INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. 2018/04/21 02:34:26 fuzzer started 2018/04/21 02:34:26 dialing manager at 10.128.0.26:39431 syzkaller login: [ 55.564478] can: request_module (can-proto-0) failed. [ 55.574393] can: request_module (can-proto-0) failed. 2018/04/21 02:34:53 kcov=true, comps=true 2018/04/21 02:34:58 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000000280)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000000100)='./file0/control\x00') 2018/04/21 02:34:58 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) dup2(r1, r0) 2018/04/21 02:34:58 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x20f}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x4, 0x0, 0x0, &(0x7f0000000d00)) 2018/04/21 02:34:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x0, 0x7}, 0x98) 2018/04/21 02:34:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f0000000040)) sync() umount2(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:34:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002f0c31)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000544000)) 2018/04/21 02:34:59 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(r1, 0x0, 0x0) ioprio_set$uid(0x3, r1, 0x0) 2018/04/21 02:34:59 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="83", 0x1}], 0x1) write(r1, &(0x7f0000000080)="11", 0x1) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000240)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/89, 0x59}], 0x1, &(0x7f00000004c0)=""/3, 0x3}, 0x100) close(r1) [ 62.723957] IPVS: ftp: loaded support on port[0] = 21 [ 62.726425] IPVS: ftp: loaded support on port[0] = 21 [ 62.757973] IPVS: ftp: loaded support on port[0] = 21 [ 62.788449] IPVS: ftp: loaded support on port[0] = 21 [ 62.800546] IPVS: ftp: loaded support on port[0] = 21 [ 62.845313] IPVS: ftp: loaded support on port[0] = 21 [ 62.853853] IPVS: ftp: loaded support on port[0] = 21 [ 62.871397] IPVS: ftp: loaded support on port[0] = 21 [ 64.871219] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.877772] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.896153] device bridge_slave_0 entered promiscuous mode [ 64.919807] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.926348] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.948866] device bridge_slave_0 entered promiscuous mode [ 64.982174] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.988588] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.013984] device bridge_slave_0 entered promiscuous mode [ 65.038855] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.045282] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.058185] device bridge_slave_1 entered promiscuous mode [ 65.078831] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.085260] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.097209] device bridge_slave_0 entered promiscuous mode [ 65.106302] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.112673] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.126838] device bridge_slave_0 entered promiscuous mode [ 65.143072] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.149487] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.156968] device bridge_slave_0 entered promiscuous mode [ 65.164814] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.171199] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.191931] device bridge_slave_1 entered promiscuous mode [ 65.218881] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.225297] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.238655] device bridge_slave_1 entered promiscuous mode [ 65.247287] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.253690] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.266221] device bridge_slave_1 entered promiscuous mode [ 65.274995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.282430] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.288799] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.300488] device bridge_slave_1 entered promiscuous mode [ 65.311826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.319978] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.326523] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.345179] device bridge_slave_0 entered promiscuous mode [ 65.364925] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.371362] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.387469] device bridge_slave_1 entered promiscuous mode [ 65.394280] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.400689] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.409478] device bridge_slave_0 entered promiscuous mode [ 65.417132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.425787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.435948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.450616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.458491] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.464962] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.491164] device bridge_slave_1 entered promiscuous mode [ 65.508990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.518689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.543804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.561366] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.567785] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.592117] device bridge_slave_1 entered promiscuous mode [ 65.604353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.634140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.642461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.685574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.724455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.791630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.862612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.876527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.892375] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.915660] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.946624] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 66.015171] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.070166] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 66.080069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.096410] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.105493] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 66.116506] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.168168] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 66.205883] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.285009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 66.294337] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.326261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.333284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.348837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.359406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.368062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.383218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.391931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.399777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.439383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.457546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.489544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.507438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.524057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.533129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.555438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.563806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.570708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.583438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.706928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.714127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.721138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.733127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.770723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.787712] team0: Port device team_slave_0 added [ 66.809742] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.823069] team0: Port device team_slave_0 added [ 66.834911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.843189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.854877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.866275] team0: Port device team_slave_0 added [ 66.885091] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.903052] team0: Port device team_slave_1 added [ 66.923768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.937913] team0: Port device team_slave_0 added [ 66.956357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.969711] team0: Port device team_slave_0 added [ 66.985474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.006724] team0: Port device team_slave_1 added [ 67.035798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.053739] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.070250] team0: Port device team_slave_1 added [ 67.089753] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.100874] team0: Port device team_slave_1 added [ 67.109522] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.117495] team0: Port device team_slave_0 added [ 67.125420] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.138528] team0: Port device team_slave_1 added [ 67.146604] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.155160] team0: Port device team_slave_0 added [ 67.197939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.214772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.231678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.254512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.271616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.294869] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.322686] team0: Port device team_slave_1 added [ 67.336757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.344396] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.352163] team0: Port device team_slave_1 added [ 67.358312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.372647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.388172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.400618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.417181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.426273] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.433740] team0: Port device team_slave_0 added [ 67.441289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.450341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.457309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.474673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.493785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.505839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.517512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.525306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.534388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.541416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.549253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.557365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.564824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.573499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.583308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.592695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.602237] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.614429] team0: Port device team_slave_1 added [ 67.639126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.652954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.680689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.688685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.696410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.704873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.712802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.720698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.728392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.736270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.747180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.756407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.765550] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.775762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.787591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.795112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.802507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.831633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.871441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.887644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.895918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.903831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.911655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.919413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.926799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.935729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.943554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.951525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.964224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.979719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.988600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.995846] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.003484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.022254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.043893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.069316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.087331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.095241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.102950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.110770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.124961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.134618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.144960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.169698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.194004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.227694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.254907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.267227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.274977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.293791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.304684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.333688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.255759] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.262296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.269336] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.275730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.293218] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.305322] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.311698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.318356] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.324737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.347440] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.358796] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.365204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.371841] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.378186