INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. 2018/04/20 18:25:24 fuzzer started 2018/04/20 18:25:24 dialing manager at 10.128.0.26:45741 2018/04/20 18:25:31 kcov=true, comps=false 2018/04/20 18:25:33 executing program 0: r0 = gettid() ioprio_set$pid(0x1000000000002, r0, 0x0) 2018/04/20 18:25:33 executing program 2: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/04/20 18:25:33 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80) 2018/04/20 18:25:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001100)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x20000280, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{}, {}, {0x0, '\x00', 0x2}]}, 0x108) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) 2018/04/20 18:25:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a17000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f00001e0000/0x800000)=nil) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/20 18:25:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='highspeed\x00', 0xa) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000000300)='U', 0x1, 0x0, 0x0, 0x0) 2018/04/20 18:25:33 executing program 6: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x0, 0x2000000400000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x54) 2018/04/20 18:25:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={"73797a5f74756e008c0001000800", @ifru_map}) syzkaller login: [ 36.921755] random: crng init done [ 37.064191] IPVS: Creating netns size=2536 id=1 [ 37.127692] IPVS: Creating netns size=2536 id=2 [ 37.189253] IPVS: Creating netns size=2536 id=3 [ 37.235217] IPVS: Creating netns size=2536 id=4 [ 37.286095] IPVS: Creating netns size=2536 id=5 [ 37.342043] IPVS: Creating netns size=2536 id=6 [ 37.395471] IPVS: Creating netns size=2536 id=7 [ 37.452442] IPVS: Creating netns size=2536 id=8 [ 37.860916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.923259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.938099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.992407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.073480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.121374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.157114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.216595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.239091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.256076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.282994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.329119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.349395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.383960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.412269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.423192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.432435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.457449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.478440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.497302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.519835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.584058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 38.599535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.614849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.637925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.659415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.669651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.681158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.707159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 38.727186] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.745168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.753469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.775359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.806696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.813624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.823381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.837201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 38.845215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.852757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.864649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.874333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.881818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.919454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.927672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.937815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.952209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.966100] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.976809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.984584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.997487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.006357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.014240] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.023111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.036631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.045503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.053808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 39.062317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.073804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 39.081575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.105334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.120463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.132217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.140921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.150482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.165636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.173114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.204810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.219030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.233230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.270855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.284062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.314740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.322273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.337661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.359200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.402861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.420482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.437480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.454463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.468332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.480663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.489925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.499324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.510331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.522111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.529707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.540698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.551251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.560669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.578298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.600861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.615046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.622545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.660670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.686246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.693784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.695436] ip (5111) used greatest stack depth: 23240 bytes left [ 42.862971] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.905398] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.088446] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.100712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.111354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.125202] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.132255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.145884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.208488] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.225107] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.235138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.293222] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.410214] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.426040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.432792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.440877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.449828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.459706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.467787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.477619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.486816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.493464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.552518] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.565989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.572732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.590253] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.651074] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.660864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.670961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.792008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.812182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.825545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 