INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2018/04/21 02:00:34 fuzzer started 2018/04/21 02:00:35 dialing manager at 10.128.0.26:39431 syzkaller login: [ 56.122085] can: request_module (can-proto-0) failed. [ 56.131411] can: request_module (can-proto-0) failed. 2018/04/21 02:01:01 kcov=true, comps=true [ 57.900026] random: crng init done 2018/04/21 02:01:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000011, &(0x7f0000000080), 0x191790c3a5b4342) 2018/04/21 02:01:05 executing program 1: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r1, &(0x7f0000637000)="ac0100000000000000010001000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf", 0x30, 0x0, &(0x7f00008d7000)={0x2}, 0x10) 2018/04/21 02:01:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/21 02:01:05 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom(r0, &(0x7f0000001500)=""/4096, 0xfffffffffffffd5a, 0x2000, &(0x7f0000000180)=@rc={0x1f, {0x6}}, 0x3366) 2018/04/21 02:01:05 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x8906, 0x0, &(0x7f0000000080)) 2018/04/21 02:01:05 executing program 4: mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) umount2(&(0x7f0000000740)='./file0\x00', 0x1) 2018/04/21 02:01:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") close(r0) 2018/04/21 02:01:05 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000046eff0)=[{&(0x7f000004f000)=""/128, 0xfee0}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000aa1000), &(0x7f0000b70000)}}, &(0x7f0000000040)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) [ 61.915087] IPVS: ftp: loaded support on port[0] = 21 [ 61.932495] IPVS: ftp: loaded support on port[0] = 21 [ 61.966637] IPVS: ftp: loaded support on port[0] = 21 [ 62.012086] IPVS: ftp: loaded support on port[0] = 21 [ 62.021655] IPVS: ftp: loaded support on port[0] = 21 [ 62.022595] IPVS: ftp: loaded support on port[0] = 21 [ 62.035079] IPVS: ftp: loaded support on port[0] = 21 [ 62.040515] IPVS: ftp: loaded support on port[0] = 21 [ 64.078789] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.085269] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.110134] device bridge_slave_0 entered promiscuous mode [ 64.132891] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.139296] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.149885] device bridge_slave_0 entered promiscuous mode [ 64.186502] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.192933] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.214947] device bridge_slave_0 entered promiscuous mode [ 64.242065] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.248490] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.278366] device bridge_slave_0 entered promiscuous mode [ 64.287338] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.293737] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.301905] device bridge_slave_1 entered promiscuous mode [ 64.312102] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.318487] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.334520] device bridge_slave_1 entered promiscuous mode [ 64.342562] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.348936] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.356728] device bridge_slave_0 entered promiscuous mode [ 64.366395] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.372753] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.381870] device bridge_slave_1 entered promiscuous mode [ 64.388800] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.395173] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.404489] device bridge_slave_0 entered promiscuous mode [ 64.413506] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.419899] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.427172] device bridge_slave_0 entered promiscuous mode [ 64.437094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.445553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.457249] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.463755] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.482964] device bridge_slave_1 entered promiscuous mode [ 64.495932] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.502358] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.524219] device bridge_slave_1 entered promiscuous mode [ 64.532285] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.538672] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.545908] device bridge_slave_0 entered promiscuous mode [ 64.553751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.562542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.570404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.584325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.591542] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.597924] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.625967] device bridge_slave_1 entered promiscuous mode [ 64.651736] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.658184] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.677852] device bridge_slave_1 entered promiscuous mode [ 64.686481] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.692863] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.709649] device bridge_slave_1 entered promiscuous mode [ 64.730778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.745137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.758452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.766500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.849559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.866740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.903009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.937161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.974620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.983604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.999325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.036414] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.147494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.171957] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.183205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.192417] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.236157] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.318096] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.346867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.379385] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.398810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.414318] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.488837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.531898] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.546921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.565467] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.657300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.664232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.674987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.695159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.720785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.742636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.749728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.767141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.795510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.803971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.810853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.822947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.858018] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.873414] team0: Port device team_slave_0 added [ 65.891929] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.900223] team0: Port device team_slave_0 added [ 65.907673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.955151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.970734] team0: Port device team_slave_0 added [ 65.990765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.005936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.015526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.029647] team0: Port device team_slave_1 added [ 66.044841] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.054618] team0: Port device team_slave_1 added [ 66.065867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.110171] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.128683] team0: Port device team_slave_0 added [ 66.145087] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.157423] team0: Port device team_slave_1 added [ 66.182754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.204623] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.220948] team0: Port device team_slave_0 added [ 66.233897] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.253738] team0: Port device team_slave_0 added [ 66.272199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.297527] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.309323] team0: Port device