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.390462] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.412646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.431129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.456491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.617566] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.623979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.630644] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.637070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.664312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.676178] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.682566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.689210] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.695586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.724513] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.734603] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.741037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.747700] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.754092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.761838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.777744] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.784179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.790822] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.797185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.832720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.841903] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.848290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.854919] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.861267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.869955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.433193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.451313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.474723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.486996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.495275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.430788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.474125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.687596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.786450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.822643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.882299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.895070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.917691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.943667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.956509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.197510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.308175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.321574] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.337290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.343530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.350686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.383276] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.397170] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.406484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.416502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.425216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.548818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.688727] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.694977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.703085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.831760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.841246] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.848187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.860773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.878822] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.887674] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.898076] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.922971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.932258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.948648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.980581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.996638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.004855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.012322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.143609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.151174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.167681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.207414] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.265930] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.401945] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.418406] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.438690] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.749117] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 02:35:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000002c0)=0x400000005, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x10000) r2 = getuid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)=0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x15be40, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x50, 0x22, 0xa0a, 0x70bd27, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x42, @uid=r2}, @nested={0x28, 0x3, [@typed={0x8, 0x26, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @typed={0x8, 0x31, @ipv4=@broadcast=0xffffffff}, @typed={0x4, 0x96}, @typed={0x8, 0x48, @pid=r3}, @typed={0x8, 0x5e, @fd=r4}]}, @typed={0x8, 0x3c, @u32=0xfffffffffffffffd}, @typed={0x4, 0x10}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x44010) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)="43504c00ad6d549d32b2c2de6e862538adb8a59645d1cc67d1847ffe739d18eec5025500f050bebc1021de16207f42a297d8b24afd584b4c4c2978e090e595bd5ee1e26086cc8139f7a8cf436c6d7b50ee873eeca4be11de7c3158e35c40bd036a35688d736fdc5390084761223f9fd654bae1b5a15e708617b965dd4e28d0e24a25a9b91544c9dc7b78efbf7e5cd757dc929f8992d1f4e97766f00fc2ed7e58c2eca0d8c194b44ac258f7aaa7bc259d6995ed36d3831748140b37c9f92b0b54d331a269463e5bf3304207c74204000000520e22657b9532f9f84900000000000000000000000000", 0x0, 0x7f, &(0x7f0000008000)=""/127}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000002ff6)="00647a72616c8c657200", 0x7e0, 0xe7, &(0x7f000000df19)=""/231}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xe7}, 0x10) r6 = open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x40) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={r7, 0x2}, &(0x7f0000000180)=0x8) r8 = socket$inet6(0xa, 0x1, 0x9) getsockopt$inet6_int(r8, 0x29, 0xd3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/21 02:35:15 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f015") [ 78.998458] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) [ 79.005786] FAT-fs (loop4): Filesystem has been set read-only 2018/04/21 02:35:15 executing program 7: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/21 02:35:15 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f015") 2018/04/21 02:35:15 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f015") [ 79.238469] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) [ 79.275775] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) 2018/04/21 02:35:15 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000200)=""/128, 0x80}, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/11, 0xb}, {&(0x7f0000000840)=""/73, 0x49}, {&(0x7f00000008c0)=""/15, 0xf}, {&(0x7f0000000900)=""/36, 0x24}, {&(0x7f0000000940)=""/16, 0x10}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/46, 0x2e}], 0x7, &(0x7f0000000600)=""/77, 0x4d}, 0x0) 2018/04/21 