[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.562808] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.467772] random: sshd: uninitialized urandom read (32 bytes read) [ 24.870760] random: sshd: uninitialized urandom read (32 bytes read) [ 25.673664] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. [ 31.222440] random: sshd: uninitialized urandom read (32 bytes read) 2018/04/29 20:27:35 fuzzer started 2018/04/29 20:27:35 dialing manager at 10.128.0.26:38491 [ 57.772994] can: request_module (can-proto-0) failed. [ 57.783126] can: request_module (can-proto-0) failed. 2018/04/29 20:28:03 kcov=true, comps=true 2018/04/29 20:28:08 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) connect(r0, &(0x7f0000000040)=@ax25={0x3, {"1d2d2438d3ec2e"}, 0x200}, 0x80) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)="0d87a2549427a0b28da450da51dd93d48d216c7485f7268b2d46bfd1f77de471e1900a99b2c40049022bdb5f494502b985616ccea8c8d1", 0x37}, {&(0x7f0000000100)="32c6d44f9c0457e038827e25701cd06cd28534e57e3323a176a99c1b9b9df84d4e55e8d2479ad868d5c4b61d1fadf5e878c303cb0339ca1508ee41b7552438857a0ce95b1b51bc6422803e7b9e8dbb62c0602e1414243e4593253e672b7fb26eddccbf3b243bb3221b7d0090cf57f68bc459f57987cb6b8ccde19564bfed66c17c9c43d17e94aae1d7c1df65ea8cf5265c40e9629faeaa5893be55a5bc9dccb456be3167bda0e82308c5e30be09395c789ef8344ec562ca6fcd99a53bed7752100e9ceb8b0869ce323d724", 0xcb}, {&(0x7f0000000200)="c854ca76b376d417", 0x8}, {&(0x7f0000000240)="6d77f05d818f7ca41186940981071dc5b09548c0700b748e78d6ca22c550b29f8e28f34fa9fd0b", 0x27}, {&(0x7f0000000280)="3b87f6f7baaa53d102b4c5d4a98a999deb430f1213d1ee6cbf671b00a6b67aaab589fbd5722a4409ce4a40caa5dd2ae677f47c05305d4f98fc9a33f841de72a3b415895d6ce0170c76a9acd6e95e9ba8ecdc5784be2baf28977d6285daf800bcb4dc0ea0be00149e794ab33e794fb87a2e8e17c58b096713eab72b1ce93c0775f69af9a72c07e7c63f5b02a1a66c87738711e039d5854541782916480f94435a984743d1fed5d17830a8e529bdd314", 0xaf}, {&(0x7f0000000340)="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", 0xfa}], 0x6, 0xc) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)=0x0) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000600)={&(0x7f0000000580)="5ef51ae039ff2f1ea105ca842c65f12c23fa3406e5cdaebbe8efecbb67bd5f349245b563d6918724e02e1681cb0bc187ad5f97fbbeb8ccf77c7398cec29f8b56a4c2a8abacf71a682c979395e780f92aace4416f3ab49d23a7", 0x59}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)={&(0x7f0000000640)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000006c0)={0x4, 0x0, [{0x400, 0x2, 0x0, 0x0, @irqchip={0x401, 0x6}}, {0x4, 0x5, 0x0, 0x0, @sint={0x5, 0x9}}, {0x7f, 0x4, 0x0, 0x0, @sint={0x2, 0x404}}, {0xffffffff978d4b85, 0x7, 0x0, 0x0, @irqchip={0x3, 0x1400000000000000}}]}) r2 = syz_open_dev$dspn(&(0x7f00000007c0)='/dev/dsp#\x00', 0xbbad, 0x40000) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) personality(0x4400000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000840)) getrandom(&(0x7f0000000880)=""/222, 0xde, 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000980)={{0x8000, 0x9}, {0x0, 0x2f1}, 0xd8, 0x5, 0x8}) syz_mount_image$ceph(&(0x7f0000000a00)='ceph\x00', &(0x7f0000000a40)='./file0\x00', 0x2, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a80)="73cd48f634b9d8872e8decda97b82489aec80fdcbf5c7ed8c8a4a3e189cb915d936cf7c2cc4f697ea64afa4029a6ec69030d8cd989d2e5e879b936af264ee51baeaf11e2d22a36ce88c35177556199c358d76147baacb1a21c7ca14b3d6f3849d7ed4c", 0x63, 0xfff}], 0x100040, &(0x7f0000000b40)='/proc/sys/net/ipv4/vs/pmtu_disc\x00') getpeername$packet(r0, &(0x7f0000000b80), &(0x7f0000000bc0)=0x14) getsockopt$inet6_buf(r3, 0x29, 0x23, &(0x7f0000000c00)=""/244, &(0x7f0000000d00)=0xf4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000d40), &(0x7f0000000dc0)=0x68) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000e00)={0x0, 0x0, 0xfff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000e40)={r6}) lseek(r3, 0x0, 0x6) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000e80)=0x1d) poll(&(0x7f0000000ec0)=[{r3, 0x2000}, {r4}], 0x2, 0x400) poll(&(0x7f0000000f00)=[{r0, 0x2000}, {r5, 0x104}, {r5, 0x24}], 0x3, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f40)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000f80)=0x6, 0x4) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000fc0)=0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000001000)) 2018/04/29 20:28:08 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'io', 0x20}, {0x2d, 'cpu', 0x20}, {0x2d, 'cpu', 0x20}]}, 0xe) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x9, 0x40, 0x3}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='#:\x00', 0x2) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0xfffffffffffffff7) fcntl$setsig(r1, 0xa, 0xd) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x6, 0x7, 0x8, 0x8, "c6b0799342d2a9e02d001cbea407b6c12214fe9f396e39d2ea7b23ccbfad68341a08018bf7bf9c9bcd76deea", 0x4}, 0x0, 0x0, 0x8000, r2, 0x3, 0x7ce8, "cb343e0585e5bcb345da18b0f9ba08dc0f72fcb26c3931d8d56e7113a7e9250c02836631301a0a51d23742058a84a6209caf78c464eb9c1bbdb0e0cd0cfb8102", &(0x7f0000000180)='self+vboxnet1\x00', 0xe, [], [0x100000000, 0x1, 0x89fa, 0x40]}) fadvise64(r1, 0x0, 0x18000000000000, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x101800, 0x0) getsockname(r1, &(0x7f0000000340)=@nl, &(0x7f00000003c0)=0x80) connect$bt_rfcomm(r3, &(0x7f0000000400)={0x1f, {0x1, 0x1, 0x567, 0x4, 0xe, 0x9}, 0x1ff}, 0xa) fcntl$setown(r0, 0x8, r2) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000440)={{0x8, 0x1, 0x3c2, 0x2, 0x3, 0x4}, 0xf0a0, 0x1, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0xb2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0xd3}}, 0x0, 0x3f, 0xaa, 0x5c84}, &(0x7f00000005c0)=0x98) fcntl$setstatus(r3, 0x4, 0x4000) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000600)="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") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa4, r5, 0x203, 0x70bd26, 0x25dfdbfe, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2b}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x433e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x80) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000900)=""/212, &(0x7f0000000a00)=0xd4) write$binfmt_elf32(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0xfff, 0x80000001, 0x800, 0x3, 0x3f, 0x1489, 0x228, 0x38, 0x168, 0xaddf, 0x8001, 0x20, 0x1, 0x7, 0x1000, 0xffffffffffffffd7}, [{0x6, 0xe8a, 0x0, 0x1, 0x0, 0xebc7, 0x2, 0x7}], "2db0426bf10e2dbe7bf9ea4b1618ea0611cf5d1d55e0c0716a30ef46e4e475b86095a2e4ce4b9a039489d4f45dda25919e626056566d0e0f7d961f5d8b9af3837c139c0cdc2a1f48c30401e0f0942e13c951a6ff0c654ccf6d4a58343ea39857e7bd5fd25e7ca4e9f22f6699615b8ff750e3cebdcfac965ae0458a682d5b6bc30f0d4245ee2db3f28321f3bd849028f084528fb5a180836959213e961ed9d3f9", [[], [], [], []]}, 0x4f8) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000000f40)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000fc0)={0x5, [0x9cce, 0x80000001, 0x7fffffff, 0x4, 0xff]}, 0xe) write$binfmt_aout(r3, &(0x7f0000001000)={{0xcc, 0x7d, 0x60000000000000, 0x90, 0x387, 0xfffffffffffffffd, 0x181, 0x4}, "b5e3d6e37877b731ecb993957d3e8483fdf76cde394520c0cc0e212b0238452b7923586f36adaf149a6a4ba3a9d4323efe7791d0baa07a95aa8ab1e4c7be68d3c6eb8dcdf084dff4c1a8d3ade2b8565d04a59eeccfe9dc38723a8e0333ad11f110194985f91df3151dc51529d8987940b6d6328484420adf05dedf7753b979e1ce5d761ee5c96264b533285b37da6b71", [[], [], [], [], [], []]}, 0x6b0) prctl$setendian(0x14, 0x0) open(&(0x7f00000016c0)='./file0\x00', 0xc40, 0x2a) 2018/04/29 20:28:08 executing program 7: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/ipc\x00') r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x20001, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000280)={0x3, 0x3, 0xd5, &(0x7f0000000180)="80358c92f1649c61be667f6dc24853b73f94e62804aadf83d9e0c119aa4804352f8ff3960fbc5a33886abc571b286c483a98c1b4fce16180cac10610195b6a2bbd280b6bc616fcf803aab3192e79c021ba2ba354c395da3dcb41187c23ed0fa8d555d54a0bcaaedf71eab380d156035317905f85d22d5a9067aa1c757626492a9dc145a415fb1f7c283ed27569fd38f7f3466c642d766d1af2f246b02b15a8282489d0b97e14967d7173c997cbc65d92514636b2c874e8dfe1673052b5a3912dbd002fa1337baf006c6d9341675a623a093249e656"}) r4 = geteuid() r5 = getgid() setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={r1, r4, r5}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x400, @empty, 0x1f}}, 0x9, 0x8}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400)={r6, 0x733}, 0x8) fchdir(r0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000440)={0x5, 0x7, 0x80000001}) setxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@random={'os2.', 'ns/ipc\x00'}, &(0x7f0000000500)='ns/ipc\x00', 0x7, 0x3) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000540)={'veth0_to_bridge\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x200000, 0x0) r8 = request_key(&(0x7f00000005c0)='syzkaller\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640)='+[proc\'selfvboxnet1(\x00', 0xffffffffffffffff) keyctl$update(0x2, r8, &(0x7f0000000680)="6aa90d1d578caecf78165448217e27836ae1bd85d6d9de", 0x17) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000006c0)={0x20, 0x3, 0x8}) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f0000000700)={0x8, 0x4fa4}) accept4$packet(r0, &(0x7f0000000740), &(0x7f0000000780)=0x14, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f00000007c0)={0x9, 0x0, 0x7f, 0x1200000000000000}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000c00)={0x1, 0x4}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000c40)=0x100000001, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000c80)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000cc0)={r9}) 2018/04/29 20:28:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x80, 0x3, &(0x7f0000000380)=[{&(0x7f0000000080)="0c3d6786c385de9b9891fc9130f7621a0ae24e28890da50817bcd76d924310a9792502dde026ced2b7c6ab3391d38ddffc72cc0ea78eb342cc1080565130919969c0901f60a78ffe53444061b09fd3d1e9e3d4bf50acbbea1ceb805f2b8a7bcce33b2fb008321179884c06621d51f5421fbe0fe2bf4898eea4154f0a42aaf53d1935bd28a02a41a65c46db058de7703cc332fb4d54b89c169aee5f7a91305c21ea3745c51e811408d93f4eb1b7f2afd2437796bc20fcc54c0d86f104743d337af4", 0xc1, 0x3}, {&(0x7f0000000180)="a2366d775d2ea7f2354bcfe40ed36b254bf1520e4f5005f340514faeacb4773cc2a78bd7b8e0fee2026def31599841a9aaa3d608c2f9db33ec4a67b87fd12c85ae7032715b60f5d2e37c7c60c361145d5e2eacb7fd852d74c75cf04e432e0add3dea6ccc0c0f351be943f2265f895b24bd3ea2884d99a8e1c3e7669faf7a65ec3075798036bd9992e4c437020cc44b4da2b192e68783da94ab38daa951f249db56d3a425e7968cb87c8e55b319423564778b76e30fa28cc4f4af090e0bda0224d01fe4690ee2241874934d9fa5f50c61719472360dfaa1ca19a4c7a9f721b12af46679ca57701ff79a6fdbc564a75b897a", 0xf1, 0x80000001}, {&(0x7f0000000280)="2b02473dfcdec55523581de6a019402b3bd8b0555ce69a506c93cb0524e5e4f846cbf05b8694d8530ed5c2be7979c67088723cb0c69a265c4d35ab24565b879afdfb9bada2f926982d2383b0a3edbd0363b8d92d856530f2c2860e1013bdad287ff8eab88681f83cee624b2a71fe3258e836f89eea7c982331ace0fd3c07cab280a42400d96150bf06b1f16c25f6ba6ca059fb5cb5f9ddd994382dbe7bac5b9e212bbec592a3e7e634ae24177fe6f49e8e8602325e9752f212ab11b72aa73631a19032933f10071b3e36aa74e22f6cc1667c17b69a8e44f0e09f3aba3e74bd8235246dff4c840ab5b5d5d3e6", 0xec}], 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, [0x37, 0x34, 0x7d, 0x35, 0x33, 0x33, 0x38]}, 0x2c}, {@check_strict='check=strict', 0x2c}, {@gid={'gid', 0x3d, [0x37, 0x37, 0x36, 0x34, 0x38, 0x0, 0x0]}, 0x2c}, {@check_relaxed='check=relaxed', 0x2c}, {@cruft='cruft', 0x2c}]}) r0 = creat(&(0x7f0000000440)='./file0\x00', 0xc) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000480)=0x1, &(0x7f00000004c0)=0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x160, r1, 0x403, 0x70bd25, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffff4c85}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x40800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffffffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback={0x0, 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x69}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x329e9eef}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4040081}, 