team_slave_1 added [ 66.327207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.342685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.367667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.381161] team0: Port device team_slave_1 added [ 66.389355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.398778] team0: Port device team_slave_0 added [ 66.409775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.426740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.449288] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.461566] team0: Port device team_slave_1 added [ 66.472339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.481379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.496087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.512667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.539672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.553817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.564371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.572323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.580175] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.587561] team0: Port device team_slave_0 added [ 66.592895] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.600477] team0: Port device team_slave_1 added [ 66.607704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.616860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.628470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.636705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.652411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.669889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.682651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.696295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.704759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.712976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.720615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.729092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.736109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.746440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.755676] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.768410] team0: Port device team_slave_1 added [ 66.793207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.806784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.844827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.867261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.880510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.888198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.895868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.903430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.911301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.919051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.926705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.934262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.941994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.960305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.970932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.978978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.001661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.008794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.017467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.027214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.045490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.075568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.101794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.114742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.122670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.133480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.153795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.164178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.174090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.195640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.229897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.249672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.263510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.271600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.280912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.292980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.312943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.321868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.330169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.343875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.374442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.399651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.412257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.424977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.432770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.440598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.454279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.475901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.487647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.604685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.612115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.625443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.308816] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.315394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.322372] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.328756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.357311] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.375278] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.381665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.388323] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.394697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.442242] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.566974] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.573369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.580061] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.586432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.607746] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.616477] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.622857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.629503] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.635879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.643556] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.660196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.676651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.688054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.695697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.819171] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.825577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.832227] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.838589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.846304] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.875301] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.882277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.888942] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.895306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.928660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.058667] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.065070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.071739] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.078114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.095747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.111371] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.117763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.124444] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.130836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.158737] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.663353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.677729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.699549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.709879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.613630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.624885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.641986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.825526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.964802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.054461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.084334] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.109135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.117297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.147917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.231298] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.303353] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.407600] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.504264] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.510489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.524636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.569995] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.576698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.588541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.613676] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.626993] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.636204] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.752316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.758564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.769938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.792670] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.803408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.817763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.955780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.962458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.977173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.043989] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.079724] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.124839] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.131186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.141084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.172183] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.183055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.205534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.233457] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.244216] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.254692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.273776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.292169] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.484512] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.672252] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.691667] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.705993] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 02:01:22 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x8906, 0x0, &(0x7f0000000080)) 2018/04/21 02:01:22 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x8906, 0x0, &(0x7f0000000080)) 2018/04/21 02:01:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/21 02:01:22 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x8906, 0x0, &(0x7f0000000080)) 2018/04/21 02:01:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/21 02:01:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/21 02:01:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000011, &(0x7f0000000080), 0x191790c3a5b4342) 2018/04/21 02:01:22 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom(r0, &(0x7f0000001500)=""/4096, 0xfffffffffffffd5a, 0x2000, &(0x7f0000000180)=@rc={0x1f, {0x6}}, 0x3366) 2018/04/21 02:01:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/21 02:01:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") close(r0) 2018/04/21 02:01:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/21 02:01:22 executing program 1: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r1, &(0x7f0000637000)="ac0100000000000000010001000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf", 0x30, 0x0, &(0x7f00008d7000)={0x2}, 0x10) 2018/04/21 02:01:23 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000046eff0)=[{&(0x7f000004f000)=""/128, 0xfee0}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000aa1000), &(0x7f0000b70000)}}, &(0x7f0000000040)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/04/21 02:01:23 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000046eff0)=[{&(0x7f000004f000)=""/128, 0xfee0}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000aa1000), &(0x7f0000b70000)}}, &(0x7f0000000040)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/04/21 02:01:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000011, &(0x7f0000000080), 0x191790c3a5b4342) 2018/04/21 02:01:23 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom(r0, &(0x7f0000001500)=""/4096, 0xfffffffffffffd5a, 0x2000, &(0x7f0000000180)=@rc={0x1f, {0x6}}, 0x3366) 2018/04/21 02:01:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") close(r0) 2018/04/21 02:01:23 executing program 1: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r1, &(0x7f0000637000)="ac0100000000000000010001000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf", 0x30, 0x0, &(0x7f00008d7000)={0x2}, 0x10) [ 79.386645] device bridge_slave_1 left promiscuous mode [ 79.392606] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.406660] device bridge_slave_0 left promiscuous mode [ 79.412194] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.449984] team0 (unregistering): Port device team_slave_1 removed [ 79.461430] team0 (unregistering): Port device team_slave_0 removed [ 79.472247] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 79.495462] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 79.522912] bond0 (unregistering): Released all slaves 2018/04/21 02:01:24 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom(r0, &(0x7f0000001500)=""/4096, 0xfffffffffffffd5a, 0x2000, &(0x7f0000000180)=@rc={0x1f, {0x6}}, 0x3366) 2018/04/21 02:01:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000011, &(0x7f0000000080), 0x191790c3a5b4342) 2018/04/21 02:01:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0xffffffffffffff00}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/21 02:01:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") close(r0) 2018/04/21 02:01:24 executing program 1: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r1, &(0x7f0000637000)="ac0100000000000000010001000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf", 0x30, 0x0, &(0x7f00008d7000)={0x2}, 0x10) 2018/04/21 02:01:24 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000046eff0)=[{&(0x7f000004f000)=""/128, 0xfee0}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000aa1000), &(0x7f0000b70000)}}, &(0x7f0000000040)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/04/21 02:01:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x8906, 0x0, &(0x7f0000000080)) 2018/04/21 02:01:24 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000046eff0)=[{&(0x7f000004f000)=""/128, 0xfee0}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000aa1000), &(0x7f0000b70000)}}, &(0x7f0000000040)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/04/21 02:01:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/21 02:01:24 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x40a0000080044dff, &(0x7f0000000040)) 2018/04/21 02:01:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:01:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x8906, 0x0, &(0x7f0000000080)) 2018/04/21 02:01:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/21 02:01:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/21 02:01:24 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02000000", 0x6}], 0x1, 0x0) 2018/04/21 02:01:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x8906, 0x0, &(0x7f0000000080)) 2018/04/21 02:01:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/21 02:01:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) [ 80.533687] IPVS: ftp: loaded support on port[0] = 21 [ 81.277920] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.284309] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.291519] device bridge_slave_0 entered promiscuous mode [ 81.316125] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.322525] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.329753] device bridge_slave_1 entered promiscuous mode [ 81.353894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 81.379803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.446798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.472994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.575391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.582519] team0: Port device team_slave_0 added [ 81.605486] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.612584] team0: Port device team_slave_1 added [ 81.636527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.661542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.686649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.711965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.925751] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.932131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.938754] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.945121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.707102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.785527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.862626] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.868816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.876295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.949766] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 