02:35:15 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/21 02:35:15 executing program 4: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0xffffffffffffffe8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x1c7) sendto$inet6(r0, &(0x7f00000000c0), 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/21 02:35:16 executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x101844, 0x7) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x9a) write(r1, &(0x7f0000001600)="21977a45409795debb3cff73addaa4bbe8e2e8b252c0b287f6523f912b0fdd37018aa212515f181328f89ec0b29fb21decb0ef7d44c8cbf2f486c94fd4fd95c342bfe057794d47d60a23ecade46a1de8f69027abde204a043899c281551705e3ed5084979b67279dde1b63833319728aa49bac767173ebadaf20bf5e3fb81fe945f585ab12857265c83e3d42831850946570002800d3d483098c5ba0b5d47cc63d394b387987fc5839f5a73a4f534be5c63e7c6c4246200709cf697cd3d6c1288d40a803c1f09f2bd6767abbb6899641a35505bc0905417ad2e1d5fd0560a45d9ef702492d1295661714f64f37deea13f6857444dc04e0fe4e5dee16ef7a304667e9ce0c1834ab0a599fe3da414e9a0fea4488855b57fd2e16a526ba5cf96b37fe5d6bc2418c1d24ae1b856ec48437a842fc2a48937c638113612f86f2613d10a9a09230cbfd6c330e08dbb811575c1c9b9b24150cc8b0931ee833c90a8c7547743e13516b1323297081ee020f4992a790e09d4853e6b380689431597e45df18187c35e0dd9a13b1cc5c700a179df5587f9b30ef9ebc0089ccf9e1fe533619b1a628cb29a8f127dd63621f16f3aad7c460ba14c0df1a1eb6eeae1f79f6fa99b704d89bee960d39c3121dafe99c3c8217c173784547b228ed0f189abd97ed540eaee01ff934e5cec326becf76280d885d3056e064d59ae498a74b98db9b25f6033b4026408c3f0b577e2cc72a5db607f8203d00a34877436178115e9df674fe2fdcc90937cbf78cfa29b2915c00483adf42768ba897b8346841b754f6d04516c2da22df67d13bfc9aba03d5841ead6fe6c2bcc6299f45b148e50ea6072d6fcc7db315e165aca1a66cd01e5be1a3af485e2a5cf065121d9a1a7baf131911ed80933133f2eea86bfadb780654e4f83062ccc908f979a8a88d073896ab4507ad6137185ff3a93ce5920aacb9a6c569701e1042cdd3a94af3f6607725e4742ef98ec414e551af2706b8fcd15231539268843e52b04e0c6281bbe9e4d17befa2bc25c80d461e8acaba17f12b4c5b1dd5e781b97eae081fcd0869d850825e844aa5d3c5967c8e59ebd2f21e8d4f86e82fe60bbd42b7ac6886ad471526e7a89a011fdf9538c940c294e7a31ad7f2cc15278db5a284e286123d0c715fdbffaf96bda5a6d8d744c0b9ba2d1f4c7c38068cd4bb590d474f66bc6bb23a4af8a81ac5ff4ff4d7d091c9de5d4b4f0ae7c9e8e856c87fb7c13c9b3cbca9d0bc11f6d9b8da0ee646bc951f32f130414935001dd89e4996c2905b7c866a0bed0d3da78c474536410b6d5b38c47715dc9b10134fbd9c64cafcd33c75ff71ed79b1f3df82b152deb7934e551f3fbc6d1c66e16527f3bdc0a01fa5b22da496da87209002abb09872819dba87902ca67633884555dc938d9714a4643d36bc47cb43e4ea0d4bae54ef9927e149d8b111f5e6cc3a6f98522f2169347fab3c6e730988e1cdadc87ce2c89e0f95dea64376c0705932d6d145d78336a008b10e8874bdd5b23271b063027b9b6482a4dcbbf80bd0981dab75d8a34502d62fb7a995549fc6c6981413a2b1cbbf944d6d90f2fc770ab877c0d3777b06471514d1351256a1acc81b4667df5c55f85b80cb74673349a3fa6ea353d90014ed28bd483db7eb2698830089f7ee1db40b71e56fc34dc267a5a711122cabf4b51d03c83384d80a285dc2a9b71b7d2c69e17e12b4a122a1175a49d04ec025619a3de1f03fba325c57889816f47f39e13e54d25298a1d61090b6ff26e5e7a4e1fb3f4aa5b40139d5347e6b1ef19ae440eecf2c0457e673a2d9d6f09e91d2b41e7300dbf5b5f322a408555df11fe4c74bbee67e19d15b63752b065934fe015be56607f0c0e3ea09c432aa552badc67302fc4b43e7273cd9438cae01ff8e8f864b843519128bc4a9c361e4201a7c30c07d760b9952bd10956747be54151efd4389bd88014bfad617a0438c30a0205bd4965a9c80df5593c9f9f9bb83bbe75b8f6c12f77c3d06deb174a5a87ff91e39117ea6edc56d7d01f8e50a7214bc0715cba977c252c14b2c2e00fcb29e502bd82bfae98cee959211e2235a33448c929f7146ac20a3baadf15ecb72d36c40a9069b3447e0fa771072ac629ea0bd9933cd1d837700e42ecf1e0ce1fd9ef3a7b32c2cda2207aca6dd79794eb1cf8e7f6dae37480aeaa269795757601b8bc9d020432493d6064e3014f4b090c06e36c21912a287ecdd8b314776f13efc4c975bdfaf9acd6703c1785010917ff7baefaa0741530a16a0b0811de483a58770990e4a3ce376e5ac1663eb3cd59eaa2d1e90b3ce5fe2e7aa8b458e2c839fef288b02dd9bdf0b27cc1ddff23d4cd8109dbe0771653257cdfba532eedd0786cfabeef56c4b5e0a07767a201ac2d6bd443dc62b6ef7dc57817d1c7c17125598abd10a29d0a9c796680c0fc0513e28a50ab4295e23a2533242ffa0bfcaa46884cf234e8af471fbc63e08a16f2e1424a76f6c420f938207b022709d42b5c75dd2fa21a0469021ead28ee8e654f11de17386a4af06d35e21e2f826d0df2bb683a2ac7378459aeadba12988fc570b9bf96fbb655b189146a4bfd1b8f68eeb4650071858842b4253f3e0dbbe3023d21d8782f5fc727c438490960db1a875798ae5c5fd63d9e145eb8241d943a4076791865d7b770e2ae1ff5b5776c0a1cc560ee0def3071f3d757a1a1dc865c45da0f2a1afa5495c8a0338804512178c01cafb027e8266c96ccde4672ea311e2cc6ec7219335d0aa7c84f297e340218905e4c38538a16558425b2e7453631bd0da8cac7a9c56ffe628261332841f6a580a9668de6b323b5549baf739aecec2def552939e613f53df36e683dd0ebeba46a84de088ca50ef656148a501ae9de7de1a43adac68450fdea75c5ccb6294e1a931801f1ddd2525f4dbdeff580b6ee6bb62f10ed9ded5f0ff0be50c3088c2cd43aa4969676b4227a5051f2c7bec9fcb2f060098a9efa7d6f1b8f85fd66be1bfecff42defe8421e8a426a96f5fb29eb95886eef2d896958ce2468f7c338d2b7cad1e5fbff1a2e844472f6e0693325dc5f1b6c0069fa14c2aca3850170207fb54960cd492319dfc3ca53c399e06e749d48fdd115b7af9397211d0ad21ef7ecf539200b0f26da804cedef5b968697c8f57847441ba613065bff50c11ba105bfeee605e06104b6ac5e201c4c4061f59513c4a4a47e340ef09f043c6afec4f06aa74f5ccd35a1a6d0d2e484b82458ee58438db606a249dcd07161ad45825fd832cba63f52d994657394f39ae5123f3346ea4a2fb70a8c528924e84187e32319b0a0fa585075a92a901247bf37ce1d36f90633d72bf6e11d7d78536398826dc9d5d3d0de5ce5e6ba311481c81dae3326554c713dd1c23518529d0ef7884ca5157d96e99833c7295850a0dd27d316b1d5d1628d4b8ba582eac07445dd87512c564ea5453dcfd110eb8fad1560d8b44f8ddc52b7768295b14269a6fb9e8c0ca341399f24a0967f621785d125356bc3062c9c2745bfa91374fe81f12f9bff514bfdf3d3123db822298553785fd6b872cd8d9c1c34c0151a8c0f1b3226c05fc454b3271de3e14454962c356d25c11ab161bf3178c406494f4ee4f3db8abcd3d1a29ce060e3dc023f05c3e3260597502cd79609efc95f0a2a8369d571f7860c283a8129ec6ae39644f14f764e7983e0fb7e1005ee805f819a5bbd2fce05b627759ef9129d60c8a52483861c63de67ede89d57a853b5851927ac6b0b2efef78dda646c647fef994fd3a0177ab1eaccd77ddd5c03d95d18b9116506a760a18b78962f3df2b59d21d2221c471d4ac497c05f0fe64301a5b5374a601b58eec8a4e6c62afd99db22bba4628df350f3e9562581f7dd2cdf17838fc408db6053f59e3d3f0bd8e456f93bbb983da382d674267c588461da52ee8e4e222c4e58002be4e828933d32d58cf20938246bc2d585ea6a3032d940601bb4f70c0439c3567a30a329b95eb47a98df156019cf21e1cad6435a796b9258a827f7b8520c2fe286c6b301328774fff5b9c00ed12fb7f59e33c66e1ddf94ee810f61da43f1ee7a7ae472b5ebd8b7453b4d8523412c801442bdda8053e74ca053676afef154078e1113fa3dc0c0135e93186ead9d2ff00ec9e419cd0dab46be9f96a3cc26393c52f362affa878dfcfe31bd9e524bf528ef1fe95995dd1834368cb928b34f99cf60ae6d1a3e28e5ca23eff29b2e04a12fdaa6e65329fc703a0b19047de98ae0906feb61a2daa7756416775b5ab91c597c4d7bc8b4ef04dd3b71a284d13e730e17d8a3fb7798bed3171f80ae5f6f0dabeb7d60f4a927a67f9fea5c1f97ba8a9e02be7401f70d817c686500a23469138a0ae88be603b95645760a2a31e28a6eabc0517dca379f586d3ea496505a214db5847fb93f39708ecea3b9c00ac44c1dec51dec5ee081b1134ed78cfd56407f6895f044b8595d4752d417b5b748cd41845081ac1269f7d1d4458207c65a670b2d48a0d157140c1d3caafdcad9d32e21762a1f794c60c544e3787a1a225db951b9c77a5d6e46e1e0a8d6c8d4db347ea1f6bb33e95475ef88effb5a4ff31edac496c0d9dd88c45b785d1397fa8f92a47890fd01ed234c0b78660e029a458d82df0f5927b3cc2ef7026ab5eb13f206cbfcfc3ba1dd8f46ed42d0792d8a374a6fd859048ec70745a878ef1d4ccd4c7f8cf7a668aa42257cac425404ac295f08215bdeb81fc049983fedabe4b8ff890763d3483ee0086b9150f823aac7f35d5da103df1723477fa22bbf132c01d32d472766fa5b5b054a167ccbdc1a430abc932f8b7d0c1e7c9202e3af461a4f93dc6d16841b9dfd944feaf4f333997ea4a60e4a6934a26c2f1048118e8afad0058741df87ce2c710c3d882835948ca95866dac1401cf58303b5b241a23d32618b103f02f96fa16e28a59aa59e6b1d2a7cad2e68916af7005fc7fc7b2efcb90191c6a20def040ea1eb1c2ca0687a92fdc9807a6b767891e99f2fbf1de52dd1f8fb048250e572d5895dddcbd670e23a9806ecd82b8b4e8a2da07228a3bfc614e2f91c", 0xe00) r2 = open(&(0x7f0000000440)='./file0\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)='`', 0x1}], 0x1, 