0x40000) acct(&(0x7f0000000780)='./file0\x00') setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000008c0)={@llc={0x1a, 0x31f, 0x400, 0x3, 0x2, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, {&(0x7f00000007c0)=""/138, 0x8a}, &(0x7f0000000880), 0x20}, 0xa0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000980)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000009c0)=@ioapic={0x6000, 0x8, 0x6, 0xaf, 0x0, [{0x7, 0xfffffffffffffff9, 0x6}, {0x9, 0x1, 0x8000, [], 0x8}, {0x8, 0x80000000, 0x100000001, [], 0xffffffff}, {0x290, 0xb7, 0x5, [], 0x81}, {0x2, 0x2, 0x1b8e, [], 0x800000000000000}, {0x8, 0x6, 0xfff, [], 0x7}, {0xfffffffffffffffb, 0x6, 0x5, [], 0xfffffffffffffffa}, {0x6, 0x5, 0x8, [], 0x91}, {0xf0, 0x9, 0x27, [], 0x9}, {0x40, 0x20000, 0x1ff, [], 0x3f}, {0x8, 0x100, 0x4, [], 0x7}, {0xd7, 0xad7a, 0x40, [], 0x7fff}, {0x7, 0xee6, 0x1, [], 0xc8a}, {0x2, 0xb0, 0x7, [], 0x3}, {0x2, 0x5, 0x400, [], 0x3}, {0x10000, 0x2, 0x6c2, [], 0x400000}, {0x10000, 0x8, 0x5, [], 0x4}, {0x1, 0x8, 0x7, [], 0x6}, {0x5, 0x2, 0x3, [], 0x2}, {0x8, 0x34cd, 0x3f, [], 0x2}, {0x9, 0x5, 0x80000001, [], 0x6}, {0x3ff, 0x100000001, 0x3, [], 0x2}, {0x6, 0x2, 0x7, [], 0x1ff}, {0x8b1, 0x7fe00000000000, 0x6885, [], 0x1}]}) accept4$alg(r0, 0x0, 0x0, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x200000, 0x0) bind$inet(r0, &(0x7f0000000b40)={0x2, 0x4e20}, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b80)=0x7) mq_unlink(&(0x7f0000000bc0)='sed\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={r0, 0x0, 0x1, 0xe0c, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000c80)={0x20000008}) r3 = semget$private(0x0, 0x7, 0x0) semctl$GETVAL(r3, 0x7, 0xc, &(0x7f0000000cc0)=""/162) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001d80)=@get={0x1, &(0x7f0000000d80)=""/4096, 0x101}) recvmsg$netrom(r0, &(0x7f0000002400)={&(0x7f0000001dc0)=@ax25={0x3, {"abdfc7c0ef5c31"}, 0xd4e}, 0x10, &(0x7f0000002380)=[{&(0x7f0000001e00)="c2ecbc0e02c8476136b952379ac53c4d7f82498569c5b113ba8d97c88f2f6e85ca60f79bc7b32693008b725e77021a7d04fd8d4e1431d22a22e44d8a283180a9cc921d6ab9bf4b3f0d1ee354ed58c84cdc368187e5ece676786edde0c7bcbdb69df6ddb08a1eed646ea763436326fed8d94a4acade1588ed4ff54aa9cc9232b694bf082152b67a7653ba624d2a91a58100f59f16f1a9a1e9c15037cc86c7ecf752ec411514f6648d635481cd460a893f66f96cae3c115ec0afd6f40086051515ca639289b054563fe2d6452219ed9a68097ca1e62581c965a998d912cf2ac3b70ca4be8be54f70b437ce31", 0xeb}, {&(0x7f0000001f00)="8abb5cc6d444d4e23edab09087b730549434a8679ab5e969a2b3a96e11", 0x1d}, {&(0x7f0000001f40)="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", 0xfa}, {&(0x7f0000002040)="28b1dfea956bef55f1e1a65e3ef8de0b5962eb2510a8beebd58b3639112837a7b777a79c2af7157cccce0c0837956627318b72ed05d9219241e8c229a933d06c9f751bbd2130fa96b98605a0d4267f1e42c0872afdbd2a575339aabbbacfc434acc5348ba4b04734f8e737d662af34316ff6e52b5c31d9ef2bb43d66f35901b08a9ab497a5a42c", 0x87}, {&(0x7f0000002100)="8a08bfd0317d7a4854d36d859a89bb10d66d758fa21706ad3399771cffb732a3eedea0b3dc481b5880316fcff9a66792272b72bd369ba77344d71be24f8f2459dcbe02945da9459f170ca03c4d61a99c2d490657d23f39835b64ee9fd591226a642da8b7a0e5adcd40904510a058f5745e483013f7968eb61a4646e8716b33527790c83bf41f595d1db265efaa80bab8846b57b39437c0e29e850413aa11", 0x9e}, {&(0x7f00000021c0)="77715cbada8de13f918977c7eeaf21208a5af258a8499df563618f77c135e86786bca56883e461f357a56f5156d961316e706f4388cfee2ff3bbb31c8b192b264f43b796954a16042833712fb617c96d5e9c58bb2a7e25f0e9159da7a7d4a628e531ff0147b41e3c", 0x68}, {&(0x7f0000002240)="abe75c96f2c5e22d6dcdd2f0af0b12a01fab1a010657c8c8f5d78d958a039e120c71d17556e40f8bdcc22abda839f4adf4c2f5c4630931665de06d35c4fc94e761c98df08cdf047b1d55edc2b08ee36b257f2bcb1aac58fc9fdf4f618f7d0e1f9b59f641fd78252b237a5a8988fe7553cc35da3da2705cfe91674cc277226ed797fd3480fe2776f66684319eecbb30c6cd100487a4e16c25c31f995e30d7a6acb514351fd5df1f857058", 0xaa}, {&(0x7f0000002300)="96a6fdd93ed86a76cc543ba7edfb830ae217f54149bb441940caf3af5103120b0d12d3413bdb41abca43d7cdae67219429511a19cb5bdb77efb65d8954e0ce3c028dacc55e694432e3987a66d4ed2152afb162d61a77c8", 0x57}], 0x8, 0x0, 0x0, 0x20000000}, 0x12042) r4 = shmget(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r5 = syz_open_dev$admmidi(&(0x7f0000002440)='/dev/admmidi#\x00', 0x9, 0x119000) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000002480)={0x7fffffff0000000, 0x1, 0x0, 0x1}, 0x8) rt_sigreturn() clock_gettime(0x0, &(0x7f0000002540)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000024c0)="0a056150f1c009e7dbf119cd8c42f6560fc317863c9a1129e5ec56c6dfffc375e2092fe423c6db42d0c99bcebcc703f336bcf989b9e68d58dadae5798bc32d763d03c8d1031b72ae23d12a727d965ed2e28c3c944c8aa65889390dc73c103e5424d73742eadf31", 0x67, 0x100000001, &(0x7f0000002580)={r6, r7+10000000}) bind$alg(r2, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000002640)={0x0, 0x7ff, 0x3, [0x1, 0x9, 0x5]}, &(0x7f0000002680)=0xe) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000026c0)={r8, 0xa067, 0x5, [0x3, 0x8000, 0x0, 0xaa, 0x1f]}, &(0x7f0000002700)=0x12) 2018/04/29 20:28:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff]}, 0x6}}, 0x40, 0x6}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0xffff}, &(0x7f0000000180)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000001c0)={0x0, 0x3, {0xffffffffffffffff, 0x0, 0x9, 0x1, 0x1000}}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000240)={'syz_tun\x00', 0x9}) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000280)=0x256cac9a, 0x4) getrlimit(0x7, &(0x7f00000002c0)) r2 = semget(0x1, 0x3, 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000300)=[0x3ff]) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000340)=[0x7]) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000380)={0x1, r0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f00000003c0)="7f53c0732a4500d756b79f10e07632d70b7a4507acd29ac7e386a5695a0c29879fd8cfbeee4cf5ef051f62afbeb2e059831be4712c54bcef276837d3b87cd32727a4258b79e915f7d23174fd483c2ff2e49f3335c90155d236b4ba6a1cfbb81f6644f9f12426681042baefaf644a54f23f2f6a3007c1a34ddee34191bd580eb28bbbf1136246b6", 0x87}, {&(0x7f0000000480)="d11558e7c71cfe30b9352dc86827d7119f8cbe04a10cb2d94774cc1e6fe302dcbe42f9f992baf906ab5c2fa4eaf27a3808636c6ace4373cdfd4ca539544fd9fb3a79eb1ebfdfc32ed667dabf5302f71e512b57a2b580a3a38be086e7e5b2cd8b5b7d81229fdcee6968", 0x69}, {&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000600)="16599c3c882014adcafedb92d56ea28f0e5d28b33652882fd923b22af90cd415bef9b3503cdb72d7f2dcf170b9475298fa37bcea64f880b3bfdc068e619b93e2d10bbbbaee", 0x45}, {&(0x7f0000000680)="b73f2ed3dc4d941879f296a583fbfa6ca495a35ca91446c799f6ff7a2a6f09e74162d65b48c87565ddf9f19be752ba25a06edb36a6d9b87570c939d59f1aab16843e2b3cfed66287dd4f13bf146012994782253d87a3c9d970b2932143017235affc7475ba91bde637f58c1b81cec89c78c5b8c6eb5a9b74ec1989d5a1b97beeaa7cf8b5d11ad8982a5e999c14d9813a08a4519f67e857870c1f13343e23f63f07c071c0e1490b", 0xa7}, {&(0x7f0000000740)="7cac50605843bca3abc0a735ffcc4207cce80f4ef3a4ffe6b4763a740c9a6fe62818355b7f811aa767c30487ee05128d8289953116a2bc57734cf1af779f45286597f5edca27fa32b7b50ac8d79407a59af2550e16bb9b35336380926fe88379959e9717376ffe46932d983c4a4ddccd8896c3d47c51671c245d4d78597505b26da748bcd39db13a9a8ebb0d2cec829829c8784e3043b8a093910f48352af9ff64b2ea678d865fd0228b1930643c30acda5a6b4895f95c3cd6cf55e854fccf5ccab99b9643e7dc848bf17c77f529b6007d253fc5c7f904a0a3f04c77b3f8cae6dd32fd17", 0xe4}, {&(0x7f0000000840)="909347a2ff5a6aab31bbe45397ffef6e2406c21010f714044d2b06faddd4bc561f8c55d5ddf24e97eb222dcc061bb493d9", 0x31}, {&(0x7f0000000880)="f6e70de1e990f8a5b9e72020a167d835419620e81090f840820307313cd17907a0412b073981d8e3dd6af9b3c6547b8c98a4e8da16645d0ff4dae0c2a6b6bca8327fa942763917a349583b095b635e9660fc4ee2e62e99d331db1f384c1dc8456ec06daaedddeb2ab04af92705814140d68847852d8ac3ac20f784974674a3178cff75557e84", 0x86}], 0x8) finit_module(r0, &(0x7f00000009c0)='/dev/sequencer\x00', 0x3) lookup_dcookie(0x18000000, &(0x7f0000000a00)=""/245, 0xf5) semget(0x0, 0x1, 0x40) clock_nanosleep(0x0, 0x1, &(0x7f0000000b00)={0x77359400}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) splice(r4, &(0x7f0000000b40), r3, &(0x7f0000000b80), 0x100, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1208000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x158, r5, 0x4, 0x70bd27, 0x25dfdbff, {0x1}, [@IPVS_CMD_ATTR_DEST={0x68, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1e6}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xdf1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x891}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) timerfd_create(0x3, 0x800) r6 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r6, 0xb) r7 = add_key$user(&(0x7f0000000e40)='user\x00', &(0x7f0000000e80)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000ec0)="aad2df34ce036da401b6a85265c4ce16f366316ef230786a663cd5388d2c048b22cc502928cd470a1a609e2143d9", 0x2e, 0xfffffffffffffffc) r8 = request_key(&(0x7f0000000f00)='syzkaller\x00', &(0x7f0000000f40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000f80)='^\x00', 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000fc0)={0x0, 'dummy0\x00', 0x1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)) 2018/04/29 20:28:08 executing program 1: socketpair(0x5, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x7, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/230) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xe2, "de034c36c6d3a8ccb5037d4c4065829479006570013252c0190770f81f9e7483f3ae47401a1ea78deac8a1cac3c9dd2965f11bf6444761c560ffbae5d9e239e4e0dc8d771134fb3eaa2b99872add17abc9f50868f9bbdce9ca59210ba77ce108688ccdaaf6eead1ee768e37aae9fa4e746d45ff1581b8c074b6d52197905d8f2bcd270199ec5b6a54d7cd4023e1f52c3cc4b0f9fbaa79b0a6b91175d84d627e50029f1486d799222ad057b5dda163e935c4554952176bccea8cc7f58f53ec60b4203e831b3157077bc474be6493c0e99b3ffe7868e5089495d1e7923e5358d18f38f"}, &(0x7f0000000240)=0xea) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r3, 0x6}, &(0x7f00000002c0)=0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = dup3(r1, r1, 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r3, 0x5}, 0x8) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000440)={'security\x00'}, &(0x7f00000004c0)=0x54) r7 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r7, 0x81) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000640)={'broute\x00', 0x0, 0x4, 0x45, [], 0x3, &(0x7f0000000580)=[{}, {}, {}], &(0x7f00000005c0)=""/69}, &(0x7f00000006c0)=0x78) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000700)={0x100000000, 0x5, 0xfffffffffffffff7, 0x4f, 0x7, 0x7c, 0x3b5, 0x7fffffff, 0x1, 0x9, 0x100, 0x5cdfd8a4}) connect$inet6(r0, &(0x7f0000000740)={0xa, 0x4e22, 0x714, @dev={0xfe, 0x80, [], 0x15}, 0x2}, 0x1c) keyctl$link(0x8, r7, r7) keyctl$get_keyring_id(0x0, r7, 0x8) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000780)={0x0, 0xad, 0x3ff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'ip_vti0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000940)={@rand_addr=0x3dabef69, @multicast2=0xe0000002, r8}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000980)={r4, @in6={{0xa, 0x4e20, 0x54, @remote={0xfe, 0x80, [], 0xbb}, 0x8001}}, 0x0, 0x2, 0xffffffffffffff81, 0x2, 0x832c}, &(0x7f0000000a40)=0x98) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e22, 0x962d, @dev={0xfe, 0x80, [], 0x1a}, 0x9a2}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000ac0)={r4, 0x2, 0x244}, &(0x7f0000000b00)=0x8) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000b40)=0x80000001, 0x4) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000b80)=0x800, &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000c00)={r9, 0x98, "103f65c815c32bb85e9e9e163e0dac3c688896fb6942d1cce8513fa654090dbca7f36f7715d929a2e9b38b72939f246b2607114135a15c3181009701c448f75a624f72b37aeb234270a0aa9fc883357f5d56cc0830fb7fa8297a01a4a2e24c0975bda8105a1b957db2624e3d1b147bf9d79208a420ae5b7f86e6876d62c05445bf9fa4df9e494842cecfd1ae0400c23a34958c5bba583b7d"}, &(0x7f0000000cc0)=0xa0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000d00)={0xa9, 0x1ff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer\x00', 