02:01:28 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000046eff0)=[{&(0x7f000004f000)=""/128, 0xfee0}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000aa1000), &(0x7f0000b70000)}}, &(0x7f0000000040)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/04/21 02:01:28 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000046eff0)=[{&(0x7f000004f000)=""/128, 0xfee0}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000aa1000), &(0x7f0000b70000)}}, &(0x7f0000000040)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/04/21 02:01:28 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:01:28 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/21 02:01:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:28 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/21 02:01:28 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02000000", 0x6}], 0x1, 0x0) 2018/04/21 02:01:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)) 2018/04/21 02:01:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=@migrate={0xb8, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}}, [@migrate={0x5c, 0x11, [{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6}, {@in=@broadcast=0xffffffff, @in=@broadcast=0xffffffff}]}, @policy_type={0xc, 0x10}]}, 0xb8}, 0x1}, 0x0) 2018/04/21 02:01:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:28 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) [ 84.300752] x86/PAT: syz-executor3:7056 map pfn RAM range req write-combining for [mem 0x18b480000-0x18b483fff], got write-back 2018/04/21 02:01:28 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02000000", 0x6}], 0x1, 0x0) 2018/04/21 02:01:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=@migrate={0xb8, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}}, [@migrate={0x5c, 0x11, [{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6}, {@in=@broadcast=0xffffffff, @in=@broadcast=0xffffffff}]}, @policy_type={0xc, 0x10}]}, 0xb8}, 0x1}, 0x0) [ 84.400081] x86/PAT: syz-executor3:7071 map pfn RAM range req write-combining for [mem 0x18b480000-0x18b483fff], got write-back 2018/04/21 02:01:29 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:01:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)) 2018/04/21 02:01:29 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000417ffa)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/21 02:01:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02000000", 0x6}], 0x1, 0x0) 2018/04/21 02:01:29 executing program 7: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/21 02:01:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=@migrate={0xb8, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}}, [@migrate={0x5c, 0x11, [{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6}, {@in=@broadcast=0xffffffff, @in=@broadcast=0xffffffff}]}, @policy_type={0xc, 0x10}]}, 0xb8}, 0x1}, 0x0) 2018/04/21 02:01:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=@migrate={0xb8, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}}, [@migrate={0x5c, 0x11, [{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6}, {@in=@broadcast=0xffffffff, @in=@broadcast=0xffffffff}]}, @policy_type={0xc, 0x10}]}, 0xb8}, 0x1}, 0x0) [ 85.229427] x86/PAT: syz-executor3:7098 map pfn RAM range req write-combining for [mem 0x18b480000-0x18b483fff], got write-back 2018/04/21 02:01:30 executing program 7: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/21 02:01:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)) 2018/04/21 02:01:30 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000417ffa)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/21 02:01:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:01:30 executing program 7: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 86.151658] x86/PAT: syz-executor3:7125 map pfn RAM range req write-combining for [mem 0x18b480000-0x18b483fff], got write-back 2018/04/21 02:01:30 executing program 7: r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/21 02:01:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)) [ 86.279674] x86/PAT: syz-executor3:7143 map pfn RAM range req write-combining for [mem 0x18b480000-0x18b483fff], got write-back 2018/04/21 02:01:30 executing program 6: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000417ffa)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/21 02:01:30 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open$dir(&(0x7f0000000080)='./file0\x00', 0x410102, 0x0) 2018/04/21 02:01:30 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x15, 0x40000000, r1, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) 2018/04/21 02:01:30 executing program 1: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2018/04/21 02:01:30 executing program 3: r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x1, &(0x7f0000192ff0)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/1, &(0x7f0000000180)) 2018/04/21 02:01:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="da", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x7, 0x11, r1, 0x0) pipe2(&(0x7f0000000300), 0x0) 2018/04/21 02:01:30 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/21 02:01:30 executing program 1: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2018/04/21 02:01:30 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open$dir(&(0x7f0000000080)='./file0\x00', 0x410102, 0x0) 2018/04/21 02:01:30 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x15, 0x40000000, r1, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) 2018/04/21 02:01:30 executing program 3: r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x1, &(0x7f0000192ff0)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/1, &(0x7f0000000180)) [ 86.588273] FAT-fs (loop0): Directory bread(block 112) failed [ 86.628954] FAT-fs (loop0): Directory bread(block 112) failed [ 86.653161] FAT-fs (loop0): Directory bread(block 112) failed [ 86.700149] attempt to access beyond end of device [ 86.705406] loop0: rw=2049, want=246, limit=112 [ 86.738288] attempt to access beyond end of device [ 86.743369] loop0: rw=2049, want=246, limit=112 [ 86.748284] Buffer I/O error on dev loop0, logical block 245, lost async page write 2018/04/21 02:01:31 executing program 1: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2018/04/21 02:01:31 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open$dir(&(0x7f0000000080)='./file0\x00', 0x410102, 0x0) 2018/04/21 02:01:31 executing program 3: r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x1, &(0x7f0000192ff0)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/1, &(0x7f0000000180)) 2018/04/21 02:01:31 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x15, 0x40000000, r1, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) 2018/04/21 02:01:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="da", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x7, 0x11, r1, 0x0) pipe2(&(0x7f0000000300), 0x0) 2018/04/21 02:01:31 executing program 6: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000417ffa)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/21 02:01:31 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000417ffa)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/21 02:01:31 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/21 02:01:31 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open$dir(&(0x7f0000000080)='./file0\x00', 0x410102, 0x0) 2018/04/21 02:01:31 executing program 1: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2018/04/21 02:01:31 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x15, 0x40000000, r1, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) 2018/04/21 02:01:31 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/21 02:01:31 executing program 3: r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000042b000)={0x1, &(0x7f0000192ff0)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/1, &(0x7f0000000180)) [ 87.479651] FAT-fs (loop0): Directory bread(block 112) failed 2018/04/21 02:01:31 executing program 1: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x15, 0x40000000, r1, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) 2018/04/21 02:01:31 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r0, &(0x7f0000000140)=@generic, &(0x7f0000000040)=0x80) 2018/04/21 02:01:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/04/21 02:01:31 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 87.622298] FAT-fs (loop0): Directory bread(block 112) failed [ 87.672746] FAT-fs (loop0): Directory bread(block 112) failed [ 87.725398] mmap: syz-executor5 (7242) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 87.748529] attempt to access beyond end of device [ 87.753616] loop0: rw=2049, want=246, limit=112 [ 87.803943] attempt to access beyond end of device [ 87.809131] loop0: rw=1, want=246, limit=112 [ 87.813598] Buffer I/O error on dev loop0, logical block 245, lost async page write 2018/04/21 02:01:32 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000417ffa)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/21 