0x1000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7, r0, 0x1}) 2018/04/21 02:35:16 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f015") 2018/04/21 02:35:16 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f015") 2018/04/21 02:35:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/04/21 02:35:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/21 02:35:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000400)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc1205531, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)=""/7) 2018/04/21 02:35:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/04/21 02:35:16 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000b208bdb485459303fa8519d818f53400000000000000000000000000"], &(0x7f0000000080)=0x24) 2018/04/21 02:35:16 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'syz_tun\x00'}) 2018/04/21 02:35:16 executing program 4: add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="491c6d49f5acd91594f4b4aa7fd777413f98f5cceffc722df87ff42ddbad648c4400302e89c200c6deeab5f3683f18d00a88e14d363b11c76bd6d6131aad6e002f484e44efa77c52463d4376415c296bd97ab2c05610efe853e09be916b88fa2ba93014cf2da74b1403f0d55774ac02d4f43cb993216281500ce55b2784d6229e19cf0ef2734d8cb2f5d2b407e29b770d16404866c42b52e594d886e67baa12e68a0fee1f5ebc00a85be91a02177d1fc", 0xb0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) msgget(0x2, 0x1) keyctl$update(0x2, r0, 0x0, 0xfffffffffffffede) r1 = msgget(0x3, 0x5) r2 = dup(0xffffffffffffff9c) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000300)={0x5, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8, 0x1, 0x3ff, 0x10000, 0x400, &(0x7f00000002c0)='veth0_to_bridge\x00', 0x200, 0xffff, 0xe00e}) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/198) 2018/04/21 02:35:16 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000b208bdb485459303fa8519d818f53400000000000000000000000000"], &(0x7f0000000080)=0x24) 2018/04/21 02:35:16 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) getrlimit(0x4, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)) 2018/04/21 02:35:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/21 02:35:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80f, 0x7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x2ea, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, 0x9, 0x401, 0xe0, 0x100000000, 0x101}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @loopback=0x7f000001}, 0x3) 2018/04/21 02:35:16 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f015") 2018/04/21 02:35:16 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="61f015") 2018/04/21 02:35:16 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x24) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0xffffffffffffff86) 2018/04/21 02:35:16 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) epoll_create1(0x80000) socket$pptp(0x18, 0x1, 0x2) r1 = epoll_create1(0x80000) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000380)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000002c0)={0x1, r0}) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000003c0)=""/151) getsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000300), &(0x7f0000000340)=0x4) shutdown(r0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x20000) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000080)={0x1, 0x1000, 0x7f, 0x8c, &(0x7f0000000100)=""/140, 0xb, &(0x7f0000000040)=""/11, 0xdf, &(0x7f00000001c0)=""/223}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 2018/04/21 02:35:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x40000000000000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'\x00', 0x0}) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/97, 0x61}], 0x7}, 0x9}, {{&(0x7f00000006c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000880)=""/187, 0xbb}], 0x3, &(0x7f0000000980)=""/219, 0xdb, 0x1f}, 0x4}, {{&(0x7f0000000a80)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/24, 0x18}, {&(0x7f0000000bc0)=""/2, 0x2}, {&(0x7f0000000c00)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/58, 0x3a}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x7, &(0x7f0000001e00)=""/78, 0x4e, 0x1f}, 0x5}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001e80)=""/188, 0xbc}, {&(0x7f0000001f40)=""/77, 0x4d}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000003000)=""/86, 0x56, 0x9}, 0x2}], 0x4, 0x2000, &(0x7f0000003180)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000031c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003200)={'veth1_to_bridge\x00', 0x0}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000003380)={&(0x7f0000003240)=@ll={0x0, 0x0, 0x0}, 0x80, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/128, 0x80}], 0x1, 0x0, 0x0, 0x73d1}, 0x40000022) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000033c0)={'bond0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000003440)={@empty, 0x0}, &(0x7f0000003480)=0x14) clock_gettime(0x0, &(0x7f0000006a80)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000003400)={0x0, 0x1f, "2ebe9e5a970a3ae1b66ceb24904d0a16bb5224d58dec36e69894af861d6e0b"}, &(0x7f0000004c40)=0x27) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000007240)={r14, @in6={{0xa, 0x4e23, 0x1f, @empty, 0x7}}, 0xddc, 0x1}, &(0x7f0000007300)=0x90) recvmmsg(r0, &(0x7f0000006980)=[{{&(0x7f00000034c0)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000003540)=""/251, 0xfb}, {&(0x7f0000003640)=""/97, 0x61}, {&(0x7f00000036c0)=""/68, 0x44}, {&(0x7f0000003740)=""/89, 0x59}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/173, 0xad}, {&(0x7f0000004880)=""/48, 0x30}, {&(0x7f00000048c0)=""/139, 0x8b}, {&(0x7f0000004980)=""/129, 0x81}], 0x9, &(0x7f0000004b00)=""/22, 0x16, 0xe2}, 0x71}, {{&(0x7f0000004b40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004bc0)=""/126, 0x7e}, {&(0x7f0000004c40)}, {&(0x7f0000004c80)=""/173, 0xad}, {&(0x7f0000004d40)=""/2, 0x2}, {&(0x7f0000004d80)=""/90, 0x5a}], 0x5, &(0x7f0000004e80)=""/53, 0x35, 0x5b5b}, 0x2}, {{&(0x7f0000004ec0)=@sco, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004f40)=""/62, 0x3e}, {&(0x7f0000004f80)=""/200, 0xc8}, {&(0x7f0000005080)=""/75, 0x4b}, {&(0x7f0000005100)=""/187, 0xbb}, {&(0x7f00000051c0)=""/205, 0xcd}], 0x5, &(0x7f0000005340)=""/160, 0xa0, 0x9}, 0x4}, {{&(0x7f0000005400)=@alg, 0x80, &(0x7f0000006880)=[{&(0x7f0000005480)=""/144, 0x90}, {&(0x7f0000005540)=""/26, 0x1a}, {&(0x7f0000005580)=""/136, 0x88}, {&(0x7f0000005640)=""/73, 0x49}, {&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f00000066c0)=""/185, 0xb9}, {&(0x7f0000006780)=""/225, 0xe1}], 0x7, &(0x7f0000006900)=""/120, 0x78, 0x15a9}, 0x9}], 0x4, 0x10002, &(0x7f0000006ac0)={r12, r13+30000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006b00)={'ip_vti0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000006b40)={@multicast2, @rand_addr, 0x0}, &(0x7f0000006b80)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006bc0)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000006c00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006c40)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000006d40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000007200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000071c0)={&(0x7f0000006d80)=ANY=[@ANYBLOB="30040000", @ANYRES16=r2, @ANYBLOB="08082abd7000fddbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="5800020054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400ff03ff080200000000020300f520000005000203b200000000001e010100000008000100", @ANYRES32=r4, @ANYBLOB="9c01020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400110a000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ff07000008000100", @ANYRES32=r11, @ANYBLOB="c0000200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff03000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006d6f64650000000000000004000000000000000000000000000000000000000008000300050800001000040062726f6164636173740000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="0401020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400030000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r19], 