18:25:41 executing program 2: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/04/20 18:25:41 executing program 0: r0 = gettid() ioprio_set$pid(0x1000000000002, r0, 0x0) 2018/04/20 18:25:41 executing program 2: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/04/20 18:25:41 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 2018/04/20 18:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='highspeed\x00', 0xa) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000000300)='U', 0x1, 0x0, 0x0, 0x0) 2018/04/20 18:25:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a17000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f00001e0000/0x800000)=nil) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/20 18:25:41 executing program 3: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000001c0)="8f78c0790000000000000600b7117e5eed46cdf9538b71ae7561c75b18659d9d181ff746074e5e794de63a15af29ae2d8a3b65f0772c2d9fa1f1b023292b006892bf6582c654f8d7502bbe8601996e0aeb90b85a9a", 0x55) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 2018/04/20 18:25:41 executing program 6: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x0, 0x2000000400000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x54) 2018/04/20 18:25:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={"73797a5f74756e008c0001000800", @ifru_map}) 2018/04/20 18:25:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={"73797a5f74756e008c0001000800", @ifru_map}) 2018/04/20 18:25:41 executing program 0: r0 = gettid() ioprio_set$pid(0x1000000000002, r0, 0x0) 2018/04/20 18:25:41 executing program 6: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x0, 0x2000000400000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x54) 2018/04/20 18:25:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a17000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f00001e0000/0x800000)=nil) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/20 18:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='highspeed\x00', 0xa) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000000300)='U', 0x1, 0x0, 0x0, 0x0) 2018/04/20 18:25:41 executing program 2: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/04/20 18:25:41 executing program 3: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000001c0)="8f78c0790000000000000600b7117e5eed46cdf9538b71ae7561c75b18659d9d181ff746074e5e794de63a15af29ae2d8a3b65f0772c2d9fa1f1b023292b006892bf6582c654f8d7502bbe8601996e0aeb90b85a9a", 0x55) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 2018/04/20 18:25:41 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 2018/04/20 18:25:41 executing program 6: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x0, 0x2000000400000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x54) 2018/04/20 18:25:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={"73797a5f74756e008c0001000800", @ifru_map}) 2018/04/20 18:25:41 executing program 0: r0 = gettid() ioprio_set$pid(0x1000000000002, r0, 0x0) 2018/04/20 18:25:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='highspeed\x00', 0xa) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000000300)='U', 0x1, 0x0, 0x0, 0x0) 2018/04/20 18:25:41 executing program 2: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000001c0)="8f78c0790000000000000600b7117e5eed46cdf9538b71ae7561c75b18659d9d181ff746074e5e794de63a15af29ae2d8a3b65f0772c2d9fa1f1b023292b006892bf6582c654f8d7502bbe8601996e0aeb90b85a9a", 0x55) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 2018/04/20 18:25:41 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/52) 2018/04/20 18:25:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x8}, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/04/20 18:25:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a17000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f00001e0000/0x800000)=nil) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/20 18:25:42 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 2018/04/20 18:25:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 2018/04/20 18:25:42 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x8}, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/04/20 18:25:42 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 2018/04/20 18:25:42 executing program 4: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/20 18:25:42 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/52) 2018/04/20 18:25:42 executing program 2: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000001c0)="8f78c0790000000000000600b7117e5eed46cdf9538b71ae7561c75b18659d9d181ff746074e5e794de63a15af29ae2d8a3b65f0772c2d9fa1f1b023292b006892bf6582c654f8d7502bbe8601996e0aeb90b85a9a", 0x55) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 2018/04/20 18:25:42 executing program 3: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000001c0)="8f78c0790000000000000600b7117e5eed46cdf9538b71ae7561c75b18659d9d181ff746074e5e794de63a15af29ae2d8a3b65f0772c2d9fa1f1b023292b006892bf6582c654f8d7502bbe8601996e0aeb90b85a9a", 0x55) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 2018/04/20 18:25:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 2018/04/20 18:25:42 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x8}, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/04/20 18:25:42 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/52) 2018/04/20 18:25:42 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x8}, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/04/20 18:25:42 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 4: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/20 18:25:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 2018/04/20 18:25:42 executing program 0: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/20 18:25:42 executing program 3: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000001c0)="8f78c0790000000000000600b7117e5eed46cdf9538b71ae7561c75b18659d9d181ff746074e5e794de63a15af29ae2d8a3b65f0772c2d9fa1f1b023292b006892bf6582c654f8d7502bbe8601996e0aeb90b85a9a", 0x55) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 2018/04/20 18:25:42 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/52) 2018/04/20 18:25:42 executing program 4: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/20 18:25:42 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 0: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/20 18:25:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 2018/04/20 18:25:42 executing program 2: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00000001c0)="8f78c0790000000000000600b7117e5eed46cdf9538b71ae7561c75b18659d9d181ff746074e5e794de63a15af29ae2d8a3b65f0772c2d9fa1f1b023292b006892bf6582c654f8d7502bbe8601996e0aeb90b85a9a", 0x55) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 2018/04/20 18:25:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000001a0003000700fd556fa283bc0aeee6d879d37d05271d85940800040001000000", 0x24}], 0x1}, 0x0) 2018/04/20 18:25:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 4: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/20 18:25:42 executing program 6: keyctl$update(0x2, 0x0, 0x0, 0x282) 2018/04/20 18:25:42 executing program 0: creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/04/20 18:25:42 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x54) 2018/04/20 18:25:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000100), &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000000140)={'rmd160-generic\x00'}}) 2018/04/20 18:25:42 executing program 6: keyctl$update(0x2, 0x0, 0x0, 0x282) 2018/04/20 18:25:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001080)=""/150) 2018/04/20 18:25:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x54) 