02:01:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="da", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x7, 0x11, r1, 0x0) pipe2(&(0x7f0000000300), 0x0) 2018/04/21 02:01:32 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2018/04/21 02:01:32 executing program 1: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x15, 0x40000000, r1, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) 2018/04/21 02:01:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/04/21 02:01:32 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x80, &(0x7f0000000000)=""/4, &(0x7f0000000ffc)=0xffffffffffffff7e) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x29, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:01:32 executing program 6: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000417ffa)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/21 02:01:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b8010000000f01d966bad104ec360f01dbb9800000c0b80001c0feba000000000f30c4c3b56d48000866baf80cb88454698bef66bafc0c66b8d48266ef3e6531d90f3236640f013f0f08", 0x4a}], 0x1, 0x0, &(0x7f00000002c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="c441c1dba20068000066baf80cb8c65f4f8aef66bafc0c66b8dc0366efc481f8ae583566b86c008ed0470f01ee66bad004b800000000efac66b8fd000f00d80f01df0f35", 0x44}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:01:32 executing program 1: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x15, 0x40000000, r1, &(0x7f00000002c0)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) 2018/04/21 02:01:32 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x80, &(0x7f0000000000)=""/4, &(0x7f0000000ffc)=0xffffffffffffff7e) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x29, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:01:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) [ 88.444682] FAT-fs (loop0): Directory bread(block 112) failed 2018/04/21 02:01:32 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2018/04/21 02:01:32 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x80, &(0x7f0000000000)=""/4, &(0x7f0000000ffc)=0xffffffffffffff7e) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x29, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:01:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/04/21 02:01:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b8010000000f01d966bad104ec360f01dbb9800000c0b80001c0feba000000000f30c4c3b56d48000866baf80cb88454698bef66bafc0c66b8d48266ef3e6531d90f3236640f013f0f08", 0x4a}], 0x1, 0x0, &(0x7f00000002c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="c441c1dba20068000066baf80cb8c65f4f8aef66bafc0c66b8dc0366efc481f8ae583566b86c008ed0470f01ee66bad004b800000000efac66b8fd000f00d80f01df0f35", 0x44}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:01:32 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x80, &(0x7f0000000000)=""/4, &(0x7f0000000ffc)=0xffffffffffffff7e) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x29, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) [ 88.565276] FAT-fs (loop0): Directory bread(block 112) failed [ 88.594182] FAT-fs (loop0): Directory bread(block 112) failed [ 88.649179] attempt to access beyond end of device [ 88.654222] loop0: rw=2049, want=226, limit=112 [ 88.765378] attempt to access beyond end of device [ 88.770445] loop0: rw=1, want=226, limit=112 [ 88.774912] Buffer I/O error on dev loop0, logical block 225, lost async page write 2018/04/21 02:01:33 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2018/04/21 02:01:33 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x80, &(0x7f0000000000)=""/4, &(0x7f0000000ffc)=0xffffffffffffff7e) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x29, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:01:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b8010000000f01d966bad104ec360f01dbb9800000c0b80001c0feba000000000f30c4c3b56d48000866baf80cb88454698bef66bafc0c66b8d48266ef3e6531d90f3236640f013f0f08", 0x4a}], 0x1, 0x0, &(0x7f00000002c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="c441c1dba20068000066baf80cb8c65f4f8aef66bafc0c66b8dc0366efc481f8ae583566b86c008ed0470f01ee66bad004b800000000efac66b8fd000f00d80f01df0f35", 0x44}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:01:33 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x80, &(0x7f0000000000)=""/4, &(0x7f0000000ffc)=0xffffffffffffff7e) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x29, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:01:33 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/21 02:01:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="da", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x7, 0x11, r1, 0x0) pipe2(&(0x7f0000000300), 0x0) 2018/04/21 02:01:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) [ 89.348675] binder: 7325:7327 Acquire 1 refcount change on invalid ref 0 ret -22 2018/04/21 02:01:33 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x80, &(0x7f0000000000)=""/4, &(0x7f0000000ffc)=0xffffffffffffff7e) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x29, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) [ 89.400266] binder: 7325:7339 unknown command 0 [ 89.415608] binder: 7325:7339 ioctl c0306201 20a20000 returned -22 2018/04/21 02:01:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x80045440, &(0x7f0000000000)) 2018/04/21 02:01:33 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/21 02:01:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b8010000000f01d966bad104ec360f01dbb9800000c0b80001c0feba000000000f30c4c3b56d48000866baf80cb88454698bef66bafc0c66b8d48266ef3e6531d90f3236640f013f0f08", 0x4a}], 0x1, 0x0, &(0x7f00000002c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="c441c1dba20068000066baf80cb8c65f4f8aef66bafc0c66b8dc0366efc481f8ae583566b86c008ed0470f01ee66bad004b800000000efac66b8fd000f00d80f01df0f35", 0x44}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:01:33 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 89.442161] FAT-fs (loop0): Directory bread(block 112) failed 2018/04/21 02:01:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}], 0x1, 0x0) 2018/04/21 02:01:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x80045440, &(0x7f0000000000)) [ 89.540350] FAT-fs (loop0): Directory bread(block 112) failed [ 89.577968] binder: 7354:7358 Acquire 1 refcount change on invalid ref 0 ret -22 2018/04/21 02:01:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) 2018/04/21 02:01:33 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') chroot(&(0x7f0000000040)='./control\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) [ 89.601776] FAT-fs (loop0): Directory bread(block 112) failed 2018/04/21 02:01:33 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) [ 89.702830] attempt to access beyond end of device [ 89.707888] loop0: rw=2049, want=246, limit=112 [ 89.721012] binder: 7373:7375 Acquire 1 refcount change on invalid ref 0 ret -22 [ 89.795299] attempt to access beyond end of device [ 89.800343] loop0: rw=1, want=246, limit=112 [ 89.804847] Buffer I/O error on dev loop0, logical block 245, lost async page write 2018/04/21 02:01:34 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xf34, 0x2) write$eventfd(r0, &(0x7f0000000280)=0xf700000000000000, 0x8) 2018/04/21 02:01:34 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/21 02:01:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:34 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x5421, &(0x7f0000000040)) 2018/04/21 02:01:34 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') chroot(&(0x7f0000000040)='./control\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) 2018/04/21 02:01:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x80045440, &(0x7f0000000000)) 2018/04/21 02:01:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) 2018/04/21 02:01:34 executing program 3: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') chroot(&(0x7f0000000040)='./control\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) 2018/04/21 02:01:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x80045440, &(0x7f0000000000)) 2018/04/21 02:01:34 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x5421, &(0x7f0000000040)) 2018/04/21 02:01:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) [ 90.653694] binder: 7396:7399 Acquire 1 refcount change on invalid ref 0 ret -22 2018/04/21 02:01:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:34 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xf34, 0x2) write$eventfd(r0, &(0x7f0000000280)=0xf700000000000000, 0x8) 2018/04/21 02:01:35 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x5421, &(0x7f0000000040)) 2018/04/21 02:01:35 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000000000)="bf", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xfffffffffffffe14}, &(0x7f00000001c0)=0xff1a) 2018/04/21 02:01:35 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xf34, 0x2) write$eventfd(r0, &(0x7f0000000280)=0xf700000000000000, 