0x430}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 2018/04/21 02:35:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00008cffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffff0001) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2018/04/21 02:35:16 executing program 2: syz_read_part_table(0x2, 0xaaaaaaaaaaaad96, &(0x7f0000000200)) 2018/04/21 02:35:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc0185879, &(0x7f0000000040)={0x0, 0x1003, 0x2, 0x1}) 2018/04/21 02:35:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:35:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x200000004, 0x220}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x6f2000, 0x0, 0x0, &(0x7f0000000080)) 2018/04/21 02:35:18 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8864}}}, &(0x7f0000000100)) r0 = socket(0x17, 0x1, 0xa2ff) setsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f00000011c0)="a860fe5da1a03b2c2099eee163b26018ec8db03d7601b5d2c89256d49626d8b666bc9e33d4ec0eac4acab5cc35895d49e9d921f8a1172c69c59820938734148173aa5dbcb06c98ece158f3829c2655ed611d1abc41ecc3097bb078e4b1f42afec424a2897ad9063cec9295ec7c3563760b", 0x71) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x20002) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000001240)={0x5, 0x4}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r2 = semget$private(0x0, 0x7, 0x10) semctl$IPC_RMID(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1024) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 2018/04/21 02:35:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x8, 0x1, 0x8000005, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x0, 0x1, &(0x7f0000000180)) 2018/04/21 02:35:18 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/21 02:35:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000015c0)={'nouuid,', {[{@logbufs={'logbufs', 0x3d, [0x37]}, 0x2c}]}}) 2018/04/21 02:35:18 executing program 6: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) listen(r0, 0x81) sendto$inet(r0, &(0x7f0000000040)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='U', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/21 02:35:18 executing program 2: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x1000004, 0x40000002871, 0xffffffffffffffff, 0x0) munlock(&(0x7f000053b000/0x4000)=nil, 0x4000) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 2018/04/21 02:35:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x4008744b, &(0x7f00000000c0)=""/174) 2018/04/21 02:35:18 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/21 02:35:18 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/21 02:35:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x3fc) 2018/04/21 02:35:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}}], 0x48, 0x0, &(0x7f00000003c0)="a753e1ea642bc203ae0d086ca038fd3c51121b732ec2eaa865271f03e7360aac4de942924b91ebfe64437adb0839de0306db4eeab2e3dcead2e8183eafec29ab58c915d7af218a64"}) 2018/04/21 02:35:18 executing program 7: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x20000000004) ftruncate(r0, 0x4) [ 81.714623] XFS (loop0): Invalid superblock magic number [ 81.823345] XFS (loop0): Invalid superblock magic number 2018/04/21 02:35:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x0, 0x7a120, 0xffffffff7ffffffe}) 2018/04/21 02:35:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/199) 2018/04/21 02:35:18 executing program 0: syz_emit_ethernet(0x8d, &(0x7f0000001240)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0xb}}}}}, &(0x7f0000001300)) [ 81.915246] binder: 6860:6861 got reply transaction with bad transaction stack, transaction 2 has target 6860:0 [ 81.925792] binder: 6860:6861 transaction failed 29201/-71, size 0-0 line 2778 [ 82.042472] binder_alloc: binder_alloc_mmap_handler: 6860 20ffb000-20ffe000 already mapped failed -16 [ 82.058960] binder: BINDER_SET_CONTEXT_MGR already set [ 82.064914] binder_alloc: 6860: binder_alloc_buf, no vma [ 82.070765] binder: 6860:6881 transaction failed 29189/-3, size 40-8 line 2963 [ 82.075990] binder: 6860:6861 ioctl 40046207 0 returned -16 2018/04/21 02:35:18 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/21 02:35:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6(0xa, 0x3, 0x39) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000002dcd8)=@raw={"05000000020002000000000000000000180000000303000000ff3f00", 0x9, 0x3, 0x1, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002bfd0), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457"}}, {{@uncond, 0x0, 0xa8, 0x349}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) 2018/04/21 02:35:18 executing program 3: mkdir(&(0x7f000091a000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) statfs(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)=""/14) 2018/04/21 02:35:18 executing program 7: r0 = socket$inet(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 2018/04/21 02:35:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x0, 0x7a120, 0xffffffff7ffffffe}) 2018/04/21 02:35:18 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000013c0)=@ioapic) 2018/04/21 02:35:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x110000000010) accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/04/21 02:35:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="6d000000fbe000002100004083d78e1c85"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="f20f7d96003800000f20e035040000000f22e066f30f5c90005800000f01df66baf80cb8d64d8185ef66bafc0c66edc4c27d588e68000000b9f00800000f32c74424009c0b67f3c744240226000000c7442406000000000f011c240f0826f2a5", 0x60}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000acc0), 0x0, 0x0) [ 82.098821] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.104511] binder: release 6860:6861 transaction 2 out, still active [ 82.111190] binder: undelivered TRANSACTION_COMPLETE [ 82.116317] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.122073] binder: send failed reply for transaction 2, target dead 2018/04/21 02:35:18 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) fallocate(r0, 0x1, 0x0, 0x7) 2018/04/21 02:35:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x0, 0x7a120, 0xffffffff7ffffffe}) 2018/04/21 02:35:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6(0xa, 0x3, 0x39) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000002dcd8)=@raw={"05000000020002000000000000000000180000000303000000ff3f00", 0x9, 0x3, 0x1, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002bfd0), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457"}}, {{@uncond, 0x0, 0xa8, 0x349}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) 2018/04/21 02:35:18 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000b74fbc)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000c7e000)='-4', 0x2}], 0x1) 2018/04/21 02:35:18 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/04/21 02:35:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20000120, 0x2, 0x2b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x2, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, "74756e6c30005a04085100", 'bcsf0\x00', 'ip6_vti0\x00', 'syzkaller1\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x108, 0x158}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x19, 0x0, 0x0, 'lo\x00', 'teql0\x00', "766c616e300000000200", 'ip6_vti0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="d6da5b54f4cf", [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x330) [ 