2018/04/20 18:25:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000001340)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001400)) pipe2(&(0x7f0000001440), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='/dev/loop-control\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000001980), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$urandom(&(0x7f0000001b80)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000001bc0)='/dev/net/tun\x00', 0x0, 0x0) eventfd(0x0) signalfd(0xffffffffffffffff, &(0x7f0000001c80), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuseblk_mount(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) syz_open_dev$loop(&(0x7f0000002040)='/dev/loop#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003700)='/dev/ptmx\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003800)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003880)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$urandom(&(0x7f0000003d80)='/dev/urandom\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f00000055c0)) syz_open_dev$random(&(0x7f0000005a00)='/dev/random\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_fuseblk_mount(&(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000006980)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000006a00)='attr/exec\x00') socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) 2018/04/20 18:25:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000140)="2e2f66696c65302f662e6c6530ff00", 0x0) 2018/04/20 18:25:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x54) 2018/04/20 18:25:42 executing program 6: keyctl$update(0x2, 0x0, 0x0, 0x282) 2018/04/20 18:25:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69ad096aafd2e331dda0efc402e00efaa1b173afde4ba11707dad1c8ed93017b844b36ccc06d49d8f0ab57050ab61b378eba4e6a963c841ec67822445462a54d055ed7874bba489b70947a4cac66858e8f6938194594c7c055d23ad1b8a0c7360ee431d43549a") ioctl$fiemap(r0, 0x40286608, &(0x7f00000001c0)={0x80}) 2018/04/20 18:25:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x54) 2018/04/20 18:25:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001080)=""/150) 2018/04/20 18:25:42 executing program 0: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000000600)="fa546cd82faba4a7e2982b444bd5f75ff3c01ec509a1d427bd77385a7666ef708abb3290c1a7f06c3a54640ec2e0f60ee04b98ccfdbd1182fa65b65a79f7eb36959aef29ca4361d81cc9f5b67fc6e1b0c176c13dfd6f0e71ab254ba8a5b863011766ebc6f9bfcd9f96b77049fe98421c42b811fffab34dcb442c6f82f82c9eddc0f5592640af50fbec53e7eacd14b1b75c54ba9bad0a3879714f5bf1fcfe0f367e83bf657ed877f03f68da359d76cc1379af729b5b3ad9dae9ecde29012593d4ce8f56cf6319008aec0a0342b9f239babbd666e7444f2fd2aa21da8d8ef643ee0c3db83bb3fbf62f65c0ce9cafe13d6b18c52d9fc3b3aa3681cf5c3d8e63256492add534fa293bc9d2b9577d5999198ea989ed3864f89dc1ad78b98b275216e89d1d6d14334bf93e3d550b1237aaaba43dd4b6c6ab6371149dd9c3cb3eedd41df72cf904025d0bc89b0ef9f3d8629fa0a3b9e8999ac359edd616ce655bbb791d933886b4583cc2dca6dbbc9a4ec37d2c84705fd704ff96c12216df04fc6864842faf59d3e99d5bb607fa3b5166e102d855ff4df003384e8c532746a834b3349eca88a9c03790bf5ac6c25c03877180187cc083122571ce70c281a5c0e4a78ad22ba578574d92104740986939acbba5e2ddd41275f7fa806556557b960a0056402eefded067775c74be0ab8e0c3175b878809737ae03fbf63f9a919e6bcf285558d0eb863dc67d752b40ac2c1a9de4ea8cc7a7c1e9df2b9e716044f242228803a20e761cf2c6c263d15ba1655937df92f5d3004242a1b944e664637c933fa84b8e226da1e5b7425bd4a94596fb1135c388ffa7865e34184e3d360a17ff860dc99f50f9118453f6b3c85015a193a521b6cddb2fe8f562c638053de3532003e3308e8b701217ff46bd0168725a2e5f37644d0c77c5791fb1f561cbe54b549521798734528173365116a5649ddc56e1563f6148bc5a73045026a7f116b01bbea73977e67867cd1f310642733cba45826c4cd8a3da4730a9a5e5573af1b61664a9866d837fa532547f66db83d4048abbbb8b395e88a8bdba0f0cdc41afcb4ded34dda0a486ff1535730ffccd4dfb75c8906ff05ffaa149eb642c03e9233c3e73db21d382249e0379e7da5f21a4608165be23c1187cfa51f5b3fd15fef48a54bd76b056c156cb820204bf90f35e2e6aa71659d7d10c69dd106aba68da6d2e7d2d677efe5642e738f1f0b569c2adefb1912ee8523e347f611e20119b43e8c826c503ab88a4bc631da4f6ba0d55ff06cddabe271dd9e7dac84f00809aada53648fb9106d70c9cc7eb49dc3bb6415b12d18e8f3bb515cdfc3db8d52e78024ae3881e733f72e9b401de3f321a8463bacbac43917f808de3f8b7b67b5327b0737c70cbcabf37ce3118e106651664faf0181436823ee652627fe8c73d44994ffe674fbdf59823b3ea9c11c9afab790201d83265febc99a8d5b946321c8f2807194c35ee75b32a47d56f7a6affd8258a8cce07f8c2090f14b9840dab803d3fb6db151096c9c102bef57371d7bd0fddc17cf0bbda75ef40ee0904cf8e08445a3281b9fd830c6f2ac3674a205a95860b050677bc6217f43696282cc664907225bec4f0023994c0f6d84b27463372016d3cb942000658097e98f6ff04d6f9ed2e70c2824676163c597b7bcd921a9ad539e04490477ebf29f68e92fb0c03880961c0695aa8ef482e8cae374240247c9d7e9db3ee98b9c5410a92c2b964a477375877c6dadf8f842ffaf09ffbe7fe738cbbaa0a91dba83007bbbf93aa28930bc6d24a3654ad45b0097348e3d5a639dde2a9272c5548a5fd56e0d01e5d9071f057ac9fb22d96e9af76a31210a2c887385ef254b15ecea23b4e66f49f0619205047132740a322a18f2f8c7eb9ebd88d126bc113bb65c0cc11f31f8b67b32d70e499518d8ccaede0b82693d7dd2e3a428df501983df7829df2fcbf2564a1358476997f2e4144fb8793fb766b342ba6be3eff93ca2f5655c05d55d963c2ad2cfa2087f051b70dff76b6aedad554890119968ae08caf3d395ccffe1d55e558ee0cd4f3af970ec1cdaefdad804975cbed0cb8f1dc1fa01aebc7d7aa5cb12d9850703607e16755eaa3ac555df5c705e06e6b5e849d578e94b59db691f9e2cb683ae88f0e3a60d0438d6cbf171458777ef3f4deb2183d6d17d32c71652f3145219e8b5855f4f40ab463cbd5704094d1ec9cd29c74cb675b6e6138692ff4971ac86943da600f75d1322a9951631c980d801c7e36b532033f54d9a4e06581eeeea2a315c1abbbbf7afb23c66435b6fa27798cdd2c5dab5365cf20ecad51df7981235046c1b60c1ae473e5f8511d449494ef1c256c9c23fbec493dbd8093002fef41d736eb6ea66edf3fed2f816014dee73474da0a0e497d5272d86566079cd3da2407095de0cd62369cc035bbfab174a015a38382d008a61ebb23e5932443b8764c308d7edea0910fa2547088ce8297e863cbd2719344aaa965e0fba5d3e6ecc61ab758488cf56fe9c50adbda001d75b06d72d5cdc8ee7f0127c24c96b595a74383827c0e4072818805f72b5afe03568385460b28c6e3a8d2a36e391ce003134e36910409f4fc82423aedf56864109482f2c6dcd0960a1a07acea5aa11d22a0423623184518ff6857ec9a89be53be75c494dc81087ad2d804b3a1112d4505c557b7fb7d34d8ed6d70fca8d0534063e01c59aa8895c41abd79b3161136b801e3aaae0f6c6c7fb3649f0efabced0d11ca1bc7cee992ac8251c4affbff22a0fb7c8204b569735b8bd6484053808bf9df69f20466950e6f88fb69c93ab3227b201625d5aa1a1d01fe49eb0a42b7d1199f87d42cfa6f7d02a8cfe76572a1d662324535056dec6a71f50ba898ec979a70a94b65c7344de32909949d1311dac9e76602ceae6a47d97d5fed30ded6bfea170f1b7330804b6dda5012ac63ddced5a7bf20eed4058c030a2e3983764fb38702a718f3bc91ef88a74c7b16f7c894875246ebfccdeb55eb0af6ea5d8519a961b575aa2f362af1da6d565c703b191beedd84f397532024d6fd6eed8c788f76817de9e7b1e48a87f1f03048cbe23501f057d78eb875ad74e8a539fbff944c778443501f63b72c46219e82f2c978b3db227efc006cbedd90954e6bfd5ce8765024d9ab12e61ee1e1b71ebee195792cf0d25b73609d424b385b0a7a7d6f5fb18bc0771fb4f541fb06a6310dea9328c7c35ae1497ec9bb53e5de1361880fd484f411eb311989b9ef67eab3ef477e810e42af2744836f7cc0923ea09b40315d58ddc57b6c06186221fd27d2237ea854b479e43dcf8557a3bdff2a1e6b6fc4f0e4669d583f9794aab6772f47b4d7af6471e5877def6d33ab04ea7c8e07363021c39294a4c7f7497f93a91ed989f8021fc1b06f075cb92da1b229425cfede6277566409f2340888dd6e48fbba963180eaa19c669481382e42f8947cee827273a9e79d6600ec6a718f527e0af2bf3198d9fefd94a6e3a25596df716f1106eadf63f2722ed0e4b0a5493fe60b682670b0fe0993a53aaef2dae18c16baa48c3fee3e497041464b8fba47dae0fc65c7f4208560e833d25aba6304be677669959cf98dd5b4d06cbb553698a4f68250653637fbd3a7950d57c", 0xa11}], 0x1, &(0x7f0000001940)}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x20000000011, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x59) 2018/04/20 18:25:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x54) 2018/04/20 18:25:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x54) 2018/04/20 18:25:42 executing program 6: keyctl$update(0x2, 0x0, 0x0, 0x282) [ 46.098166] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize 2018/04/20 18:25:42 executing program 6: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 46.153119] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000202) [ 46.153124] FAT-fs (loop2): Filesystem has been set read-only 2018/04/20 18:25:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f0000fae000)=0x54) 2018/04/20 18:25:43 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x40000000000, 0x48}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/04/20 18:25:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x80eab9) 2018/04/20 18:25:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001080)=""/150) 2018/04/20 