0x8) 2018/04/21 02:01:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:35 executing program 3: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') chroot(&(0x7f0000000040)='./control\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) 2018/04/21 02:01:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:35 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') chroot(&(0x7f0000000040)='./control\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) 2018/04/21 02:01:35 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x5421, &(0x7f0000000040)) 2018/04/21 02:01:35 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) lseek(r1, 0x0, 0x0) 2018/04/21 02:01:35 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xf34, 0x2) write$eventfd(r0, &(0x7f0000000280)=0xf700000000000000, 0x8) 2018/04/21 02:01:35 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) lseek(r1, 0x0, 0x0) 2018/04/21 02:01:35 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) lseek(r1, 0x0, 0x0) 2018/04/21 02:01:36 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) lseek(r1, 0x0, 0x0) 2018/04/21 02:01:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=""/6, 0x6}, 0x0) 2018/04/21 02:01:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:36 executing program 3: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') chroot(&(0x7f0000000040)='./control\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) 2018/04/21 02:01:36 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') chroot(&(0x7f0000000040)='./control\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) 2018/04/21 02:01:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:36 executing program 4: r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) 2018/04/21 02:01:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/21 02:01:36 executing program 4: r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) 2018/04/21 02:01:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=""/6, 0x6}, 0x0) 2018/04/21 02:01:36 executing program 4: r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) 2018/04/21 02:01:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/21 02:01:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=""/6, 0x6}, 0x0) 2018/04/21 02:01:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=""/6, 0x6}, 0x0) 2018/04/21 02:01:36 executing program 4: r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) 2018/04/21 02:01:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/21 02:01:36 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0183d9dfda6321b6d7c21885478d97f1a61cb97063820c2875ceb558afd735b5d824e8d6aea962413a4e817be448738ef4a9c996e6955145ef3a1ec83e72a1"}, 0x60) getsockopt$bt_BT_RCVMTU(r0, 0x118, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/04/21 02:01:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x44) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="32f4e583fb46bf5e20ad2e62c3bd8046", 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan0\x00'}, 0x18) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000040)={0x10001, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x6e, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000a81fe8)=ANY=[], @ANYBLOB="4000000000090000ffeed5105ad615bf1d19807876ab5e739e00859a239d9986a9c375aeeaaed33896567ebb62a2e41fbeac"], 0x0, 0x0, &(0x7f000005af7e)}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="2f70726f632f73795c2f5065742f69557634000f1e2524c876732f6e61255f6973656e640000000000", 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000140)={0x10000, 0x0, [0x5b0, 0x101, 0x4, 0x200, 0x7fff, 0x7, 0x0, 0x100000000]}) 2018/04/21 02:01:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/21 02:01:37 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0183d9dfda6321b6d7c21885478d97f1a61cb97063820c2875ceb558afd735b5d824e8d6aea962413a4e817be448738ef4a9c996e6955145ef3a1ec83e72a1"}, 0x60) getsockopt$bt_BT_RCVMTU(r0, 0x118, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/04/21 02:01:37 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) 2018/04/21 02:01:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000013ffe)="0600", 0x2}], 0x1, &(0x7f0000000200)}, 0x2000c080) write(r0, &(0x7f00000001c0)="d09f9f171299", 0x6) 2018/04/21 02:01:37 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x106}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 2018/04/21 02:01:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 2018/04/21 02:01:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:37 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0183d9dfda6321b6d7c21885478d97f1a61cb97063820c2875ceb558afd735b5d824e8d6aea962413a4e817be448738ef4a9c996e6955145ef3a1ec83e72a1"}, 0x60) getsockopt$bt_BT_RCVMTU(r0, 0x118, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/04/21 02:01:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/21 02:01:37 executing program 5: pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x80000002, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f0000b19000)=[{&(0x7f0000001000)=""/4096, 0x155}], 0x1) 2018/04/21 02:01:37 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x106}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 2018/04/21 02:01:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:37 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0183d9dfda6321b6d7c21885478d97f1a61cb97063820c2875ceb558afd735b5d824e8d6aea962413a4e817be448738ef4a9c996e6955145ef3a1ec83e72a1"}, 0x60) getsockopt$bt_BT_RCVMTU(r0, 0x118, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2) [ 93.840204] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 [ 93.872633] binder: 7588:7589 ioctl c0306201 2075afd0 returned -14 [ 93.939099] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/21 02:01:37 executing program 5: pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x80000002, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f0000b19000)=[{&(0x7f0000001000)=""/4096, 0x155}], 0x1) [ 93.980409] binder: 7588:7602 ioctl c0306201 2075afd0 returned -14 [ 94.002986] binder: 7588:7589 ioctl 40046207 0 returned -16 2018/04/21 02:01:38 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) 2018/04/21 02:01:38 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:38 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x106}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 2018/04/21 02:01:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x44) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="32f4e583fb46bf5e20ad2e62c3bd8046", 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan0\x00'}, 0x18) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000040)={0x10001, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x6e, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000a81fe8)=ANY=[], @ANYBLOB="4000000000090000ffeed5105ad615bf1d19807876ab5e739e00859a239d9986a9c375aeeaaed33896567ebb62a2e41fbeac"], 0x0, 0x0, &(0x7f000005af7e)}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="2f70726f632f73795c2f5065742f69557634000f1e2524c876732f6e61255f6973656e640000000000", 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000140)={0x10000, 0x0, [0x5b0, 0x101, 0x4, 0x200, 0x7fff, 0x7, 0x0, 0x100000000]}) 2018/04/21 02:01:38 executing program 5: pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x80000002, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f0000b19000)=[{&(0x7f0000001000)=""/4096, 0x155}], 0x1) 2018/04/21 02:01:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/21 02:01:38 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:38 executing program 5: pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x80000002, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f0000b19000)=[{&(0x7f0000001000)=""/4096, 0x155}], 0x1) 2018/04/21 02:01:38 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x106}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 2018/04/21 02:01:38 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:38 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) [ 94.973742] binder: 7638:7645 ioctl c0306201 2075afd0 returned -14 2018/04/21 02:01:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x44) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="32f4e583fb46bf5e20ad2e62c3bd8046", 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan0\x00'}, 0x18) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000040)={0x10001, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x6e, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000a81fe8)=ANY=[], @ANYBLOB="4000000000090000ffeed5105ad615bf1d19807876ab5e739e00859a239d9986a9c375aeeaaed33896567ebb62a2e41fbeac"], 0x0, 0x0, &(0x7f000005af7e)}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="2f70726f632f73795c2f5065742f69557634000f1e2524c876732f6e61255f6973656e640000000000", 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000140)={0x10000, 0x0, [0x5b0, 0x101, 0x4, 0x200, 0x7fff, 0x7, 0x0, 0x100000000]}) 2018/04/21 02:01:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:39 