0x140, 0x0) 2018/04/29 20:28:08 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:08 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') r1 = memfd_create(&(0x7f00000002c0)='{trusted\x00', 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10000) getpid() [ 64.617850] IPVS: ftp: loaded support on port[0] = 21 [ 64.618444] IPVS: ftp: loaded support on port[0] = 21 [ 64.626410] IPVS: ftp: loaded support on port[0] = 21 [ 64.684514] IPVS: ftp: loaded support on port[0] = 21 [ 64.703939] IPVS: ftp: loaded support on port[0] = 21 [ 64.738191] IPVS: ftp: loaded support on port[0] = 21 [ 64.745237] IPVS: ftp: loaded support on port[0] = 21 [ 64.770921] IPVS: ftp: loaded support on port[0] = 21 [ 66.709179] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.715722] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.749611] device bridge_slave_0 entered promiscuous mode [ 66.769137] ip (4803) used greatest stack depth: 17240 bytes left [ 66.769525] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.781841] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.806723] device bridge_slave_0 entered promiscuous mode [ 66.844897] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.851346] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.876147] device bridge_slave_0 entered promiscuous mode [ 66.901162] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.907586] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.915448] device bridge_slave_1 entered promiscuous mode [ 66.922955] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.929347] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.938933] device bridge_slave_0 entered promiscuous mode [ 66.954817] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.961231] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.968818] device bridge_slave_1 entered promiscuous mode [ 66.990252] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.996654] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.015178] device bridge_slave_0 entered promiscuous mode [ 67.026453] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.032880] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.046099] device bridge_slave_0 entered promiscuous mode [ 67.055052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.064706] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.071117] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.084372] device bridge_slave_0 entered promiscuous mode [ 67.092944] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.099309] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.112586] device bridge_slave_1 entered promiscuous mode [ 67.126132] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.132501] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.148266] device bridge_slave_0 entered promiscuous mode [ 67.158837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.166224] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.172620] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.190386] device bridge_slave_1 entered promiscuous mode [ 67.204564] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.210949] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.218676] device bridge_slave_1 entered promiscuous mode [ 67.225352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.234565] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.240923] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.256453] device bridge_slave_1 entered promiscuous mode [ 67.264276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.278132] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.284527] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.314993] device bridge_slave_1 entered promiscuous mode [ 67.331625] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.338064] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.348968] device bridge_slave_1 entered promiscuous mode [ 67.363432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.371718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.380613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.390226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.397630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.417204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.465117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 67.495358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.503997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.524108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.531915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.561777] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.571273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 67.731541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.792572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.837346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.898750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.910068] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.922356] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.941262] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.952390] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.964943] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.987521] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.072496] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.082916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.092185] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.103507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.113781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.208340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.215303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.226246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.233194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.252720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.259762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.266645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.282365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.297109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.308440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.327432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.337780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 68.347429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.356273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.382582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.397562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.412860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.419742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.440359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.449280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.456330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.464218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.499848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 68.506933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.537110] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.560540] team0: Port device team_slave_0 added [ 68.693953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 68.721607] team0: Port device team_slave_1 added [ 68.741846] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.751243] team0: Port device team_slave_0 added [ 68.759268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.777995] team0: Port device team_slave_0 added [ 68.798113] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.807260] team0: Port device team_slave_0 added [ 68.816668] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.825982] team0: Port device team_slave_0 added [ 68.842784] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 68.856627] team0: Port device team_slave_1 added [ 68.863436] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.876693] team0: Port device team_slave_0 added [ 68.889463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 68.899686] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 68.907649] team0: Port device team_slave_1 added [ 68.915383] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.929325] team0: Port device team_slave_0 added [ 68.939940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 68.954185] team0: Port device team_slave_1 added [ 68.971445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.988329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.000058] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.009761] team0: Port device team_slave_1 added [ 69.019671] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 69.028752] team0: Port device team_slave_0 added [ 69.043666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.062559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.082630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.101615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.122908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.130110] team0: Port device team_slave_1 added [ 69.139782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.156590] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.172645] team0: Port device team_slave_1 added [ 69.181469] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 69.193321] team0: Port device team_slave_1 added [ 69.210913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.224312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.233730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.258432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.270616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.280396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.290775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.297802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.306323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.318296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.327410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 69.334785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 69.344834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 69.352847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.364880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.392061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.409919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.422532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.430358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.437758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.445491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.453177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.460237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.468397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.476895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 69.485051] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.494279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.501354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.526275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.541413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.551088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.558758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.566592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.577136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 69.584132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.592940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.600520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.609305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 69.618887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.641614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 