82.355052] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) 2018/04/21 02:35:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6(0xa, 0x3, 0x39) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000002dcd8)=@raw={"05000000020002000000000000000000180000000303000000ff3f00", 0x9, 0x3, 0x1, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002bfd0), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457"}}, {{@uncond, 0x0, 0xa8, 0x349}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) 2018/04/21 02:35:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x804e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 2018/04/21 02:35:18 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') 2018/04/21 02:35:18 executing program 7: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00003b5000)) [ 82.770645] syz-executor4 (6940) used greatest stack depth: 16568 bytes left 2018/04/21 02:35:19 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x0, 0x7a120, 0xffffffff7ffffffe}) 2018/04/21 02:35:19 executing program 0: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb52904e54465320202020", 0xb}], 0x0, &(0x7f0000000140)) 2018/04/21 02:35:19 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000b74fbc)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000c7e000)='-4', 0x2}], 0x1) 2018/04/21 02:35:19 executing program 7: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x450, 0x0, 0x22c, 0x114, 0x36c, 0x36c, 0x36c, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x114}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, 0x0, 0x0, @empty, {}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'ip6gre0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xa9251cf) 2018/04/21 02:35:19 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6(0xa, 0x3, 0x39) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000002dcd8)=@raw={"05000000020002000000000000000000180000000303000000ff3f00", 0x9, 0x3, 0x1, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002bfd0), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457"}}, {{@uncond, 0x0, 0xa8, 0x349}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) 2018/04/21 02:35:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={"f4716e6c30ff000000dc6d00"}) 2018/04/21 02:35:19 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000400)=""/118, 0x76}], 0x1) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/156, 0x9c}], 0x1) 2018/04/21 02:35:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) 2018/04/21 02:35:19 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000b74fbc)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000c7e000)='-4', 0x2}], 0x1) [ 83.283458] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 83.291956] ntfs: (device loop0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 83.304063] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 83.359512] syz-executor4 (6958) used greatest stack depth: 16504 bytes left [ 83.394731] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 83.403228] ntfs: (device loop0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 83.415322] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. 2018/04/21 02:35:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0xffffffff00000001, 0x8, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f00000001c0), 0x2}, 0x20) 2018/04/21 02:35:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={"f4716e6c30ff000000dc6d00"}) 2018/04/21 02:35:20 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000066afc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}]}, 0xa0}, 0x1}, 0x0) 2018/04/21 02:35:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @broadcast=0xffffffff}], 0x20) 2018/04/21 02:35:20 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000b74fbc)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000c7e000)='-4', 0x2}], 0x1) 2018/04/21 02:35:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) dup3(r1, r0, 0x0) 2018/04/21 02:35:20 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000123000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00006de000)=""/50, 0xa7339b2c) 2018/04/21 02:35:20 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@loopback=0x7f000001, @empty]}, 0x18) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 84.288274] ================================================================== [ 84.295825] BUG: KASAN: slab-out-of-bounds in __sctp_v6_cmp_addr+0x4c7/0x530 [ 84.303029] Read of size 8 at addr ffff8801cf4e1320 by task syz-executor2/7001 [ 84.310385] [ 84.312021] CPU: 0 PID: 7001 Comm: syz-executor2 Not tainted 4.17.0-rc1+ #10 [ 84.319208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.328555] Call Trace: [ 84.331147] dump_stack+0x1b9/0x294 [ 84.334781] ? dump_stack_print_info.cold.2+0x52/0x52 [ 84.339967] ? printk+0x9e/0xba [ 84.343243] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 84.348004] ? kasan_check_write+0x14/0x20 [ 84.352246] print_address_description+0x6c/0x20b [ 84.357086] ? __sctp_v6_cmp_addr+0x4c7/0x530 [ 84.361578] kasan_report.cold.7+0x242/0x2fe [ 84.365991] __asan_report_load8_noabort+0x14/0x20 [ 84.370920] __sctp_v6_cmp_addr+0x4c7/0x530 [ 84.375242] sctp_inet6_cmp_addr+0x169/0x1a0 [ 84.379652] sctp_bind_addr_match+0x20b/0x400 [ 84.384177] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 84.389033] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.394563] ? sctp_v4_available+0x1b1/0x200 [ 84.398973] ? sctp_inet6_bind_verify+0xb2/0x500 [ 84.403722] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 84.409268] sctp_do_bind+0x1c0/0x5f0 [ 84.413077] sctp_bindx_add+0x90/0x1a0 [ 84.416976] sctp_setsockopt_bindx+0x2ad/0x320 [ 84.421562] sctp_setsockopt+0x12c4/0x7000 [ 84.425822] ? __lock_acquire+0x7f5/0x5140 [ 84.430060] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 84.435775] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 84.440881] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 84.445981] ? perf_trace_run_bpf_submit+0x246/0x370 [ 84.451088] ? perf_tp_event+0xc30/0xc30 [ 84.455145] ? futex_wait+0x5c1/0x9f0 [ 84.458952] ? memset+0x31/0x40 [ 84.462234] ? perf_trace_lock+0x495/0x900 [ 84.466465] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.472010] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 84.477122] ? zap_class+0x720/0x720 [ 84.480840] ? get_futex_key+0x1e90/0x1e90 [ 84.485076] ? graph_lock+0x170/0x170 [ 84.488897] ? find_held_lock+0x36/0x1c0 [ 84.492971] ? lock_downgrade+0x8e0/0x8e0 [ 84.497124] ? rcu_is_watching+0x85/0x140 [ 84.501270] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 84.506478] ? __fget+0x40c/0x650 [ 84.509943] ? expand_files.part.8+0x9a0/0x9a0 [ 84.514522] ? lock_downgrade+0x8e0/0x8e0 [ 84.518674] ? __lock_is_held+0xb5/0x140 [ 84.522732] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 84.527930] ? __fget_light+0x2ef/0x430 [ 84.531904] ? fget_raw+0x20/0x20 [ 84.535357] ? get_unused_fd_flags+0x190/0x190 [ 84.539949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.545481] ? alloc_file+0x44/0x3e0 [ 84.549208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 84.554749] ? sock_alloc_file+0x2a4/0x4e0 [ 84.558994] sock_common_setsockopt+0x9a/0xe0 [ 84.563494] __sys_setsockopt+0x1bd/0x390 [ 84.567642] ? kernel_accept+0x310/0x310 [ 84.571701] ? do_futex+0x27d0/0x27d0 [ 84.575498] ? fput+0x130/0x1a0 [ 84.578784] __x64_sys_setsockopt+0xbe/0x150 [ 84.583192] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 84.588206] do_syscall_64+0x1b1/0x800 [ 84.592086] ? finish_task_switch+0x1ca/0x810 [ 84.596576] ? syscall_return_slowpath+0x5c0/0x5c0 [ 84.601508] ? syscall_return_slowpath+0x30f/0x5c0 [ 84.606448] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 84.611815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 