18:25:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getpid() fstat(0xffffffffffffffff, &(0x7f0000000100)) fstat(0xffffffffffffffff, &(0x7f0000001380)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001400)) fstat(0xffffffffffffffff, &(0x7f0000001440)) getgroups(0x0, &(0x7f00000014c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000000080)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in=@dev, @in6}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000001680)=0xe8) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001780)) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r0, &(0x7f0000000000)=0x7ffff, 0x20000000000000a) 2018/04/20 18:25:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69ad096aafd2e331dda0efc402e00efaa1b173afde4ba11707dad1c8ed93017b844b36ccc06d49d8f0ab57050ab61b378eba4e6a963c841ec67822445462a54d055ed7874bba489b70947a4cac66858e8f6938194594c7c055d23ad1b8a0c7360ee431d43549a") ioctl$fiemap(r0, 0x40286608, &(0x7f00000001c0)={0x80}) 2018/04/20 18:25:43 executing program 0: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0xa11}], 0x1, &(0x7f0000001940)}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x20000000011, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x59) 2018/04/20 18:25:43 executing program 6: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/20 18:25:43 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x40000000000, 0x48}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/04/20 18:25:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x80eab9) 2018/04/20 18:25:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x80eab9) 2018/04/20 18:25:43 executing program 0: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0xa11}], 0x1, &(0x7f0000001940)}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x20000000011, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x59) 2018/04/20 18:25:43 executing program 5: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/20 18:25:43 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x40000000000, 0x48}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) [ 46.340766] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize 2018/04/20 18:25:43 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') 2018/04/20 18:25:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x80eab9) 2018/04/20 18:25:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001080)=""/150) 2018/04/20 18:25:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69ad096aafd2e331dda0efc402e00efaa1b173afde4ba11707dad1c8ed93017b844b36ccc06d49d8f0ab57050ab61b378eba4e6a963c841ec67822445462a54d055ed7874bba489b70947a4cac66858e8f6938194594c7c055d23ad1b8a0c7360ee431d43549a") ioctl$fiemap(r0, 0x40286608, &(0x7f00000001c0)={0x80}) [ 46.470406] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize 2018/04/20 18:25:43 executing program 5: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/20 18:25:43 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x40000000000, 0x48}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/04/20 18:25:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'syzkaller0\x00'}) 2018/04/20 18:25:43 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') 2018/04/20 18:25:43 executing program 0: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0xa11}], 0x1, &(0x7f0000001940)}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x20000000011, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x59) 2018/04/20 18:25:43 executing program 6: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/20 18:25:43 executing program 4: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000"], 0x14}, 0x0) 2018/04/20 18:25:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69ad096aafd2e331dda0efc402e00efaa1b173afde4ba11707dad1c8ed93017b844b36ccc06d49d8f0ab57050ab61b378eba4e6a963c841ec67822445462a54d055ed7874bba489b70947a4cac66858e8f6938194594c7c055d23ad1b8a0c7360ee431d43549a") ioctl$fiemap(r0, 0x40286608, &(0x7f00000001c0)={0x80}) 2018/04/20 18:25:43 executing program 4: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000"], 0x14}, 0x0) [ 46.562367] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) 2018/04/20 18:25:43 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') 2018/04/20 18:25:43 executing program 0: prctl$setmm(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 2018/04/20 18:25:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r0, r0, &(0x7f0000000040), 0x7fc) [ 46.597080] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize [ 49.600317] IPVS: Creating netns size=2536 id=9 [ 49.763482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.796756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.852009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.865410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.918720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.932041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.947050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.961236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.569535] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.602447] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.608595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.615958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 18:25:47 executing program 0: prctl$setmm(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 2018/04/20 18:25:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1a1}, 0x1}, 0x0) 2018/04/20 18:25:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'syzkaller0\x00'}) 2018/04/20 18:25:47 executing program 4: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000"], 0x14}, 0x0) 2018/04/20 18:25:47 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') 2018/04/20 18:25:47 executing program 5: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/20 18:25:47 executing program 6: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2200081) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/20 18:25:47 executing program 1: r0 = memfd_create(&(0x7f0000d65000)='-ppp0#:)\x00', 0x0) pwrite64(r0, &(0x7f00000002c0)="19", 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x3) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/171, 0xab) 2018/04/20 18:25:47 executing program 0: prctl$setmm(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 2018/04/20 18:25:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'syzkaller0\x00'}) 2018/04/20 18:25:47 executing program 3: r0 = socket(0x10000000000010, 0x3, 0x0) write(r0, &(0x7f0000f56fdc)="240000002e001f811f101a00000000002300f9ffffffffffffffffff08ffffff04010061", 0x24) 2018/04/20 18:25:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'syzkaller0\x00'}) 2018/04/20 18:25:47 executing program 0: prctl$setmm(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 2018/04/20 18:25:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1a1}, 0x1}, 0x0) 2018/04/20 18:25:47 executing program 4: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000"], 0x14}, 0x0) 2018/04/20 18:25:47 executing program 3: setgroups(0x0, &(0x7f0000000240)) 2018/04/20 18:25:47 executing program 0: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00e60000000800dba1000000c9030000ec0000000100000032fa1a1200000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@test_dummy_encryption='test_dummy_encryption', 0x2c}]}) [ 50.979226] EXT4-fs (loop0): Test dummy encryption mount option ignored [ 50.993380] EXT4-fs (loop0): Unsupported filesystem blocksize 268435456 (303757874 log_block_size) [ 51.048240] EXT4-fs (loop0): Test dummy encryption mount option ignored [ 51.055108] EXT4-fs (loop0): Unsupported filesystem blocksize 268435456 (303757874 log_block_size) [ 52.666511] IPVS: Creating netns size=2536 id=10 [ 52.832558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.848435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.923220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.937628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.993289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.006900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.020827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.042277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.657504] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.690509] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.696778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.703392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 18:25:50 executing program 0: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00e60000000800dba1000000c9030000ec0000000100000032fa1a1200000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@test_dummy_encryption='test_dummy_encryption', 0x2c}]}) 2018/04/20 18:25:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xeffff7ff, 