69.661195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.692720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.722221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.741647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.749611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.758180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.765854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.773679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.781332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.789083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.796475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.804338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.811992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.819696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.840820] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.851969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.865239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.881573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.917690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.931422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.943501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.950812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.963343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.981129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.990368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.004655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.035620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.067478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.086164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.109901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.141202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.158614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.956818] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.963346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.970371] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.976763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.007686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.034046] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.040458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.047150] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.053525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.094348] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.125426] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.131836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.138484] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.144858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.196542] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.231199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.245629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.284704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.341684] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.348090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.354750] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.361126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.388371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.406432] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.412837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.419507] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.425881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.435126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.443614] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.449990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.456644] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.463041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.486842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.495291] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.501688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.508363] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.514756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.525409] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.537191] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.543573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.550229] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.556624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.567257] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 72.287365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.296152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.317393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.324689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.332861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.076910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.113949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.167942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.201102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.457550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.493921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.510295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.525550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.547310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.561299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.672346] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.685113] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.927090] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.951783] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.969471] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.981688] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.017504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.023992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.033338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.059065] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.068671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.077769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.125134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.131632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.140624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.191372] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.197623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.210502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.448735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.458990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.467349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.484975] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.495882] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.502086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.509841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.527986] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.534176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.552479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.569082] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.578068] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.585351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.599283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.716546] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.876456] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.956569] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.974978] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.988573] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.072864] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/29 20:28:24 executing program 7: 2018/04/29 20:28:24 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) 2018/04/29 20:28:24 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffff7f}}}, 0xb8}, 0x1}, 0x0) 2018/04/29 20:28:24 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000010c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) 2018/04/29 20:28:24 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000009e80)=[{{&(0x7f0000001940)=@pptp={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x80, &(0x7f0000002b80), 0x0, &(0x7f0000002e00)}}, {{0x0, 0x0, &(0x7f0000009c00), 0x0, &(0x7f0000009c40)=[{0xc, 0x1, 0xbbd0}], 0xc}}], 0x2, 0x0) 2018/04/29 20:28:24 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000580)={0x1, {&(0x7f00000001c0)=""/219, 0x34c, &(0x7f0000000480)=""/98, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2018/04/29 20:28:24 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000080)='@', 0x1}], 0x1, 0x2b) 2018/04/29 20:28:24 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)=@l2={0x1f}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000580)=[{0x10, 0x1, 0x400}], 0x10}}], 0x1, 0x0) [ 80.879628] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 2018/04/29 20:28:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x400000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7f, 0x81}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r2, 0xffffffffffffff33}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20020003, &(0x7f0000000b00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg(r0, &(0x7f0000000980)={&(0x7f0000000200)=@l2={0x1f}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="ec62", 0x2}], 0x1, &(0x7f0000000bc0)=ANY=[]}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0xffffffffffffffb5) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x400002, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000380)={0x0, 0x5, 0x80000001, &(0x7f0000000340)=0x7ff}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xfffffff7fffff000, 0x4) sendto$inet(r0, &(0x7f0000000140)='a', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/29 20:28:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/04/29 20:28:25 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0), 0x4) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/04/29 20:28:25 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f000035b000), 0x0, 0x0, &(0x7f00005d6000)={0xa, 0x4e20}, 0x1c) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f00000004c0), 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/77, 0x4d}}, {{&(0x7f0000000680)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000000)=""/79, 0x4f}}], 0x2, 0x2, &(0x7f0000000c80)={0x0, r2+30000000}) 2018/04/29 20:28:25 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x5, 0x70, 0x5, 0x28af, 0x0, 0x0, 0x0, 0x40, 0x4000, 0x9, 0x2, 0x401, 0x4, 0xffffffffffffffff, 0x875, 0x0, 0x10000, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8b1, 0xfffffffffffffffd, 0x1, 0x0, 0xd6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x4000, 0x0) 2018/04/29 20:28:25 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000080)) 2018/04/29 20:28:25 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xffffffffffffffe6, 0x20008045, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/29 20:28:25 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 81.498043] hrtimer: interrupt took 36091 ns 2018/04/29 20:28:25 executing program 6: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'team_slave_0\x00', 0x3}, 0x18) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001000), 0x8c, 0x400000000000001, &(0x7f0000191000), &(0x7f0000000000), 0x0) [ 81.522930] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 2018/04/29 20:28:25 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip_tables_targets\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000240)={0x1c00000000000, 0x7fff, 0x0, 0x100, [], [], [], 0x7f, 0xb9, 0x7, 0x4, "2e83418b222a8e2fef6d8c40b6e4bf1e"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000500)=0x78) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x464, 0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x121002, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200000, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="000060011ac8bca5869bf0bff6af55250e68d237b139adfb4e861a1ca34422f8ead4ecb999db3fcbb16d18bd4cce082314c045d65c272b4e6ae021731cf596becac408e69eca93435c60a143e56eeb770cfbb34dee6b85cc7a058e075363bcdae6e1236bad1860b64e6a3826db0fa1c8483ec18a6501a34e34592b168185c058aedf2e267067ec8f7757ddd7cb9c767c23af8cd8cf36f17d625587d1f5c9a1284c6fb734d97bac104078518cc32ebc0bc3d9bf4a8890987193a16361978b4e51f3", @ANYRES16=r3, @ANYBLOB="200026bd7000fddbdf250200000008000300330000000800040003000000"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) 