84.616659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.621842] RIP: 0033:0x455389 [ 84.625030] RSP: 002b:00007efd66681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.632737] RAX: ffffffffffffffda RBX: 00007efd666826d4 RCX: 0000000000455389 [ 84.639998] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000014 [ 84.647266] RBP: 000000000072bea0 R08: 0000000000000020 R09: 0000000000000000 [ 84.654526] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 84.661787] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 84.669070] [ 84.670702] Allocated by task 7001: [ 84.674326] save_stack+0x43/0xd0 [ 84.677772] kasan_kmalloc+0xc4/0xe0 [ 84.681477] __kmalloc_node+0x47/0x70 [ 84.685272] kvmalloc_node+0x6b/0x100 [ 84.689063] vmemdup_user+0x2d/0xa0 [ 84.692684] sctp_setsockopt_bindx+0x5d/0x320 [ 84.697169] sctp_setsockopt+0x12c4/0x7000 [ 84.701396] sock_common_setsockopt+0x9a/0xe0 [ 84.705885] __sys_setsockopt+0x1bd/0x390 [ 84.710031] __x64_sys_setsockopt+0xbe/0x150 [ 84.714440] do_syscall_64+0x1b1/0x800 [ 84.718326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.723498] [ 84.725117] Freed by task 1: [ 84.728129] save_stack+0x43/0xd0 [ 84.731578] __kasan_slab_free+0x11a/0x170 [ 84.735803] kasan_slab_free+0xe/0x10 [ 84.739592] kfree+0xd9/0x260 [ 84.742687] apply_wqattrs_cleanup+0x13c/0x170 [ 84.747264] apply_workqueue_attrs_locked+0x198/0x240 [ 84.752442] apply_workqueue_attrs+0x30/0x50 [ 84.756841] __alloc_workqueue_key+0xa9c/0x1170 [ 84.761501] bond_init+0x261/0x8e0 [ 84.765041] register_netdevice+0x32f/0x11c0 [ 84.769441] bond_create+0xf5/0x157 [ 84.773952] bonding_init+0x1666/0x16ff [ 84.777923] do_one_initcall+0x127/0x913 [ 84.781975] kernel_init_freeable+0x49b/0x58e [ 84.786462] kernel_init+0x11/0x1b3 [ 84.790078] ret_from_fork+0x3a/0x50 [ 84.793775] [ 84.795395] The buggy address belongs to the object at ffff8801cf4e1300 [ 84.795395] which belongs to the cache kmalloc-32 of size 32 [ 84.807871] The buggy address is located 0 bytes to the right of [ 84.807871] 32-byte region [ffff8801cf4e1300, ffff8801cf4e1320) [ 84.819993] The buggy address belongs to the page: [ 84.824918] page:ffffea00073d3840 count:1 mapcount:0 mapping:ffff8801cf4e1000 index:0xffff8801cf4e1fc1 [ 84.834374] flags: 0x2fffc0000000100(slab) [ 84.838620] raw: 02fffc0000000100 ffff8801cf4e1000 ffff8801cf4e1fc1 000000010000003f [ 84.846496] raw: ffffea000749eb60 ffffea00073b18e0 ffff8801da8001c0 0000000000000000 [ 84.854362] page dumped because: kasan: bad access detected [ 84.860057] [ 84.861672] Memory state around the buggy address: [ 84.866592] ffff8801cf4e1200: 06 fc fc fc fc fc fc fc 06 fc fc fc fc fc fc fc [ 84.873941] ffff8801cf4e1280: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 84.881290] >ffff8801cf4e1300: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 84.888639] ^ [ 84.893042] ffff8801cf4e1380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 84.900393] ffff8801cf4e1400: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 84.907746] ================================================================== [ 84.915099] Disabling lock debugging due to kernel taint [ 84.921611] Kernel panic - not syncing: panic_on_warn set ... [ 84.921611] [ 84.929012] CPU: 0 PID: 7001 Comm: syz-executor2 Tainted: G B 4.17.0-rc1+ #10 2018/04/21 02:35:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={"f4716e6c30ff000000dc6d00"}) [ 84.937595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.947043] Call Trace: [ 84.949653] dump_stack+0x1b9/0x294 [ 84.953303] ? dump_stack_print_info.cold.2+0x52/0x52 [ 84.958512] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 84.963291] ? __sctp_v6_cmp_addr+0x4a0/0x530 [ 84.967804] panic+0x22f/0x4de [ 84.971010] ? add_taint.cold.5+0x16/0x16 [ 84.975178] ? do_raw_spin_unlock+0x9e/0x2e0 [ 84.979608] ? do_raw_spin_unlock+0x9e/0x2e0 [ 84.984030] ? __sctp_v6_cmp_addr+0x4c7/0x530 2018/04/21 02:35:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0xffffffff00000001, 0x8, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f00000001c0), 0x2}, 0x20) 2018/04/21 02:35:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000000)='./file0\x00', &(0x7f0000753000)='ceph\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) 2018/04/21 02:35:21 executing program 7: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) close(r1) [ 84.988537] kasan_end_report+0x47/0x4f [ 84.992521] kasan_report.cold.7+0x76/0x2fe [ 84.996863] __asan_report_load8_noabort+0x14/0x20 [ 85.001807] __sctp_v6_cmp_addr+0x4c7/0x530 [ 85.006137] sctp_inet6_cmp_addr+0x169/0x1a0 [ 85.010568] sctp_bind_addr_match+0x20b/0x400 [ 85.015088] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 85.019940] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 85.025466] ? sctp_v4_available+0x1b1/0x200 [ 85.029876] ? sctp_inet6_bind_verify+0xb2/0x500 [ 85.034618] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 85.040154] sctp_do_bind+0x1c0/0x5f0 [ 85.043950] sctp_bindx_add+0x90/0x1a0 [ 85.047833] sctp_setsockopt_bindx+0x2ad/0x320 [ 85.052407] sctp_setsockopt+0x12c4/0x7000 [ 85.056629] ? __lock_acquire+0x7f5/0x5140 [ 85.060853] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 85.066564] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 85.071666] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 85.076769] ? perf_trace_run_bpf_submit+0x246/0x370 [ 85.081871] ? perf_tp_event+0xc30/0xc30 [ 85.085930] ? futex_wait+0x5c1/0x9f0 [ 85.089738] ? memset+0x31/0x40 [ 85.093017] ? perf_trace_lock+0x495/0x900 [ 85.097248] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 85.102778] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 85.107882] ? zap_class+0x720/0x720 [ 85.111594] ? get_futex_key+0x1e90/0x1e90 [ 85.115822] ? graph_lock+0x170/0x170 [ 85.119630] ? find_held_lock+0x36/0x1c0 [ 85.123695] ? lock_downgrade+0x8e0/0x8e0 [ 85.127848] ? rcu_is_watching+0x85/0x140 [ 85.131988] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 85.137186] ? __fget+0x40c/0x650 [ 85.140637] ? expand_files.part.8+0x9a0/0x9a0 [ 85.145213] ? lock_downgrade+0x8e0/0x8e0 [ 85.149360] ? __lock_is_held+0xb5/0x140 [ 85.153412] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 85.158610] ? __fget_light+0x2ef/0x430 [ 85.162587] ? fget_raw+0x20/0x20 [ 85.166038] ? get_unused_fd_flags+0x190/0x190 [ 85.170626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.176155] ? alloc_file+0x44/0x3e0 [ 85.179868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 85.185396] ? sock_alloc_file+0x2a4/0x4e0 [ 85.189802] sock_common_setsockopt+0x9a/0xe0 [ 85.194295] __sys_setsockopt+0x1bd/0x390 [ 85.198436] ? kernel_accept+0x310/0x310 [ 85.202506] ? do_futex+0x27d0/0x27d0 [ 85.206298] ? fput+0x130/0x1a0 [ 85.209604] __x64_sys_setsockopt+0xbe/0x150 [ 85.214004] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 85.219025] do_syscall_64+0x1b1/0x800 [ 85.222905] ? finish_task_switch+0x1ca/0x810 [ 85.227393] ? syscall_return_slowpath+0x5c0/0x5c0 [ 85.232314] ? syscall_return_slowpath+0x30f/0x5c0 [ 85.237242] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 85.242602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 85.247450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.252626] RIP: 0033:0x455389 [ 85.255804] RSP: 002b:00007efd66681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.263505] RAX: ffffffffffffffda RBX: 00007efd666826d4 RCX: 0000000000455389 [ 85.270764] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000014 [ 85.278030] RBP: 000000000072bea0 R08: 0000000000000020 R09: 0000000000000000 [ 85.285287] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 85.292547] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 85.300297] Dumping ftrace buffer: [ 85.303827] (ftrace buffer empty) [ 85.307520] Kernel Offset: disabled [ 85.311140] Rebooting in 86400 seconds..