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) [ 95.151849] binder: 7665:7666 ioctl c0306201 2075afd0 returned -14 2018/04/21 02:01:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x44) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="32f4e583fb46bf5e20ad2e62c3bd8046", 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan0\x00'}, 0x18) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000040)={0x10001, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x6e, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000a81fe8)=ANY=[], @ANYBLOB="4000000000090000ffeed5105ad615bf1d19807876ab5e739e00859a239d9986a9c375aeeaaed33896567ebb62a2e41fbeac"], 0x0, 0x0, &(0x7f000005af7e)}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="2f70726f632f73795c2f5065742f69557634000f1e2524c876732f6e61255f6973656e640000000000", 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000140)={0x10000, 0x0, [0x5b0, 0x101, 0x4, 0x200, 0x7fff, 0x7, 0x0, 0x100000000]}) 2018/04/21 02:01:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x2) 2018/04/21 02:01:39 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) 2018/04/21 02:01:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/21 02:01:39 executing program 7: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x800000001, "86"}, 0x0) 2018/04/21 02:01:39 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20e}, 0xfffffffffffffed4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x930000, 0x6f2000, &(0x7f0000000180)) 2018/04/21 02:01:39 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:39 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x2) [ 95.940214] binder: 7685:7686 ioctl c0306201 2075afd0 returned -14 2018/04/21 02:01:39 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000001380)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000001c0)) syz_fuseblk_mount(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:01:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3ff}, &(0x7f0000000640)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x0, 0x8, 0x33b9, 0x0, 0x0, 0x2, 0xffffffff00000000, 0x100000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b001d08bcc117394e4726b653544e8e98d35e42a0c506e43a3c7be62e8ff9f4ae3ece15cb146423c9f6b858c5512920f94f1b06d9dfa0efd4d7b1ee8eff6b04f22ecb728e99d2af3e297ba4c4b836379916959f3df9301f00100000c4f2806743ed3fc0b31480b29d7c6beeb4bdf53bd3af4ad7c0defeab05f59557599a8fd0b81ab7e6ff393e66d6f61f84aa1d19bbc9bf440c107cd987fbcb262e3628377392d14190"], &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x7, 0x8, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1000}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000998f70)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000005c0)=0x80) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x1000, 0x0, 0x4, 0x2a, 0x0, 0x7bdf, 0x7, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="ff0300000000000002004e214d8ca47700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be63d41ca35b49c88efa79835eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002000000ac14141900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000ff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000001fa84901ca6c8c48000000000000000000000000000002004e24ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000924a800bf29bce8ae2506c7468021cdd2c729e0e267bad44ec56159c5862be038cea0fb27099b29392d8896c926d79e9ac240db573a6b6cfe4866773e3fadf16f83337a15541188b3e4f9d77e60a17b3fb5af29b2dc8bafe557699db5bbd02460019fe120642b9bc2a2552ebaf1db55ac827e1e17ed4d9a76f9cafcde8a4f5ee4802d979b4ae6229a0a5eb637738e11aab2df0f90bf668917a41dc8b2202523da208aa76dfe7cd19e1fbc8179444a3f885200ff020439b7dc365b650c608e0b897d71e8a55e8ecc13cdf94e1936da6edf9605efd0e14402a604ffe6797934ee40"], 0x1) prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000006c0), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0xffffffffffffffad, {{0x2, 0x4e24}}}, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x81, 0x1, 0x327, 0x7, 0x1, 0x20, 0x2, 0x445cd569, 0x0, 0xfffffffffffffbff, 0x3f, 0x0, 0x3, 0x0, 0x3d15]}, &(0x7f0000000840)=0x100) recvfrom$ipx(r0, &(0x7f0000000880)=""/171, 0xab, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}) 2018/04/21 02:01:39 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20e}, 0xfffffffffffffed4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x930000, 0x6f2000, &(0x7f0000000180)) 2018/04/21 02:01:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={@dev={0xfe, 0x80}, @empty, @local={0xfe, 0x80, [], 0xaa}}) 2018/04/21 02:01:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x2) 2018/04/21 02:01:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:40 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20e}, 0xfffffffffffffed4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x930000, 0x6f2000, &(0x7f0000000180)) 2018/04/21 02:01:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={@dev={0xfe, 0x80}, @empty, @local={0xfe, 0x80, [], 0xaa}}) 2018/04/21 02:01:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x2) 2018/04/21 02:01:40 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20e}, 0xfffffffffffffed4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x2, 0x930000, 0x6f2000, &(0x7f0000000180)) 2018/04/21 02:01:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={@dev={0xfe, 0x80}, @empty, @local={0xfe, 0x80, [], 0xaa}}) 2018/04/21 02:01:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 2018/04/21 02:01:40 executing program 2: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x8) read(r3, &(0x7f00004bdf32)=""/206, 0xce) r5 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) 2018/04/21 02:01:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/21 02:01:40 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subvolrootid={'subvolrootid', 0x3d, [0x37]}, 0x2c}, {@subvolid={'subvolid', 0x3d, 'em0eth0+'}, 0x2c}]}) 2018/04/21 02:01:40 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000001380)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000001c0)) syz_fuseblk_mount(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:01:40 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002922)="2ee9877d580ad32fd7906bb6af10cce4cd9781039daf1d4c619c10da629f37f69f", 0x21) [ 96.906549] BTRFS: 'subvolrootid' mount option is deprecated and has no effect 2018/04/21 02:01:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={@dev={0xfe, 0x80}, @empty, @local={0xfe, 0x80, [], 0xaa}}) 2018/04/21 02:01:40 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000001380)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000001c0)) syz_fuseblk_mount(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:01:40 executing program 7: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host=0x2}, 0x10) 2018/04/21 02:01:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/27, 0x1b}], 0x1}, 0x0) [ 97.005834] BTRFS: 'subvolrootid' mount option is deprecated and has no effect [ 97.090121] ================================================================== [ 97.097715] BUG: KASAN: slab-out-of-bounds in __sctp_v6_cmp_addr+0x4c7/0x530 [ 97.104905] Read of size 8 at addr ffff8801d76b7420 by task syz-executor4/7783 [ 97.112265] [ 97.113884] CPU: 1 PID: 7783 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #10 [ 97.121052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.130389] Call Trace: [ 97.132972] dump_stack+0x1b9/0x294 [ 97.136590] ? dump_stack_print_info.cold.2+0x52/0x52 [ 97.141767] ? printk+0x9e/0xba [ 97.145039] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 97.149786] ? kasan_check_write+0x14/0x20 [ 97.154023] print_address_description+0x6c/0x20b [ 97.158855] ? __sctp_v6_cmp_addr+0x4c7/0x530 [ 97.163336] kasan_report.cold.7+0x242/0x2fe [ 97.167737] __asan_report_load8_noabort+0x14/0x20 [ 97.172661] __sctp_v6_cmp_addr+0x4c7/0x530 [ 97.176973] sctp_inet6_cmp_addr+0x169/0x1a0 [ 97.181380] sctp_bind_addr_match+0x20b/0x400 [ 97.185867] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 97.190709] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 97.196234] ? sctp_v4_available+0x1b1/0x200 [ 97.200634] ? sctp_inet6_bind_verify+0xb2/0x500 [ 97.205376] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 97.210905] sctp_do_bind+0x1c0/0x5f0 [ 97.214709] sctp_bindx_add+0x90/0x1a0 [ 97.218589] sctp_setsockopt_bindx+0x2ad/0x320 [ 97.223165] sctp_setsockopt+0x12c4/0x7000 [ 97.227387] ? __lock_acquire+0x7f5/0x5140 [ 97.231609] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 97.237317] ? debug_check_no_locks_freed+0x310/0x310 [ 97.242496] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 97.248035] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 97.253144] ? futex_wait+0x5c1/0x9f0 [ 97.256944] ? futex_wait_setup+0x400/0x400 [ 97.261270] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 97.266453] ? perf_trace_lock_acquire+0xe3/0x980 [ 97.271288] ? futex_wake+0x2f6/0x750 [ 97.275081] ? perf_trace_lock+0x900/0x900 [ 97.279305] ? get_futex_key+0x1e90/0x1e90 [ 97.283529] ? debug_check_no_locks_freed+0x310/0x310 [ 