0x4) sendto$inet6(r0, &(0x7f0000f68000), 0x0, 0x0, &(0x7f0000da9fe4)={0xa, 0x4e22}, 0x1c) 2018/04/20 18:25:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="940a0011000c8823a7", 0x9) 2018/04/20 18:25:50 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1a1}, 0x1}, 0x0) 2018/04/20 18:25:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 2018/04/20 18:25:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) getgroups(0x1, &(0x7f0000000480)=[0x0]) syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x1000) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000300)={[{@tz_utc='tz=UTC', 0x2c}]}) setitimer(0x0, &(0x7f00000000c0)={{0x0, 0x7530}}, &(0x7f0000000380)) 2018/04/20 18:25:50 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000b79863d20000000002000f20200001000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x54, 0x1a0}, {&(0x7f0000010c00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x15}]) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x39) 2018/04/20 18:25:50 executing program 1: r0 = memfd_create(&(0x7f0000d65000)='-ppp0#:)\x00', 0x0) pwrite64(r0, &(0x7f00000002c0)="19", 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x3) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/171, 0xab) 2018/04/20 18:25:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="940a0011000c8823a7", 0x9) 2018/04/20 18:25:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="940a0011000c8823a7", 0x9) 2018/04/20 18:25:50 executing program 0: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00e60000000800dba1000000c9030000ec0000000100000032fa1a1200000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@test_dummy_encryption='test_dummy_encryption', 0x2c}]}) [ 53.949119] EXT4-fs (loop0): Test dummy encryption mount option ignored [ 53.958013] EXT4-fs (loop0): Unsupported filesystem blocksize 268435456 (303757874 log_block_size) 2018/04/20 18:25:50 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1a1}, 0x1}, 0x0) 2018/04/20 18:25:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xeffff7ff, 0x4) sendto$inet6(r0, &(0x7f0000f68000), 0x0, 0x0, &(0x7f0000da9fe4)={0xa, 0x4e22}, 0x1c) 2018/04/20 18:25:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00002b8ff6)="940a0011000c8823a7", 0x9) 2018/04/20 18:25:50 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001080)='/dev/input/event#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 54.029872] FAT-fs (loop4): bogus number of reserved sectors [ 54.055226] FAT-fs (loop4): Can't find a valid FAT filesystem 2018/04/20 18:25:50 executing program 0: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00e60000000800dba1000000c9030000ec0000000100000032fa1a1200000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@test_dummy_encryption='test_dummy_encryption', 0x2c}]}) 2018/04/20 18:25:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xeffff7ff, 0x4) sendto$inet6(r0, &(0x7f0000f68000), 0x0, 0x0, &(0x7f0000da9fe4)={0xa, 0x4e22}, 0x1c) [ 54.091910] EXT4-fs (loop0): Test dummy encryption mount option ignored [ 54.091924] EXT4-fs (loop0): Unsupported filesystem blocksize 268435456 (303757874 log_block_size) [ 54.157248] EXT4-fs (loop0): Test dummy encryption mount option ignored [ 54.157256] EXT4-fs (loop0): Unsupported filesystem blocksize 268435456 (303757874 log_block_size) [ 54.280763] FAT-fs (loop4): bogus number of reserved sectors [ 54.287073] FAT-fs (loop4): Can't find a valid FAT filesystem [ 54.497312] IPVS: Creating netns size=2536 id=11 [ 54.700724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.715861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.770195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.783394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.837660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.851159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.865286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.872152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.880401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.891037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.897941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.908491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.508214] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.540209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.546402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.553013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 18:25:52 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x3, 0x0) 2018/04/20 18:25:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xeffff7ff, 0x4) sendto$inet6(r0, &(0x7f0000f68000), 0x0, 0x0, &(0x7f0000da9fe4)={0xa, 0x4e22}, 0x1c) 2018/04/20 18:25:52 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/20 18:25:52 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000003, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/20 18:25:52 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, &(0x7f0000005000)}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r1 = dup(r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/20 18:25:52 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001080)='/dev/input/event#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2018/04/20 18:25:52 executing program 1: r0 = memfd_create(&(0x7f0000d65000)='-ppp0#:)\x00', 0x0) pwrite64(r0, &(0x7f00000002c0)="19", 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x3) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/171, 0xab) 2018/04/20 18:25:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 2018/04/20 18:25:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000006c0)={'raw\x00'}, &(0x7f0000000600)=0x54) 2018/04/20 18:25:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 2018/04/20 18:25:52 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/20 18:25:52 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, &(0x7f0000005000)}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r1 = dup(r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/20 18:25:52 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x3, 0x0) 2018/04/20 18:25:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000006c0)={'raw\x00'}, &(0x7f0000000600)=0x54) 2018/04/20 18:25:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) [ 56.706494] IPVS: Creating netns size=2536 id=12 [ 56.869150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.882353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.936824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.951158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.004872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.018132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.031787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.046913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.632089] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.664315] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.670427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.678474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 18:25:54 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x3, 0x0) 2018/04/20 18:25:54 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, &(0x7f0000005000)}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r1 = dup(r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/20 18:25:54 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001080)='/dev/input/event#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2018/04/20 18:25:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000006c0)={'raw\x00'}, &(0x7f0000000600)=0x54) 2018/04/20 18:25:54 executing program 6: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") 2018/04/20 18:25:54 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/20 18:25:54 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000003, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/20 18:25:54 executing program 1: r0 = memfd_create(&(0x7f0000d65000)='-ppp0#:)\x00', 0x0) pwrite64(r0, &(0x7f00000002c0)="19", 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x3) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/171, 0xab) 2018/04/20 18:25:54 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, &(0x7f0000005000)}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r1 = dup(r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/20 18:25:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000006c0)={'raw\x00'}, &(0x7f0000000600)=0x54) 2018/04/20 18:25:54 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000003, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/20 18:25:54 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x3, 