2018/04/29 20:28:25 executing program 7: r0 = perf_event_open(&(0x7f0000ff3f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, @perf_bp, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xfcb413426692af5f, 0x80005, 0x3f, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xd23, 0x0, 0x8, 0x1, 0x0, 0x101, 0x1, 0x2, 0x58, 0x8, 0x7f, 0x80, 0x9, 0x80, 0x3ff, 0x9, 0x0, 0x7fff, 0x0, 0x68be, 0x6, 0x7fffffff, 0x20, 0x25b, 0x8, 0x8, 0x6, 0x6, 0x8, 0x1, 0x20, 0x52c2, 0x8, 0x5, 0x590, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x10, 0x101, 0x0, 0x7, 0xffff, 0x8, 0x7fff}, r2, 0x8, r0, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x6) ioctl$KDDISABIO(r1, 0x4b37) 2018/04/29 20:28:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1c, &(0x7f0000000000), &(0x7f0000000140)=0x4) write(r0, &(0x7f0000000080)="da9e1c2ed0ba4c9bc9ecd8e40f7f23e9ca3fc986df8a28ae117a08c6fc02d058635d4968067d23c0e8d3b8ed46e078596bf0bd19784a0dd9b511be9771ccfb25ce75fde8f4955e3edfb99527f05fea8d331960164b2864e43581d068634d205ed9cb964d4474c868c760fd24fc407c8bd84b0e75880216d444c16ff1660bc03f8c04dc9e92", 0x85) write$binfmt_misc(r0, &(0x7f00000004c0)={'syz1'}, 0x4) [ 81.642538] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 3, id = 0 2018/04/29 20:28:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @msi}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x100000001, 0x3}) 2018/04/29 20:28:26 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_emit_ethernet(0xfffffffffffffd10, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x600}}}, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f00000000c0)={"62726964676530ff000000000000000e"}) 2018/04/29 20:28:26 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:26 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000040)=0x2, 0xffffffffffffff29) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000bc0)={&(0x7f0000000380)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000ac0)=""/207, 0xcf}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}) 2018/04/29 20:28:26 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00006d6000)='/dev/vcs\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000037bff4)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xb4, "59ef3e4646dec74cd832a41c347287fd4408e9dbef0e5f2b48511ab295cb0e37c9bc95747762199be59be51849efd15049957914e8e9483c795cbee1d231b580015b3d5befcafe979ae180b06ade1ce658f519d80abc692b5d5ad98bbc92ec1a46cc4be89695dd58b0e51f6e564801b6d13795a6e77162be8772efa638f6d596cd833e8c8fa637aaaaf2129254f6c9d6490376eef5a6162d5ade8630e019772ed260a2caf700bd7f8d8b273e86dedadd21bfa0ca"}, &(0x7f0000000400)=0xbc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, [0x100000000, 0xfffffffffffff096, 0x284d, 0xda, 0x7, 0x5822, 0x7, 0x10000, 0x81, 0x1a, 0x4, 0x2, 0x8, 0x3ff, 0x8]}, &(0x7f0000000540)=0x100) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="ef466510da3ba8e36f47b169f8f70495356490a668fb126ea3f0bd0dffc2b1cf394bc2b9215bb4aca668dddeffc2092ad187b4b88a086676830c75915bd6fcd20dc8a8d832ab8c38a58814494504cc34bfa51e5f1119062caf16308167ad32ff767fd4eaf4061d6a538f307dbc9ada5e9866536c98e12a0e3487960f1f1b1a95ebeabe9e0db97436a3549de1695bc55b3abcb63bb01c79584a324e2b785edf759a5435e676cb02a4f949c5b95c4eb361bd64b900052c4ea6eb757896f7b6ffe0c188c55413a477ebed7325dba01baf0fef288ba7e0151f284314872b8d59b0340acb67", 0xe3}, {&(0x7f0000000240)="de4e667cd40182e5a5366ca539d0f658316b9c5e2c8d58a3085b8acefe2d6aef18e48cc3708eae64d620f9d4cd75941cf980484bd9bbd0aead623b42ec2f647acc5c3708853935eaf35ab0082384cbcd077039be70d95e2213e473b21f17aa5ca89a7c01f72f2cf4af9f4f6e62685e086b8ae5176fc06b6391e667620126afe959ee1211c14484", 0x87}], 0x2, &(0x7f0000000580)=[@sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff9, 0x2, 0x20c, 0xfffffffffffffffa, 0x3, 0x1, 0x3f4c, 0x8, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x5, 0x200, 0x1, 0x3f, 0x0, 0x3, 0x3f, r3}}], 0x60}, 0x8800) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000944ff7)='/dev/vcs\x00', 0x1, 0x0) write$fuse(r4, &(0x7f0000000040)={0x30, 0x0, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/04/29 20:28:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x200100) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r1, 0xc, 0x1}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}], 0x20) 2018/04/29 20:28:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2}}) 2018/04/29 20:28:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0xa86, 0x4}, &(0x7f0000000800)=0xfffffffffffffef7) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}}, 0x84) sendmmsg$alg(r2, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x1e}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) userfaultfd(0x80800) sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x15}}, 0x14}, 0x1}, 0x0) r3 = socket(0x18, 0x800000000003, 0xfffffffeffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x73, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x584}}, 0x2, 0xff, 0xfffffffffffffffe, 0x8a99}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r4, 0x4, 0x3, 0x36297ac8}, &(0x7f00000002c0)=0x10) getpeername(r0, &(0x7f0000000080)=@pptp={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0xfffffffffffffdd3) socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet(r3, 0x0, &(0x7f0000000680), 0x80800) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xa5}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x6, 0xfffffffffffffffa, 0xff, 0x9, 0x0, r5, 0x8001}, 0x2c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000004c0)=0x4) bind(r2, &(0x7f0000000780)=@llc={0x1a, 0x313, 0x100000000, 0x0, 0x6, 0x5, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) [ 82.466799] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 2018/04/29 20:28:26 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x3, 0xac]) perf_event_open(&(0x7f000000a000)={0x6, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/29 20:28:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x3bd, 0x3e6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x101000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e0000022bbd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="05f20179300500000031059167"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) getitimer(0x2, &(0x7f0000000040)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x18, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x88, 0x1f, 0x7fff, 0x4}, 0x6) 2018/04/29 20:28:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1f, 0x4) setsockopt$inet6_int(r0, 0x29, 0x80000001b, &(0x7f0000000100), 0x4) write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x5, 0x10001, 0x0, 0x3, 0x3, 0x5, 0x376, 0x38, 0xe5, 0x5, 0x7ff, 0x20, 0x1, 0xfffffffffffffffc, 0x80000000, 0xfffffffffffffff7}, [{0x7, 0x100000000, 0x8, 0x7fffffff, 0x6, 0x40, 0x4, 0x6}], "e4833c5eaa82a56b811966681b2b25c88cae2ce632fd1279b0159d565ccd2bb92fc5c90d201a0360e29335a5ef51d549f13da94dc0d531e356ddbb3465774d35d3d73e1a7b", [[], [], [], [], []]}, 0x59d) 2018/04/29 20:28:26 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:26 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) sendto$inet(r0, &(0x7f0000168f26), 0x0, 0x0, &(0x7f00008d2000)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) iopl(0x41d) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/04/29 20:28:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x42) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="92ece15b427367844c97570439eb0253", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000004280)}, 0x0) [ 82.713840] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 2018/04/29 20:28:26 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)="282bfc706491656d282c776c616e312900") 2018/04/29 20:28:26 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44033, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) fstat(r0, &(0x7f00000000c0)) rt_sigaction(0x40, &(0x7f0000000000)={0x3, {0x80}, 0x48000005, 0xe329}, 0x0, 0x8, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000, 0xfffffffffffffffc}, 0x20) 2018/04/29 20:28:26 executing program 4: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x1870, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x7, 0x0, &(0x7f0000000140), &(0x7f0000000080), 0x0) 2018/04/29 20:28:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000276000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x28042, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x4, 0x0, 0x3, 0x8, "709bb4e987da49434849a177b16db80496edb38069a9de73774d3f84c49a9730a9eeb2669357e1596af659c4", 0x7}) fallocate(r1, 0x0, 0x0, 0x73e0) sendfile(r1, r1, &(0x7f0000000040), 0x7f) 2018/04/29 20:28:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x37, &(0x7f0000000080)=""/30, &(0x7f0000000000)=0x1e) 2018/04/29 20:28:26 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:26 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x6, r1, 0x1, 0xfffffffffffffffc, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendto$inet6(r0, &(0x7f0000000240)="0401000000c000ddb8460900ffb25b4202938207d9fb3780398d5375c5f73f939029298d7535352cd5a1f575903376b15cddc7d0c6a722a59a7a033b970720a42f2a11b404e1b50000000000000000f55d4626a880be8bc3cfaeba524830be0ea8635534", 0x64, 0x0, &(0x7f0000000200)={0xa, 0x200000800, 0x20000000005, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x458082, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000002c0)=""/192) 2018/04/29 20:28:26 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xe, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180000000000000000000000000000001800000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000080)=""/4096}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001100)='/dev/zero\x00', 0x40, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000001140)={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x4e24, @rand_addr=0x1}, 'ip6tnl0\x00'}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001080)='/dev/vga_arbiter\x00', 0x101000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x1e0, 0xf0, 0x1e0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f00000010c0), {[{{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffffff, 0xffffffff], 'tunl0\x00', 'sit0\x00', {}, {}, 0x0, 0x3, 0x3, 0x2}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, [0xff000000, 0xffffffff, 0xff000000], [0xff, 0xffffffff, 0x0, 0xff000000], 'bcsh0\x00', 'bridge0\x00', {}, {}, 0x2c, 0x7, 0x4, 0x10}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x1, 0x6, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/04/29 20:28:26 executing program 2: capset(&(0x7f0000000000)={0x19980332}, &(0x7f0000000080)={0x0, 0x10, 0x0, 0xffffffffffffffff}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x19, 0x0, 0x0) uname(&(0x7f00000000c0)=""/4096) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(r1, 0x0, 0x0) 2018/04/29 20:28:26 executing program 6: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xff, 0x6, 0x3, 0x101, 0x0, 0x100000000, 0x8, 0x1, 0x0, 0x7, 0x6, 0x5c, 0x100000000, 0xc7930e, 0x6fc, 0xb54b, 0x7, 0x9, 0x99d, 0x400, 0x2800000, 0x8, 0x9, 0x28722061, 0xa71e, 0x8, 0x1ff, 0x7fff, 0x7, 0x9, 0x1ff, 0xd456, 0x3, 0x5, 0x5, 0x7fff, 0x0, 0x7f, 0x5, @perf_config_ext={0x0, 0x7}, 0x100, 0x1, 0x8, 0x7, 0x9702, 0x98, 0xffff}, 0x0, 0x6, 0xffffffffffffffff, 0x9) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) syz_read_part_table(0x0, 0x0, &(0x7f0000001500)) fstat(r0, &(0x7f00000000c0)) 2018/04/29 20:28:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220001000000000000000000050000000a001100f49cd3d08e93cb4f56c591945ff8adf3fc1de7714f65820e37766f625738cb2ab6ef0e4a8747ae", @ANYRES32=0x0], 0x1c}, 0x1}, 0x0) read(r0, &(0x7f0000000080)=""/74, 0x4a) 2018/04/29 20:28:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080), 0x58, 0x7) socket$l2tp(0x18, 0x1, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x98e}]}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xb1, 0x8000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0xfffffffffffffff8, 