97.288708] ? graph_lock+0x170/0x170 [ 97.292509] ? debug_check_no_locks_freed+0x310/0x310 [ 97.297691] ? find_held_lock+0x36/0x1c0 [ 97.301751] ? lock_downgrade+0x8e0/0x8e0 [ 97.305896] ? kasan_check_read+0x11/0x20 [ 97.310035] ? rcu_is_watching+0x85/0x140 [ 97.314173] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 97.319363] ? __fget+0x40c/0x650 [ 97.322812] ? expand_files.part.8+0x9a0/0x9a0 [ 97.327394] ? find_held_lock+0x36/0x1c0 [ 97.331456] ? __fget_light+0x2ef/0x430 [ 97.335422] ? fget_raw+0x20/0x20 [ 97.338863] ? rcu_is_watching+0x85/0x140 [ 97.342999] ? __lock_is_held+0xb5/0x140 [ 97.347054] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 97.352253] ? __fd_install+0x2de/0x880 [ 97.356221] sock_common_setsockopt+0x9a/0xe0 [ 97.360710] __sys_setsockopt+0x1bd/0x390 [ 97.364849] ? kernel_accept+0x310/0x310 [ 97.368897] ? do_futex+0x27d0/0x27d0 [ 97.372686] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 97.378214] ? fput+0x130/0x1a0 [ 97.381490] __x64_sys_setsockopt+0xbe/0x150 [ 97.385889] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 97.390906] do_syscall_64+0x1b1/0x800 [ 97.394781] ? finish_task_switch+0x1ca/0x810 [ 97.399268] ? syscall_return_slowpath+0x5c0/0x5c0 [ 97.404195] ? syscall_return_slowpath+0x30f/0x5c0 [ 97.409118] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 97.414475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 97.419321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.424496] RIP: 0033:0x455389 [ 97.427669] RSP: 002b:00007f736b298c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.435371] RAX: ffffffffffffffda RBX: 00007f736b2996d4 RCX: 0000000000455389 [ 97.442628] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000013 [ 97.449883] RBP: 000000000072bea0 R08: 0000000000000020 R09: 0000000000000000 [ 97.457139] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 97.464404] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 97.471669] [ 97.473283] Allocated by task 7783: [ 97.476898] save_stack+0x43/0xd0 [ 97.480335] kasan_kmalloc+0xc4/0xe0 [ 97.484036] __kmalloc_node+0x47/0x70 [ 97.487822] kvmalloc_node+0x6b/0x100 [ 97.491611] vmemdup_user+0x2d/0xa0 [ 97.495221] sctp_setsockopt_bindx+0x5d/0x320 [ 97.499701] sctp_setsockopt+0x12c4/0x7000 [ 97.503922] sock_common_setsockopt+0x9a/0xe0 [ 97.508401] __sys_setsockopt+0x1bd/0x390 [ 97.512533] __x64_sys_setsockopt+0xbe/0x150 [ 97.516925] do_syscall_64+0x1b1/0x800 [ 97.520797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.525968] [ 97.527581] Freed by task 4560: [ 97.530848] save_stack+0x43/0xd0 [ 97.534286] __kasan_slab_free+0x11a/0x170 [ 97.538509] kasan_slab_free+0xe/0x10 [ 97.542295] kfree+0xd9/0x260 [ 97.545388] kvfree+0x61/0x70 [ 97.548478] translate_table+0xc88/0x1810 [ 97.552611] do_ip6t_set_ctl+0x3c7/0x64b [ 97.556658] nf_setsockopt+0x7d/0xd0 [ 97.560359] ipv6_setsockopt+0x105/0x170 [ 97.564407] tcp_setsockopt+0x93/0xe0 [ 97.568191] sock_common_setsockopt+0x9a/0xe0 [ 97.572672] __sys_setsockopt+0x1bd/0x390 [ 97.576805] __x64_sys_setsockopt+0xbe/0x150 [ 97.581201] do_syscall_64+0x1b1/0x800 [ 97.585073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.590242] [ 97.591856] The buggy address belongs to the object at ffff8801d76b7400 [ 97.591856] which belongs to the cache kmalloc-32 of size 32 [ 97.604337] The buggy address is located 0 bytes to the right of [ 97.604337] 32-byte region [ffff8801d76b7400, ffff8801d76b7420) [ 97.616455] The buggy address belongs to the page: [ 97.621375] page:ffffea00075dadc0 count:1 mapcount:0 mapping:ffff8801d76b7000 index:0xffff8801d76b7fc1 [ 97.630805] flags: 0x2fffc0000000100(slab) [ 97.635034] raw: 02fffc0000000100 ffff8801d76b7000 ffff8801d76b7fc1 000000010000003f [ 97.642901] raw: ffffea00075d9060 ffffea00075b3160 ffff8801da8001c0 0000000000000000 [ 97.650769] page dumped because: kasan: bad access detected [ 97.656460] [ 97.658069] Memory state around the buggy address: [ 97.662990] ffff8801d76b7300: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 97.670341] ffff8801d76b7380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 97.677684] >ffff8801d76b7400: 00 00 00 00 fc fc fc fc 00 05 fc fc fc fc fc fc [ 97.685024] ^ [ 97.689419] ffff8801d76b7480: 00 00 02 fc fc fc fc fc 00 00 00 01 fc fc fc fc [ 97.696762] ffff8801d76b7500: 00 00 00 02 fc fc fc fc 00 00 05 fc fc fc fc fc [ 97.704100] ================================================================== [ 97.711441] Disabling lock debugging due to kernel taint [ 97.717245] Kernel panic - not syncing: panic_on_warn set ... [ 97.717245] [ 97.724623] CPU: 1 PID: 7783 Comm: syz-executor4 Tainted: G B 4.17.0-rc1+ #10 [ 97.733196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/04/21 02:01:41 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000001380)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000001c0)) syz_fuseblk_mount(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:01:41 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subvolrootid={'subvolrootid', 0x3d, [0x37]}, 0x2c}, {@subvolid={'subvolid', 0x3d, 'em0eth0+'}, 0x2c}]}) [ 97.742545] Call Trace: [ 97.745136] dump_stack+0x1b9/0x294 [ 97.748773] ? dump_stack_print_info.cold.2+0x52/0x52 [ 97.753967] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 97.758726] ? __sctp_v6_cmp_addr+0x4a0/0x530 [ 97.763219] panic+0x22f/0x4de [ 97.766419] ? add_taint.cold.5+0x16/0x16 [ 97.770575] ? do_raw_spin_unlock+0x9e/0x2e0 [ 97.774984] ? do_raw_spin_unlock+0x9e/0x2e0 [ 97.779393] ? __sctp_v6_cmp_addr+0x4c7/0x530 [ 97.783886] kasan_end_report+0x47/0x4f [ 97.787949] kasan_report.cold.7+0x76/0x2fe [ 97.792277] __asan_report_load8_noabort+0x14/0x20 [ 97.796154] BTRFS: 'subvolrootid' mount option is deprecated and has no effect [ 97.797205] __sctp_v6_cmp_addr+0x4c7/0x530 [ 97.797221] sctp_inet6_cmp_addr+0x169/0x1a0 [ 97.797239] sctp_bind_addr_match+0x20b/0x400 [ 97.797257] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 97.822600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 97.828141] ? sctp_v4_available+0x1b1/0x200 [ 97.832553] ? sctp_inet6_bind_verify+0xb2/0x500 [ 97.837314] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 97.842853] sctp_do_bind+0x1c0/0x5f0 [ 97.846656] sctp_bindx_add+0x90/0x1a0 [ 97.850544] sctp_setsockopt_bindx+0x2ad/0x320 [ 97.855135] sctp_setsockopt+0x12c4/0x7000 [ 97.859368] ? __lock_acquire+0x7f5/0x5140 [ 97.863593] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 97.869301] ? debug_check_no_locks_freed+0x310/0x310 [ 97.874486] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 97.880004] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 97.885093] ? futex_wait+0x5c1/0x9f0 [ 97.888883] ? futex_wait_setup+0x400/0x400 [ 97.893194] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 97.898365] ? perf_trace_lock_acquire+0xe3/0x980 [ 97.903184] ? futex_wake+0x2f6/0x750 [ 97.906967] ? perf_trace_lock+0x900/0x900 [ 97.911182] ? get_futex_key+0x1e90/0x1e90 [ 97.915398] ? debug_check_no_locks_freed+0x310/0x310 [ 97.920567] ? graph_lock+0x170/0x170 [ 97.924349] ? debug_check_no_locks_freed+0x310/0x310 [ 97.929530] ? find_held_lock+0x36/0x1c0 [ 97.933572] ? lock_downgrade+0x8e0/0x8e0 [ 97.937702] ? kasan_check_read+0x11/0x20 [ 97.941826] ? rcu_is_watching+0x85/0x140 [ 97.945952] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 97.951124] ? __fget+0x40c/0x650 [ 97.954574] ? expand_files.part.8+0x9a0/0x9a0 [ 97.959137] ? find_held_lock+0x36/0x1c0 [ 97.963179] ? __fget_light+0x2ef/0x430 [ 97.967130] ? fget_raw+0x20/0x20 [ 97.970565] ? rcu_is_watching+0x85/0x140 [ 97.974693] ? __lock_is_held+0xb5/0x140 [ 97.978736] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 97.983911] ? __fd_install+0x2de/0x880 [ 97.987865] sock_common_setsockopt+0x9a/0xe0 [ 97.992350] __sys_setsockopt+0x1bd/0x390 [ 97.996489] ? kernel_accept+0x310/0x310 [ 98.000968] ? do_futex+0x27d0/0x27d0 [ 98.004751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 98.010265] ? fput+0x130/0x1a0 [ 98.013529] __x64_sys_setsockopt+0xbe/0x150 [ 98.017919] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 98.022920] do_syscall_64+0x1b1/0x800 [ 98.026792] ? finish_task_switch+0x1ca/0x810 [ 98.031269] ? syscall_return_slowpath+0x5c0/0x5c0 [ 98.036182] ? syscall_return_slowpath+0x30f/0x5c0 [ 98.041354] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 98.046707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 98.051535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 98.056704] RIP: 0033:0x455389 [ 98.059872] RSP: 002b:00007f736b298c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.067562] RAX: ffffffffffffffda RBX: 00007f736b2996d4 RCX: 0000000000455389 [ 98.074810] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000013 [ 98.082060] RBP: 000000000072bea0 R08: 0000000000000020 R09: 0000000000000000 [ 98.089397] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 98.096648] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 98.104382] Dumping ftrace buffer: [ 98.107905] (ftrace buffer empty) [ 98.111589] Kernel Offset: disabled [ 98.115191] Rebooting in 86400 seconds..