0x0) 2018/04/20 18:25:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) dup3(r0, r1, 0x0) 2018/04/20 18:25:54 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/20 18:25:54 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1}, 0x0) 2018/04/20 18:25:54 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000003, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/20 18:25:54 executing program 6: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") 2018/04/20 18:25:54 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001080)='/dev/input/event#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2018/04/20 18:25:54 executing program 5: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") 2018/04/20 18:25:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) dup3(r0, r1, 0x0) [ 58.057123] PF_BRIDGE: RTM_NEWNEIGH with invalid address 2018/04/20 18:25:54 executing program 6: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") 2018/04/20 18:25:54 executing program 5: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") [ 58.117134] PF_BRIDGE: RTM_NEWNEIGH with invalid address 2018/04/20 18:25:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) dup3(r0, r1, 0x0) 2018/04/20 18:25:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) 2018/04/20 18:25:55 executing program 5: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") 2018/04/20 18:25:55 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 6: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)="63707526223200fbfffffffffffff6240ebfdf0368528b445ea8c4bb56a2881cf2b76ae175ef25cfcaed426b975d3765b983d239f659cb13") 2018/04/20 18:25:55 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1}, 0x0) 2018/04/20 18:25:55 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x4, 0x2032, 0xffffffffffffffff, 0x0) [ 58.244650] PF_BRIDGE: RTM_NEWNEIGH with invalid address 2018/04/20 18:25:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1}, 0x0) 2018/04/20 18:25:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) dup3(r0, r1, 0x0) 2018/04/20 18:25:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) 2018/04/20 18:25:55 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x4, 0x2032, 0xffffffffffffffff, 0x0) 2018/04/20 18:25:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x102}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/04/20 18:25:55 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) [ 58.403581] PF_BRIDGE: RTM_NEWNEIGH with invalid address 2018/04/20 18:25:55 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x4, 0x2032, 0xffffffffffffffff, 0x0) 2018/04/20 18:25:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1}, 0x0) 2018/04/20 18:25:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000e1e000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10000000000018, &(0x7f00000bc000), &(0x7f00006b8ffc)=0x214) 2018/04/20 18:25:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) 2018/04/20 18:25:55 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x4, 0x2032, 0xffffffffffffffff, 0x0) 2018/04/20 18:25:55 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000067000002"], 0x11) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f00000000c0)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) [ 58.506443] PF_BRIDGE: RTM_NEWNEIGH with invalid address 2018/04/20 18:25:55 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 7: socket$inet(0x2, 0x80a, 0x7f) r0 = syz_open_procfs(0x0, &(0x7f0000b23000)='net/ptype\x00') pread64(r0, &(0x7f0000000000), 0x29e, 0x36) 2018/04/20 18:25:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000e1e000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10000000000018, &(0x7f00000bc000), &(0x7f00006b8ffc)=0x214) 2018/04/20 18:25:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x102}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/04/20 18:25:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000e1e000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10000000000018, &(0x7f00000bc000), &(0x7f00006b8ffc)=0x214) [ 58.620550] syz-executor7 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/20 18:25:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000067000002"], 0x11) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f00000000c0)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/20 18:25:55 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/04/20 18:25:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x102}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/04/20 18:25:55 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000e1e000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10000000000018, &(0x7f00000bc000), &(0x7f00006b8ffc)=0x214) 2018/04/20 18:25:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000067000002"], 0x11) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f00000000c0)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/20 18:25:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, 'queue1\x00'}) 2018/04/20 18:25:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f00000001031900000007000000068100023b050900030000000000e1c4bc", 0x1f}], 0x1) 2018/04/20 18:25:55 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/20 18:25:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, 'rdma', 0x20}]}, 0x6) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x0, 'rdma', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'cpu', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'pids', 0x20}, {0x0, 'rdma', 0x20}, {0x0, 'cpu', 0x20}]}, 0x3c) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/66, 0x42}], 0x1) 2018/04/20 18:25:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000f43ffc), 0x4) 2018/04/20 18:25:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, 'rdma', 0x20}]}, 0x6) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x0, 'rdma', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'cpu', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'pids', 0x20}, {0x0, 'rdma', 0x20}, {0x0, 'cpu', 0x20}]}, 0x3c) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/66, 0x42}], 0x1) 2018/04/20 18:25:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f00000001031900000007000000068100023b050900030000000000e1c4bc", 0x1f}], 0x1) 2018/04/20 18:25:56 executing program 4: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000067000002"], 0x11) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f00000000c0)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/20 18:25:56 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, 'queue1\x00'}) 2018/04/20 18:25:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000f43ffc), 0x4) 2018/04/20 18:25:56 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/20 18:25:56 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x102}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/04/20 18:25:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000f43ffc), 0x4) 2018/04/20 18:25:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f00000001031900000007000000068100023b050900030000000000e1c4bc", 0x1f}], 0x1) 2018/04/20 18:25:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, 'rdma', 0x20}]}, 0x6) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x0, 'rdma', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'cpu', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'pids', 0x20}, {0x0, 'rdma', 0x20}, {0x0, 'cpu', 0x20}]}, 0x3c) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/66, 0x42}], 0x1) 2018/04/20 18:25:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, 'queue1\x00'}) 2018/04/20 18:25:56 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000f43ffc), 0x4) 2018/04/20 18:25:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, 'rdma', 0x20}]}, 0x6) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x0, 'rdma', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'cpu', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'pids', 0x20}, {0x0, 'rdma', 0x20}, {0x0, 'cpu', 0x20}]}, 0x3c) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/66, 0x42}], 0x1) 2018/04/20 18:25:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000f3eff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x0, 0x2000000000000080, 0x0, 'queue1\x00'}) 2018/04/20 18:25:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f00000001031900000007000000068100023b050900030000000000e1c4bc", 0x1f}], 0x1) 2018/04/20 18:25:57 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:57 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:57 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f00003aa000)=[{0x81}, {0x6}]}) 2018/04/20 18:25:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00001e0ff7)='pagemap\x00') lseek(r0, 