0x81, 0x8, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r3, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES16=r1, @ANYBLOB="900c042000000200", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="2b0478c51cd3d147282ed307a7093406d4f52e5d3c25a0e2afc0411ce40fcee0a22699f1934a356d00dcd075724f1aa1cfb91d748b3462954283ffeb9812ea870555ac1c796d55fdf7c3e4ba8e16e16842871ad63d545cae93f4ed7b954c9e938a6924457bed87fb8b98a2e71f8d8d3a3ef6a236a1e5b7f52ed89ae854113f7330e2139da0b71cef32af62c36abaceafedce3390eb10d1f7e523"], @ANYBLOB="7c001f000600ffff00000080f7ffffff147ca629db65c07f65e909cdf7c14943fd7a5692998aaf9247bc26a0f63160498466311fa3a351a1e091e466715fae5a16c37f73495a0c492207b16776e872006cb1902875442f050c7dd0827e4eca5307ec9d6c15e4f6d6fbdec52db98edcc7b61600855b3a846e922213ef6af5aebce391d20743f209aeec835cf6b2c115dbba1f7c90c728a9503facdc8cbc57342f58ad0f56fbd1c6f954481734797e18d50b60a5d55237e3b7f5d24f0bb41d5afe5c"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/29 20:28:26 executing program 0: timer_create(0xb, &(0x7f00009cefa8)={0x0, 0x12}, &(0x7f0000044000)=0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2000, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000000)) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000200)={@rand_addr=0x1}, 0x8) fcntl$setflags(r1, 0x2, 0x1) timer_gettime(0x0, &(0x7f000032c000)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) timer_create(0x7, &(0x7f0000000080)={0x0, 0x9, 0x0, @tid=r4}, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x9, 0x80) [ 83.023092] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) [ 83.026527] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 83.075039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.127388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.138601] loop_reread_partitions: partition scan of loop6 () failed (rc=-13) [ 83.175556] loop_reread_partitions: partition scan of loop6 () failed (rc=-13) 2018/04/29 20:28:27 executing program 7: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x80) 2018/04/29 20:28:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="a609d06b429bc6dc5c5a394633bf22d6dfcca40e57dd419e4f5fa636344732ac80cd2c5dc4d51ddb26341ab4a8eb9797e2ed87613ea1eb6d4c7c25a9df2280438f614f9eb1ea51375b52f3cd27739f16203956afdeb66a519d8790b09ed94095ff024369821f6acdc35ca271ab528173542c1e8ae80192e3f92522138a8249636b83fffad5ec6a736ac346beae3b5afa67c111567261b6c11eadb90ed7437672e616bddea2875fc069f4c14c158bb7572da9d2341834023a52f0386971aeaa004f71cdf333bd239babf0e80110ca62cf5c2a15ac1d73dcf88fba01c807a084ec8ca9a09060955e4130f472fb5324cfb296b49cf881d8482448") sendto$inet6(r0, &(0x7f0000000000)="0401000000e3cd682c46090000b24066514d670600c0e180283db150877eac3587ca92a0cc14ab6650782299e6234d243eb9576f4ddb9079", 0x38, 0x0, &(0x7f0000000200)={0xa, 0x800, 0x1, @dev={0xfe, 0x80}}, 0x1c) dup3(r0, r0, 0x80000) 2018/04/29 20:28:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='systemtrusted\x00', 0xfffffffffffffffd) keyctl$revoke(0x3, r1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x0, 0x201, 0xfffffffffffffffe, 0x6}, 0x10) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}) 2018/04/29 20:28:27 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:27 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:27 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:27 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0xfffffffffffffffe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2018/04/29 20:28:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000380)=0x10001, &(0x7f00000003c0)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x382a, &(0x7f0000000000)=""/251, 0x41100, 0x0, [], r1}, 0x48) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000280)={0x2, r2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x84, &(0x7f0000000340)="4e77582ae86bc806202d7ead41a4", &(0x7f0000000400)=""/132}, 0x28) [ 83.237102] loop_reread_partitions: partition scan of loop6 () failed (rc=-13) [ 83.276577] loop_reread_partitions: partition scan of loop6 () failed (rc=-13) [ 83.337616] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 83.340962] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 83.345448] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 2018/04/29 20:28:27 executing program 7: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000e6cff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) close(r0) 2018/04/29 20:28:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="fb"], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x4, 0x0, 0x3ee, 0x0, 0x0, 0x0, 0x7fff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/29 20:28:27 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:27 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000100)}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000006c0)=""/246) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x601, 0x70bd2b, 0x25dfdbff, {0xd}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000001000)=""/174) 2018/04/29 20:28:27 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800000001, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14) write$fuse(r0, &(0x7f00000000c0)={0x28, 0x4, 0x0, @fuse_notify_delete_out}, 0x28) 2018/04/29 20:28:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x2f8, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/29 20:28:27 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:27 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 83.564471] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 83.605502] *** Guest State *** [ 83.609012] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 83.617926] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 83.626825] CR3 = 0x0000000000000000 [ 83.630588] RSP = 0x0000000000000f80 RIP = 0x0000000000000001 [ 83.636617] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 83.642630] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 2018/04/29 20:28:27 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') ioctl(r0, 0x1, &(0x7f0000000040)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@dev, @in6=@loopback}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x400) [ 83.649344] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 83.657353] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 83.665373] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 83.673383] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 83.681433] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 83.689440] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 83.697459] GDTR: limit=0x000007ff, base=0x0000000000001000 2018/04/29 20:28:27 executing program 3: getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000100), &(0x7f0000000180)=0x4) faccessat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x20, 0x100) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0xc0000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="c48a9e9be8575a1a120e98fbd9cc939c31feb5e18b153a59c9b056fbdedee1094da5eaf040a070930fb34425ef0ecbc0e815c5575b88243da0960a1c7aa5d44cc9b63279077a936bfc319f8f1b02e6eada0bd5354dbb365ad0414536b32713006c79658c066a8821cded496021129c3bea7a0668e1c40da01f147d0eb7bd87fdcc8e69a15526daff7292752f9cd1ddbe05ef2c769c1b7cf73cf72641c0eb6d87320ec54080fec692876bbc5bb39ec2", 0xaa, 0x8}], 0x0, &(0x7f0000000300)=ANY=[@ANYRES32]) socket$inet6_dccp(0xa, 0x6, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0)) [ 83.705476] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 83.713501] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 83.721514] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 83.729525] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 83.735971] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 83.743513] Interruptibility = 00000001 ActivityState = 00000000 [ 83.749790] *** Host State *** [ 83.753039] RIP = 0xffffffff811f7279 RSP = 0xffff8801a968f390 [ 83.759053] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 83.765496] FSBase=00007f8914413700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 83.773327] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 83.779250] CR0=0000000080050033 CR3=00000001b9bab000 CR4=00000000001426e0 [ 83.786304] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 83.792509] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 83.792992] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 2018/04/29 20:28:27 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x4080c1, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1000, &(0x7f0000000000), 0x1, r2, 0xe}) [ 83.805392] *** Control State *** [ 83.808871] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 83.815579] EntryControls=0000d1ff ExitControls=0023efff [ 83.821057] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 83.828039] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 83.834730] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 83.841332] reason=80000021 qualification=0000000000000003 [ 83.847660] gfs2: invalid mount option: ÿÿÿÿ [ 83.847686] gfs2: can't parse mount arguments 2018/04/29 20:28:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x4, 0x30c}, 'port0\x00', 0x0, 0x50008, 0x1ff, 0xd785, 0xa, 0x6, 0x4, 0x0, 0x7, 0x7fff}) [ 83.852096] IDTVectoring: info=00000000 errcode=00000000 [ 83.852103] TSC Offset = 0xffffffd0277e2424 [ 83.852112] EPT pointer = 0x00000001b9a3901e 2018/04/29 20:28:27 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) 2018/04/29 20:28:27 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x101000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x1c2, 0x1, 0x7f, 0x8000, 0x7, 0x7, 0x8, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x80, 0x30}, 0xc) open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x127f, 0x0) [ 83.904814] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 2018/04/29 20:28:27 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:27 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 84.104919] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 84.106075] gfs2: invalid mount option: ÿÿÿÿ [ 84.115785] gfs2: can't parse mount arguments 2018/04/29 20:28:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000b7aff7)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x121000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000040)={0x10001, 0x14, [0x3f, 0x1, 0x0, 0x1, 0x8000]}) flock(r0, 0x8) 2018/04/29 20:28:28 executing program 2: rt_sigsuspend(&(0x7f0000000000)={0x9}, 0x8) r0 = dup(0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08032bbd7020040000000d0000000c0002000800c2a1280d25d9b90086c73cff0dd1d26c000500ffffffff080005006a1186510000000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x80) r2 = socket$inet(0x2, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='osx.ID4ETIMER\x00'], &(0x7f0000000140)=""/4, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 2018/04/29 20:28:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="d20000f6d3d7e79edc7cdc000000024d564b10ee31a400"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0x10000000}) 2018/04/29 20:28:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000280)="17", 0x1, 0x0) write(r0, &(0x7f00000084c0)='9', 0x1) pipe2(&(0x7f0000000100), 0x80000) read(r1, &(0x7f0000000340)=""/135, 0x87) 2018/04/29 20:28:28 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) 2018/04/29 20:28:28 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:28 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x100) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)=0x0) getresuid(&(0x7f00000014c0), &(0x7f0000001500)=0x0, &(0x7f0000001540)) fstat(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001640)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000001740)=0xe8) r9 = memfd_create(&(0x7f0000002080)='nls', 0x2) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f00000020c0)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x13}, r7}, 0xc) getresgid(&(0x7f0000001780), &(0x7f00000017c0)=0x0, &(0x7f0000001800)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001880)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000002180)=0xfe48) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/ashmem\x00', 