warn set ... [ 91.979997] [ 91.987383] CPU: 1 PID: 8016 Comm: syz-executor7 Tainted: G B 4.17.0-rc2+ #14 [ 91.995952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.005298] Call Trace: [ 92.007886] dump_stack+0x1b9/0x294 [ 92.011518] ? dump_stack_print_info.cold.2+0x52/0x52 [ 92.016721] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 92.021482] ? refcount_inc_not_zero+0x40/0x2d0 [ 92.026156] panic+0x22f/0x4de [ 92.029350] ? add_taint.cold.5+0x16/0x16 [ 92.033498] ? do_raw_spin_unlock+0x9e/0x2e0 [ 92.037905] ? do_raw_spin_unlock+0x9e/0x2e0 [ 92.042311] ? refcount_inc_not_zero+0x8f/0x2d0 [ 92.046976] kasan_end_report+0x47/0x4f [ 92.050947] kasan_report.cold.7+0x76/0x2fe [ 92.055268] check_memory_region+0x13e/0x1b0 [ 92.059674] kasan_check_read+0x11/0x20 [ 92.063654] refcount_inc_not_zero+0x8f/0x2d0 [ 92.068151] ? refcount_add_not_zero+0x320/0x320 [ 92.072905] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 92.077922] ? lock_sock_nested+0x9f/0x120 [ 92.082158] refcount_inc+0x15/0x70 [ 92.085780] llc_ui_release+0xba/0x2b0 [ 92.089667] ? fsnotify_first_mark+0x330/0x330 [ 92.094259] sock_release+0x96/0x1b0 [ 92.097974] ? sock_alloc_file+0x4e0/0x4e0 [ 92.102209] sock_close+0x16/0x20 [ 92.105662] __fput+0x34d/0x890 [ 92.108946] ? fput+0x1a0/0x1a0 [ 92.112232] ? _raw_spin_unlock_irq+0x27/0x70 [ 92.116733] ____fput+0x15/0x20 [ 92.120008] task_work_run+0x1e4/0x290 [ 92.123981] ? task_work_cancel+0x240/0x240 [ 92.128296] ? switch_task_namespaces+0xbd/0xd0 [ 92.132956] do_exit+0x1aee/0x2730 [ 92.136479] ? plist_add+0x770/0x770 [ 92.140174] ? mm_update_next_owner+0x980/0x980 [ 92.144832] ? print_usage_bug+0xc0/0xc0 [ 92.148874] ? graph_lock+0x170/0x170 [ 92.152664] ? do_raw_spin_unlock+0x9e/0x2e0 [ 92.157068] ? rcu_note_context_switch+0x710/0x710 [ 92.161977] ? lock_acquire+0x1dc/0x520 [ 92.165934] ? __might_sleep+0x95/0x190 [ 92.169893] ? __lock_acquire+0x7f5/0x5140 [ 92.174121] ? debug_check_no_locks_freed+0x310/0x310 [ 92.179288] ? do_raw_spin_unlock+0x9e/0x2e0 [ 92.183680] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 92.188250] ? kasan_check_write+0x14/0x20 [ 92.192471] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 92.197648] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 92.203171] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 92.208255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 92.213776] ? futex_wait+0x5c1/0x9f0 [ 92.217564] ? perf_trace_lock_acquire+0xe3/0x980 [ 92.222386] ? futex_wait_setup+0x400/0x400 [ 92.226691] ? perf_trace_lock+0x900/0x900 [ 92.230906] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 92.236425] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 92.241505] ? futex_wake+0x2f6/0x750 [ 92.245285] ? graph_lock+0x170/0x170 [ 92.249070] ? memset+0x31/0x40 [ 92.252331] ? find_held_lock+0x36/0x1c0 [ 92.256376] ? lock_downgrade+0x8e0/0x8e0 [ 92.260513] do_group_exit+0x16f/0x430 [ 92.264390] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 92.268958] ? __ia32_sys_exit+0x50/0x50 [ 92.273001] ? _raw_spin_unlock_irq+0x27/0x70 [ 92.277486] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 92.282484] get_signal+0x886/0x1960 [ 92.286181] ? ptrace_notify+0x130/0x130 [ 92.290222] ? kasan_check_read+0x11/0x20 [ 92.294353] ? rcu_is_watching+0x85/0x140 [ 92.298484] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 92.303657] ? sock_ioctl+0x32e/0x680 [ 92.307455] do_signal+0x98/0x2040 [ 92.310978] ? expand_files.part.8+0x9a0/0x9a0 [ 92.315541] ? lock_downgrade+0x8e0/0x8e0 [ 92.319671] ? setup_sigcontext+0x7d0/0x7d0 [ 92.323976] ? dlci_ioctl_set+0x40/0x40 [ 92.327931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.333448] ? do_vfs_ioctl+0x1f2/0x16a0 [ 92.337489] ? ioctl_preallocate+0x2e0/0x2e0 [ 92.341879] ? exit_to_usermode_loop+0x87/0x310 [ 92.346526] exit_to_usermode_loop+0x28a/0x310 [ 92.351087] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 92.355909] ? ksys_ioctl+0x81/0xd0 [ 92.359516] ? do_syscall_64+0x92/0x800 [ 92.363473] do_syscall_64+0x6ac/0x800 [ 92.367348] ? finish_task_switch+0x1ca/0x810 [ 92.371831] ? syscall_return_slowpath+0x5c0/0x5c0 [ 92.376738] ? syscall_return_slowpath+0x30f/0x5c0 [ 92.381655] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 92.387001] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 92.391834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.397000] RIP: 0033:0x455389 [ 92.400175] RSP: 002b:00007effcd41dce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.407861] RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 0000000000455389 [ 92.415117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 [ 92.422361] RBP: 000000000072bec8 R08: 0000000000000000 R09: 000000000072bea0 [ 92.429609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.436860] R13: 00007ffe407ef0af R14: 00007effcd41e9c0 R15: 0000000000000000 [ 92.444588] Dumping ftrace buffer: [ 92.448102] (ftrace buffer empty) [ 92.451789] Kernel Offset: disabled [ 92.455397] Rebooting in 86400 seconds..