0x0, 0x3) 2018/04/20 18:25:57 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:57 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000000), 0x4) 2018/04/20 18:25:57 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/20 18:25:57 executing program 2: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) read(r0, &(0x7f0000000040), 0x0) 2018/04/20 18:25:57 executing program 2: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) read(r0, &(0x7f0000000040), 0x0) 2018/04/20 18:25:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00001e0ff7)='pagemap\x00') lseek(r0, 0x0, 0x3) 2018/04/20 18:25:57 executing program 2: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) read(r0, &(0x7f0000000040), 0x0) 2018/04/20 18:25:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00001e0ff7)='pagemap\x00') lseek(r0, 0x0, 0x3) 2018/04/20 18:25:57 executing program 2: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) read(r0, &(0x7f0000000040), 0x0) 2018/04/20 18:25:57 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00001e0ff7)='pagemap\x00') lseek(r0, 0x0, 0x3) 2018/04/20 18:25:57 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:57 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:58 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/20 18:25:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000a3f000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00005e5000)='ramfs\x00', 0x0, &(0x7f000002c000)) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/177, 0xb1) getdents64(r0, &(0x7f0000000100), 0xffffffffffffff04) 2018/04/20 18:25:58 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6970647470300000fdff00", 0x200000000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 2018/04/20 18:25:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f00003aa000)=[{0x81}, {0x6}]}) 2018/04/20 18:25:58 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x82}]}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="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", 0x480}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[], 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)='Z', 0x1}], 0x1, &(0x7f00000000c0)}, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000027000)="8093958bca19ef5f839c2d988e80163d294835b196955ffacc24b7c09680a604f087ba79f9a5018cf9d541c7ef58e4a80210456641960cf37a14533fa28f808f47a654", 0x43}], 0x1, &(0x7f0000000000)}, 0xc100) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000180)=@can={0x1d}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001500)='#', 0x1}], 0x1}, 0x0) 2018/04/20 18:25:58 executing program 4: mmap$binder(&(0x7f0000004000/0xe000)=nil, 0xe000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_cache\x00') 2018/04/20 18:25:58 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000000), 0x4) 2018/04/20 18:25:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000000), 0x4) 2018/04/20 18:25:58 executing program 4: mmap$binder(&(0x7f0000004000/0xe000)=nil, 0xe000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_cache\x00') 2018/04/20 18:25:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f00003aa000)=[{0x81}, {0x6}]}) 2018/04/20 18:25:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000a3f000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00005e5000)='ramfs\x00', 0x0, &(0x7f000002c000)) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/177, 0xb1) getdents64(r0, &(0x7f0000000100), 0xffffffffffffff04) 2018/04/20 18:25:58 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x82}]}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="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", 0x480}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[], 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)='Z', 0x1}], 0x1, &(0x7f00000000c0)}, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000027000)="8093958bca19ef5f839c2d988e80163d294835b196955ffacc24b7c09680a604f087ba79f9a5018cf9d541c7ef58e4a80210456641960cf37a14533fa28f808f47a654", 0x43}], 0x1, &(0x7f0000000000)}, 0xc100) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000180)=@can={0x1d}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001500)='#', 0x1}], 0x1}, 0x0) 2018/04/20 18:25:58 executing program 4: mmap$binder(&(0x7f0000004000/0xe000)=nil, 0xe000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_cache\x00') 2018/04/20 18:25:58 executing program 4: mmap$binder(&(0x7f0000004000/0xe000)=nil, 0xe000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_cache\x00') 2018/04/20 18:25:59 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x82}]}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="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", 0x480}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[], 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)='Z', 0x1}], 0x1, &(0x7f00000000c0)}, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000027000)="8093958bca19ef5f839c2d988e80163d294835b196955ffacc24b7c09680a604f087ba79f9a5018cf9d541c7ef58e4a80210456641960cf37a14533fa28f808f47a654", 0x43}], 0x1, &(0x7f0000000000)}, 0xc100) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000180)=@can={0x1d}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001500)='#', 0x1}], 0x1}, 0x0) 2018/04/20 18:25:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f00003aa000)=[{0x81}, {0x6}]}) 2018/04/20 18:25:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="24000000200025f002000000ffc4a7acca15bd224a33cc796f0ffc0e0200000000100000f1c9f4a51e3cc492180b02a7528e8956", 0x34) 2018/04/20 18:25:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000a3f000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00005e5000)='ramfs\x00', 0x0, &(0x7f000002c000)) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/177, 0xb1) getdents64(r0, &(0x7f0000000100), 0xffffffffffffff04) 2018/04/20 18:25:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) sendfile(r0, r0, &(0x7f0000319ff8), 0xfff) 2018/04/20 18:25:59 executing program 3: clock_settime(0xee55557ab56e429b, &(0x7f0000000040)) 2018/04/20 18:25:59 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000000), 0x4) 2018/04/20 18:25:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000000), 0x4) 2018/04/20 18:25:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="24000000200025f002000000ffc4a7acca15bd224a33cc796f0ffc0e0200000000100000f1c9f4a51e3cc492180b02a7528e8956", 0x34) 2018/04/20 18:25:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000a3f000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00005e5000)='ramfs\x00', 0x0, &(0x7f000002c000)) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/177, 0xb1) getdents64(r0, &(0x7f0000000100), 0xffffffffffffff04) 2018/04/20 18:25:59 executing program 3: clock_settime(0xee55557ab56e429b, &(0x7f0000000040)) 2018/04/20 18:25:59 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x82}]}, 0x10) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="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", 0x480}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[], 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)='Z', 0x1}], 0x1, &(0x7f00000000c0)}, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000027000)="8093958bca19ef5f839c2d988e80163d294835b196955ffacc24b7c09680a604f087ba79f9a5018cf9d541c7ef58e4a80210456641960cf37a14533fa28f808f47a654", 0x43}], 0x1, &(0x7f0000000000)}, 0xc100) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000180)=@can={0x1d}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001500)='#', 0x1}], 0x1}, 0x0) 2018/04/20 18:25:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:25:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="24000000200025f002000000ffc4a7acca15bd224a33cc796f0ffc0e0200000000100000f1c9f4a51e3cc492180b02a7528e8956", 0x34) [ 62.433244] syz-executor4 (9260): /proc/9256/oom_adj is deprecated, please use /proc/9256/oom_score_adj instead. 