0x20000, 0x0) r15 = getpgrp(0xffffffffffffffff) r16 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, &(0x7f0000001b00)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001b40)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0}, &(0x7f0000001bc0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c00)={0x0, 0x0, 0x0}, &(0x7f0000001c40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c80)={0x0}, &(0x7f0000001cc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001d00)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000001e00)=0xe8) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)=0x0) sendmsg$netlink(r1, &(0x7f0000002040)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000200)={0x1268, 0x12, 0x0, 0x70bd29, 0x25dfdbfc, "", [@generic="547a4fcb6b11319288866cf6cb9dfc4a296830fd4996f58733d0d678ce8ccf4ca43086675494c18734c00ffceb3592dd25742361d3c7ce76b1f41a1dde01927bf7dfbf47f7f3b101612a585613dae09dc1325c4e0a482ac01e803fed7a2c1b3da20d918e1e36caf9e550ddda2ba81086a750bfab4c5775d991f7c87c9884a45ee6e5edc6a94120888afaa28c478af15c19737d50087628a0ae0f52826eb43b70c2b746a169ecd6732a69c35da5246cbf10538fe4a1e559ee1c3c6123a502", @nested={0x1198, 0x4f, [@generic="7505702d183ad5e88f8d588d7af89453cc391371f9a99a4fb06d96f1dcb6f22ffe23294d5832dc31429bf32c7f111189e86922f0f417412270cae485bae9e28ab57bc90ced0bc231cf9a4816b1acac09d9706c9df9c9d9e3da5a3312d3f16660f37f79c9909cb7e549a6fc24b127c2468527acb47d5bdaad6980420ce7aec93ecf1024055575cccda20ec60afb2c33efc3037eb424c714d16f62028e8723547d311f98c40ee849df1f90107202060d1c5a25cfd08081e49601c455c173a2dc14a6df09001e7ec2fda8a2693720405cfa6efddf608dd3bdeee37a171853a3eff66f4bb78befbdfbd6bf3625ce91cfc7b5a7aa33ddbdcd", @generic="675009e0f7acb8c319505cdd37d6485e5cf607fd77c31e7988fe4ba55346bdcfd3906450504dd0556e264d862076901a9d50731377a65e9e5584a0476060821b091e38982c49bd618dd2ac1fc9f9eaf8", @generic, @typed={0x14, 0x48, @ipv6=@loopback={0x0, 0x1}}, @generic="794816bfebb6fc52", @generic="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", @typed={0x14, 0x2b, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x14, 0x1c, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0x8, 0x2, @pid=r2}]}]}, 0x1268}], 0x1, &(0x7f0000001f00)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r3]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, 0x0, r8, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r14]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0x140, 0x40}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB='nlXs=macromanian,nls=none,\x00']) 2018/04/29 20:28:28 executing program 5: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 84.297074] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 84.311952] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 84.354257] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 2018/04/29 20:28:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/87, 0x57) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000002c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x780}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e22, 0x846, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}}, 0x84) dup3(r0, r1, 0x0) [ 84.406824] hfsplus: unable to parse mount options [ 84.453778] FAT-fs (loop3): Directory bread(block 112) failed [ 84.523239] FAT-fs (loop3): Directory bread(block 112) failed [ 84.577108] FAT-fs (loop3): Directory bread(block 112) failed [ 84.585404] attempt to access beyond end of device [ 84.590496] loop3: rw=2049, want=246, limit=112 [ 84.596638] attempt to access beyond end of device [ 84.601740] loop3: rw=0, want=246, limit=112 [ 84.607055] attempt to access beyond end of device [ 84.612073] loop3: rw=0, want=246, limit=112 [ 84.622400] attempt to access beyond end of device [ 84.627526] loop3: rw=0, want=246, limit=112 [ 84.633912] attempt to access beyond end of device [ 84.639111] loop3: rw=0, want=246, limit=112 2018/04/29 20:28:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x11) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x0, 0x1}, 0x2, 0x1, 0x3, 0x2, 0x3, 0x6, 0x80000001}, &(0x7f00000001c0)=0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000021c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) connect$ipx(r3, &(0x7f0000000100)={0x4, 0xb, 0x7, "6ebc84dad9d6", 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1}, 0x0) 2018/04/29 20:28:29 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:29 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:29 executing program 4: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) 2018/04/29 20:28:29 executing program 7: r0 = socket$inet(0x10, 0x80002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x7, {0x2, 0x4e21}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0xd2d6, 0x7fff, 0x7fffffff, 0x9, &(0x7f0000000140)='bpq0\x00', 0xa9db, 0xab, 0x2}) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1f0000001800030007fffd944fa283bc8020000000240005031d856408000f", 0x1f}], 0x1}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000001, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/29 20:28:29 executing program 2: mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='ntfs\x00', 0x1000002000, &(0x7f0000ad5000)) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="3d761a5e028a8ef0375fca80678f6179120fd31fadaf3a32dc101ea3c3660c5a15e98666e2cb0dc77a81076cd9c6d4025cc86c8a4455e6b8d667e9a257b7a416bc71c3e10ebef87a8810", 0x4a, 0x1000}, {&(0x7f00000001c0)="15601eb3928fd7d03a81ec8e8a31357e0d576210b40bb04bb1d92538a24dd92f6507f5e9285adc1f2863b82e0492832c6c1b51b4766c07b0b194a839a0e21fce8a440863ccf8a685e953bc570cfb8c91a804f930d5e2382b7eebe3eaeca20760fe6c424f38b6d5682d00cdb30e7904734356195270cf931205e58211cade05", 0x7f, 0x4}, {&(0x7f0000000240)="0f932d0b386d83795fb45f75cebb5d235d8d16a89d8ed69e595f89c83803f04d5f1ad3f787bc2a9d5a76501e4fc47524446baf49012ac8f6356ff77bcf76067e01bc558150f4ecf66dd5917b15beb83ea8e8f32bc4b8f32697", 0x59, 0x1}], 0x0, &(0x7f0000000340)={[{@errors_continue='errors=continue', 0x2c}, {@usrjquota_file='usrjquota=syz', 0x2c}, {@noattrs='noattrs', 0x2c}, {@expose_privroot='expose_privroot', 0x2c}, {@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@barrier_none='barrier=none', 0x2c}, {@errors_continue='errors=continue', 0x2c}]}) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x1000000440, &(0x7f0000002140)="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") umount2(&(0x7f00000010c0)='./file0\x00', 0x10000000b) 2018/04/29 20:28:29 executing program 3: modify_ldt$write(0x1, &(0x7f0000000080), 0x10) clone(0x0, &(0x7f0000000180)="a9228542c62809836498f929458e2bc96519b6f980a1a0673cfbf13afcff540e83502314bfe37eb843acafc3a8364326588d8f10cf52979e12501c8a768855f6d4f92ea37b3298", &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000002c0)="0bc38cf7f3c7c6062d818adb6b6d4897ad4bd7a10d2b3a28fc7029540a39289d88a98ba70cc1c0413fd46c84c8c1c4d1591e88476f554b1058060b114b69fabaa5afce1f35c147e2e28e6b084255892d6437803a2650728673c2168dbb852bc027b1f8105fbaac542280045eb3c61127") 2018/04/29 20:28:29 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x3, 0x0, 0x5) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r0, r3) [ 85.384128] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 85.406097] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) 2018/04/29 20:28:29 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:29 executing program 7: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x400c003, 0x0, 0x0, 0x8, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400, 0x9}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000d40)={{0x470, 0x1000}, {0x7fffffff, 0x750d}, 0xf0, 0x6, 0xfd1}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x490, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, &(0x7f0000000800), {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 0x4e22, 0x4e23, 0x4e24, 0x4e21, 0x100, 0x3, 0x8, 0x0, 0x80000001}}}, {{@uncond, 0x0, 0x248, 0x270, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @common=@inet=@policy={0x158, 'policy\x00', 0x0, {[{@ipv6=@mcast2={0xff, 0x2, [], 0x1}, [0xff000000, 0xff000000, 0x0, 0xffffffff], @ipv4=@broadcast=0xffffffff, [0xff, 0xff0000ff, 0xffffffff, 0xffffff00], 0x4d2, 0x34ff, 0x3f, 0x1, 0x1, 0x1f}, {@ipv6, [0xff, 0xffffffff, 0xffffffff], @ipv6=@remote={0xfe, 0x80, [], 0xbb}, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d5, 0x3507, 0x29, 0x0, 0xa, 0x11}, {@ipv4=@rand_addr=0xfffffffffffffffc, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], @ipv4=@multicast1=0xe0000001, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d5, 0x3503, 0x7f, 0x0, 0x2, 0xe}, {@ipv6=@ipv4={[], [0xff, 0xff]}, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], @ipv6=@mcast1={0xff, 0x1, [], 0x1}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 0x4d6, 0x3505, 0x62, 0x1, 0x14, 0xf}], 0x4}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x401, 0x81, 0xfff}, {0x1334, 0x400, 0x100000001}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4f0) chmod(&(0x7f0000000100)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) r2 = syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x81, 0x4000) readlinkat(r2, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=""/244, 0xf4) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x400000) sendmsg$alg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="0e8b0757a395883d019c47d45f5ea50ad9ae6081a83009300f1744cc7a49bae319", 0x21}, {&(0x7f0000000240)="82ac5181fce5dc821043d76a8cdf944658a11a2099f5bdc415d8fe4f17fc84aba687eea52a4667663db6c0508a1ba5c7d2e897ff0ad73dea6a7daad282f118346479988ac60c46a81849433e0dd3884af8a0efb2c98574c5b6bf6b704ee46bc0b8e71d5c53ad1133524fdd84039518695c4f8eff2a206c122170d15064eca56ebeff10f394c971a880f30f88a373851661fced6475615ac3eb5f44334972841a4d542a47607a1b87b8d2c90223d44b4affcc4912fb9ba27a5ded5d21bc5ed13ce8ec446fd0f224d364eba1454396183ebd0415c58d0c7524388109f3c860481bd56b367664c7dc58c19f7cd8", 0xec}, {&(0x7f0000000340)="e909e350b288b6a2180a7aaec34e7190d0d8ca1bb855883bb36cbdfb6fd5244a9bd5b99cb239adac042f95c0070b1e1e13635c883b66d0d79282b23ee367082f30ec928cadad26877b1796823df2c5900ef0f122e14c860bdbefa90cf4f0aa23e803b8dc159b43b69235888388cdb386ae75929351763c2081ce3ff751a836b39ea01a4971751a3f7a397c39309ff856521503076d7b21976f5cc796ac2d5baaeb084ddba94296daf2db10574013aa24de7f0179673a5038e83d963a493737ae6ffe75bd3e0c7392238b510c09a00168057082bc3bca3b", 0xd7}], 0x3, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3}, @iv={0x90, 0x117, 0x2, 0x78, "1904ed92a9e207061f3ee5b19ba1d6e5a2d72aaf6f9e00c6a7281fd876a7ef9c079eca9fd428e86e646cf84b56cf5a28c5b289f878d90a907509a08cc36ddfcf8697050389257f3cea5b4461118c4f71e474176b14157507c654e99b4404ec0243410475943688902814ebafc2cf4f76f42847cb73f19099"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0xa, "00106ab00a5e11801f39"}, @iv={0x78, 0x117, 0x2, 0x5f, "ee15ac47cd0616acb4eb6cfae497a63e4669a5bb5f442808ee9bbc81a6b7f03c89babb9e1e25fd9a0777535f81d9da71682e1e73df4f82e666704edc830b2554964ee7326ed720f12b30c0c5fe9efc01aa971ba36f28e5921a92b985c676db"}], 0x1a0}, 0x88d0) 2018/04/29 20:28:29 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) [ 85.456322] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 85.456322] 2018/04/29 20:28:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000a98000)={0x80000000000edf2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000b1000/0x18000)=nil, &(0x7f000052c000)=[@text64={0x40, &(0x7f0000159000)="c4e379150e00470fc71b0f23d9b9360900000f32b9530b0000b80f000000ba000000000f30f20f35c421f81748f9460f2395c42251afeb4fdbf4", 0x3a}], 0x1, 0x0, &(0x7f00006edfe0), 0x0) getsockname(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xff, 0x0, 0x7}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r4, 0x0, 0xffffffffffff0dad}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/29 20:28:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20040, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x91f, 0x10000, 0xc00000, 0xf37f}, 0x10) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x200, &(0x7f0000ffd000/0x1000)=nil, 0x4) [ 85.565381] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) [ 85.581373] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 2018/04/29 20:28:29 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:29 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/113, 0x71) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/29 20:28:29 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b000e0000ffff", 0xa}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:29 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0xfffffffffffffffe) ioctl(r0, 0x80184132, &(0x7f0000000000)="c1549ed01af4cf48075495bc315ac64bb57053b7ae632bf845325b941f8c81006c7fb88cb2852b82ca5a1e15dd88af219c0bda59e4870ad8a41d51a8c80a51e76da91159b186635938850500000000000000f310b1865300000000") 2018/04/29 20:28:29 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x0, 0x0) [ 85.705392] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) [ 85.780114] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 85.827612] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) 2018/04/29 20:28:29 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:29 executing program 1: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f00000000c0)='../file0\x00', 0x1) pivot_root(&(0x7f0000000280)='..', &(0x7f00000002c0)='..') r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) accept4(r0, &(0x7f0000000100)=@generic, &(0x7f0000000080)=0x80, 0x80000) open(&(0x7f0000000000)='../file0\x00', 0x1, 0x144) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 2018/04/29 20:28:29 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:29 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x0, 0x0) 2018/04/29 20:28:29 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x400080, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xffff, 0x80000) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0xfffffffffffffffd) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"64596df17c0e4200", 0x4000000000000401}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x9, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x7, 0x40}, &(0x7f0000000200)=0x8) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f0000000000)=""/16) [ 85.941391] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) [ 85.965805] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 85.992420] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) 2018/04/29 20:28:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x9) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000014d564b00df00000000000000000000"]) 2018/04/29 20:28:30 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:30 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b00", 0x5}], 0x0, 0x0) 2018/04/29 20:28:30 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cefaad1b00", 0x5}], 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/04/29 20:28:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/file0\x00', 0xfffffffffffffffc, 0xaaaaaaaaaaaac54, &(0x7f00000000c0)=[{&(0x7f0000000240)="8000000000040000ae000000d90300006c000000010900000000000000000000002000000020000080400000000000002b5ebe5a0000ffff53ef12406a8cdce8c4ac63f2fc7537bfe2462b1773", 0x4d, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00b0b9badf99d6e64a6c80a7bdb6fd5bb2c51f2918d3df1a8007bce3f529ef996eedd9e9de63676e99ed0c406ad30d25a8e6da0dc8f88ce1a2ac3166b9ce5d77ccfb2c411b48e30f658c5ab96ee85eb36d7bc7003183226fcea91d7f870479cd00"]) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0/file0\x00', r0}, 0x10) 2018/04/29 20:28:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x187, 0x0, 0x3}]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000040)={'team_slave_1\x00', 0x4}) 2018/04/29 20:28:30 executing program 7: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x400c003, 0x0, 0x0, 0x8, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400, 0x9}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000d40)={{0x470, 0x1000}, {0x7fffffff, 0x750d}, 0xf0, 0x6, 0xfd1}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x490, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, &(0x7f0000000800), {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 0x4e22, 0x4e23, 0x4e24, 0x4e21, 0x100, 0x3, 0x8, 0x0, 0x80000001}}}, {{@uncond, 0x0, 0x248, 0x270, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @common=@inet=@policy={0x158, 'policy\x00', 0x0, {[{@ipv6=@mcast2={0xff, 0x2, [], 0x1}, [0xff000000, 0xff000000, 0x0, 0xffffffff], @ipv4=@broadcast=0xffffffff, [0xff, 0xff0000ff, 0xffffffff, 0xffffff00], 0x4d2, 0x34ff, 0x3f, 0x1, 0x1, 0x1f}, {@ipv6, [0xff, 0xffffffff, 0xffffffff], @ipv6=@remote={0xfe, 0x80, [], 0xbb}, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d5, 0x3507, 0x29, 0x0, 0xa, 0x11}, {@ipv4=@rand_addr=0xfffffffffffffffc, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], @ipv4=@multicast1=0xe0000001, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d5, 0x3503, 0x7f, 0x0, 0x2, 0xe}, {@ipv6=@ipv4={[], [0xff, 0xff]}, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], @ipv6=@mcast1={0xff, 0x1, [], 0x1}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 0x4d6, 0x3505, 0x62, 0x1, 0x14, 0xf}], 0x4}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x401, 0x81, 0xfff}, {0x1334, 0x400, 0x100000001}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4f0) chmod(&(0x7f0000000100)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) r2 = syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x81, 0x4000) readlinkat(r2, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=""/244, 0xf4) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x400000) sendmsg$alg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="0e8b0757a395883d019c47d45f5ea50ad9ae6081a83009300f1744cc7a49bae319", 0x21}, {&(0x7f0000000240)="82ac5181fce5dc821043d76a8cdf944658a11a2099f5bdc415d8fe4f17fc84aba687eea52a4667663db6c0508a1ba5c7d2e897ff0ad73dea6a7daad282f118346479988ac60c46a81849433e0dd3884af8a0efb2c98574c5b6bf6b704ee46bc0b8e71d5c53ad1133524fdd84039518695c4f8eff2a206c122170d15064eca56ebeff10f394c971a880f30f88a373851661fced6475615ac3eb5f44334972841a4d542a47607a1b87b8d2c90223d44b4affcc4912fb9ba27a5ded5d21bc5ed13ce8ec446fd0f224d364eba1454396183ebd0415c58d0c7524388109f3c860481bd56b367664c7dc58c19f7cd8", 0xec}, {&(0x7f0000000340)="e909e350b288b6a2180a7aaec34e7190d0d8ca1bb855883bb36cbdfb6fd5244a9bd5b99cb239adac042f95c0070b1e1e13635c883b66d0d79282b23ee367082f30ec928cadad26877b1796823df2c5900ef0f122e14c860bdbefa90cf4f0aa23e803b8dc159b43b69235888388cdb386ae75929351763c2081ce3ff751a836b39ea01a4971751a3f7a397c39309ff856521503076d7b21976f5cc796ac2d5baaeb084ddba94296daf2db10574013aa24de7f0179673a5038e83d963a493737ae6ffe75bd3e0c7392238b510c09a00168057082bc3bca3b", 0xd7}], 0x3, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3}, @iv={0x90, 0x117, 0x2, 0x78, "1904ed92a9e207061f3ee5b19ba1d6e5a2d72aaf6f9e00c6a7281fd876a7ef9c079eca9fd428e86e646cf84b56cf5a28c5b289f878d90a907509a08cc36ddfcf8697050389257f3cea5b4461118c4f71e474176b14157507c654e99b4404ec0243410475943688902814ebafc2cf4f76f42847cb73f19099"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0xa, "00106ab00a5e11801f39"}, @iv={0x78, 0x117, 0x2, 0x5f, "ee15ac47cd0616acb4eb6cfae497a63e4669a5bb5f442808ee9bbc81a6b7f03c89babb9e1e25fd9a0777535f81d9da71682e1e73df4f82e666704edc830b2554964ee7326ed720f12b30c0c5fe9efc01aa971ba36f28e5921a92b985c676db"}], 0x1a0}, 0x88d0) 2018/04/29 20:28:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000014c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x800) write$binfmt_elf32(r2, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x2, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x80, 0x1, 0x2, 0x5, 0x81, 0x781b, 0x80, {0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x8000000, 0x800, 0x101, 0xfb37, 0x9}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e21, 0xf467}}}, &(0x7f0000000440)=0x84) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x0, 0x70bd29, 0x25dfdbff, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xb}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}]}, 0x54}, 0x1}, 0xc001) [ 86.854989] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 86.861547] WARNING: CPU: 0 PID: 7167 at mm/slab_common.c:996 kmalloc_slab+0x56/0x70 [ 86.869430] Kernel panic - not syncing: panic_on_warn set ... [ 86.869430] [ 86.876788] CPU: 0 PID: 7167 Comm: syz-executor5 Not tainted 4.17.0-rc2+ #24 [ 86.883957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.893294] Call Trace: [ 86.895867] dump_stack+0x1b9/0x294 [ 86.899479] ? dump_stack_print_info.cold.2+0x52/0x52 [ 86.904682] ? slab_caches_to_rcu_destroy_workfn+0xc0/0xc0 [ 86.910289] panic+0x22f/0x4de [ 86.913465] ? add_taint.cold.5+0x16/0x16 [ 86.917601] ? __warn.cold.8+0x148/0x1b3 [ 86.921651] ? kmalloc_slab+0x56/0x70 [ 86.925439] __warn.cold.8+0x163/0x1b3 [ 86.929311] ? kmalloc_slab+0x56/0x70 [ 86.933097] report_bug+0x252/0x2d0 [ 86.936713] do_error_trap+0x1de/0x490 [ 86.940587] ? prepare_to_wait+0x194/0x4d0 [ 86.944803] ? math_error+0x420/0x420 [ 86.948591] ? console_unlock+0x1100/0x1100 [ 86.952900] ? remove_wait_queue+0x350/0x350 [ 86.957295] ? __sched_text_start+0x8/0x8 [ 86.961427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 86.966254] do_invalid_op+0x1b/0x20 [ 86.969949] invalid_op+0x14/0x20 [ 86.973399] RIP: 0010:kmalloc_slab+0x56/0x70 [ 86.977790] RSP: 0018:ffff8801af1378d0 EFLAGS: 00010246 [ 86.983135] RAX: 0000000000000000 RBX: 00000000007fffff RCX: ffffc900044a3000 [ 86.990384] RDX: 1ffff1003ad39f64 RSI: 0000000000000000 RDI: 0000000000800000 [ 86.997633] RBP: ffff8801af1378d0 R08: ffff8801b5282680 R09: ffffed003b5c4fb0 [ 87.004884] R10: ffffed003b5c4fb0 R11: ffff8801dae27d87 R12: ffff88018d809004 [ 87.012137] R13: 0000000000000000 R14: ffff8801d69cfb00 R15: 00000000014080c0 [ 87.019405] __kmalloc+0x25/0x760 [ 87.022851] ? __might_sleep+0x95/0x190 [ 87.026823] ? bfs_fill_super+0x45f/0xef0 [ 87.030965] bfs_fill_super+0x45f/0xef0 [ 87.034934] ? vsprintf+0x40/0x40 [ 87.038381] ? set_blocksize+0x2c4/0x350 [ 87.042446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.047969] mount_bdev+0x30c/0x3e0 [ 87.051585] ? bfs_iget+0xb40/0xb40 [ 87.055194] bfs_mount+0x34/0x40 [ 87.058548] mount_fs+0xae/0x328 [ 87.061898] ? mpi_free.cold.1+0x19/0x19 [ 87.065946] vfs_kern_mount.part.34+0xd4/0x4d0 [ 87.070512] ? may_umount+0xb0/0xb0 [ 87.074128] ? _raw_read_unlock+0x22/0x30 [ 87.078258] ? __get_fs_type+0x97/0xc0 [ 87.082136] do_mount+0x564/0x3070 [ 87.085661] ? lock_downgrade+0x8e0/0x8e0 [ 87.089792] ? copy_mount_string+0x40/0x40 [ 87.094012] ? check_same_owner+0x320/0x320 [ 87.098325] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 87.103325] ? __check_object_size+0x95/0x5d9 [ 87.107808] ? __might_sleep+0x95/0x190 [ 87.111769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 87.117308] ? _copy_from_user+0xdf/0x150 [ 87.121440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 87.126961] ? copy_mount_options+0x285/0x380 [ 87.131439] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 87.136958] ksys_mount+0x12d/0x140 [ 87.140571] __x64_sys_mount+0xbe/0x150 [ 87.144529] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 87.149528] do_syscall_64+0x1b1/0x800 [ 87.153401] ? syscall_return_slowpath+0x5c0/0x5c0 [ 87.158313] ? syscall_return_slowpath+0x30f/0x5c0 [ 87.163225] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 87.168575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.173406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.178575] RIP: 0033:0x4583aa [ 87.181748] RSP: 002b:00007f3e9b8bfba8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 87.189437] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000004583aa [ 87.196686] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f3e9b8bfbf0 [ 87.203934] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000020000000 [ 87.211184] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000014 [ 87.218432] R13: 0000000000000001 R14: 00000000006fe240 R15: 0000000000000000 [ 87.226381] Dumping ftrace buffer: [ 87.230035] (ftrace buffer empty) [ 87.233720] Kernel Offset: disabled [ 87.237328] Rebooting in 86400 seconds..