2018/04/20 18:25:59 executing program 3: clock_settime(0xee55557ab56e429b, &(0x7f0000000040)) 2018/04/20 18:25:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) sendfile(r0, r0, &(0x7f0000319ff8), 0xfff) [ 62.479478] device syz_tun entered promiscuous mode 2018/04/20 18:25:59 executing program 7: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x77359400}}, &(0x7f000000dfe0)) clock_settime(0x0, &(0x7f0000000140)) 2018/04/20 18:26:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="24000000200025f002000000ffc4a7acca15bd224a33cc796f0ffc0e0200000000100000f1c9f4a51e3cc492180b02a7528e8956", 0x34) 2018/04/20 18:26:00 executing program 3: clock_settime(0xee55557ab56e429b, &(0x7f0000000040)) 2018/04/20 18:26:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)=@polexpire={0xcc, 0x1b, 0x831, 0x0, 0x0, {{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}}}, [@policy_type={0xc, 0x10}]}, 0xcc}, 0x1}, 0x0) 2018/04/20 18:26:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) sendfile(r0, r0, &(0x7f0000319ff8), 0xfff) 2018/04/20 18:26:00 executing program 7: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x77359400}}, &(0x7f000000dfe0)) clock_settime(0x0, &(0x7f0000000140)) 2018/04/20 18:26:00 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000000), 0x4) 2018/04/20 18:26:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000000), 0x4) 2018/04/20 18:26:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) sendfile(r0, r0, &(0x7f0000319ff8), 0xfff) 2018/04/20 18:26:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)=@polexpire={0xcc, 0x1b, 0x831, 0x0, 0x0, {{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}}}, [@policy_type={0xc, 0x10}]}, 0xcc}, 0x1}, 0x0) 2018/04/20 18:26:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8408, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/20 18:26:00 executing program 7: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x77359400}}, &(0x7f000000dfe0)) clock_settime(0x0, &(0x7f0000000140)) 2018/04/20 18:26:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/20 18:26:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:00 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)=@polexpire={0xcc, 0x1b, 0x831, 0x0, 0x0, {{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}}}, [@policy_type={0xc, 0x10}]}, 0xcc}, 0x1}, 0x0) 2018/04/20 18:26:01 executing program 7: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x77359400}}, &(0x7f000000dfe0)) clock_settime(0x0, &(0x7f0000000140)) 2018/04/20 18:26:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8408, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/20 18:26:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000440)='./file0/fil..\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {}, 0xfffffffffffffffd}, {{@in6}, 0x0, @in6=@dev={0xfe, 0x80}, 0x3500, 0x0, 0x0, 0x10001, 0x979}}, 0xe8) 2018/04/20 18:26:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)=@polexpire={0xcc, 0x1b, 0x831, 0x0, 0x0, {{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}}}, [@policy_type={0xc, 0x10}]}, 0xcc}, 0x1}, 0x0) 2018/04/20 18:26:01 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/20 18:26:01 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:01 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:01 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:01 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)="2e2f66696c65302f662e6c4530f600", 0x0) 2018/04/20 18:26:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8408, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/20 18:26:01 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/20 18:26:01 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:01 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 64.412539] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) 2018/04/20 18:26:01 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:01 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)="2e2f66696c65302f662e6c4530f600", 0x0) 2018/04/20 18:26:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/20 18:26:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8408, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/20 18:26:01 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)="2e2f66696c65302f662e6c4530f600", 0x0) [ 64.453138] FAT-fs (loop7): Filesystem has been set read-only 2018/04/20 18:26:01 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000}, 0xd0) r0 = socket(0x11, 0x4000000000080002, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001000), 0x729) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/20 18:26:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000), 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90), &(0x7f00002c7fe8)}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/04/20 18:26:01 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)="2e2f66696c65302f662e6c4530f600", 0x0) [ 64.531137] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) [ 64.543475] FAT-fs (loop7): Filesystem has been set read-only 2018/04/20 18:26:01 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)="2e2f66696c65302f662e6c4530f600", 0x0) [ 64.594815] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 64.602058] FAT-fs (loop5): Filesystem has been set read-only 2018/04/20 18:26:01 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)="2e2f66696c65302f662e6c4530f600", 0x0) 2018/04/20 18:26:01 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000}, 0xd0) r0 = socket(0x11, 0x4000000000080002, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001000), 0x729) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) [ 64.647358] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) [ 64.654577] FAT-fs (loop7): Filesystem has been set read-only [ 64.738081] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 64.768932] FAT-fs (loop5): Filesystem has been set read-only [ 64.810371] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) [ 64.827714] FAT-fs (loop7): Filesystem has been set read-only [ 65.392596] binder: 9413:9417 ioctl c0306201 20004000 returned -14 [ 65.392609] binder: BINDER_SET_CONTEXT_MGR already set [ 65.392615] binder: 9413:9463 ioctl 40046207 0 returned -16 [ 65.401419] binder_alloc: 9413: binder_alloc_buf, no vma [ 65.401437] binder: 9413:9464 transaction failed 29189/-3, size 0-0 line 3133 [ 65.401488] binder: 9413:9465 got reply transaction with no transaction stack [ 65.401494] binder: 9413:9465 transaction failed 29201/-71, size 0-0 line 2926 2018/04/20 18:26:02 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:02 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:02 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)="2e2f66696c65302f662e6c4530f600", 0x0) 2018/04/20 18:26:02 executing program 7: r0 = gettid() clone(0x0, &(0x7f00008a7f11), &(0x7f0000530000), &(0x7f0000d44000), &(0x7f0000df0000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r0, 0x15) 2018/04/20 18:26:02 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000}, 0xd0) r0 = socket(0x11, 0x4000000000080002, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001000), 0x729) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/20 18:26:02 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:02 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ext2\x00', 0x801000, &(0x7f0000000100)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/20 18:26:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000), 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90), &(0x7f00002c7fe8)}}], 0x0, 0x0, &(0x7f0000002000)}) [ 65.505272] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.510739] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.516591] binder: undelivered TRANSACTION_COMPLETE [ 65.536513] binder: undelivered TRANSACTION_COMPLETE [ 65.550664] binder: undelivered transaction 3, process died. 2018/04/20 18:26:02 executing program 7: r0 = gettid() clone(0x0, &(0x7f00008a7f11), &(0x7f0000530000), &(0x7f0000d44000), &(0x7f0000df0000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r0, 0x15) [ 65.601007] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 65.631472] FAT-fs (loop5): Filesystem has been set read-only 2018/04/20 18:26:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000), 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90), &(0x7f00002c7fe8)}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/04/20 18:26:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f00000001c0)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 2018/04/20 18:26:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000002140)='selinux\x00', 0xfd0, 0x0) 2018/04/20 18:26:03 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 2018/04/20 18:26:03 executing program 7: r0 = gettid() clone(0x0, &(0x7f00008a7f11), &(0x7f0000530000), &(0x7f0000d44000), &(0x7f0000df0000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r0, 0x15) 2018/04/20 18:26:03 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000}, 0xd0) r0 = socket(0x11, 0x4000000000080002, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001000), 0x729) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/20 18:26:03 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xff80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) 2018/04/20 18:26:03 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) close(r0) fallocate(r1, 0x3, 0x0, 0xfffc) 2018/04/20 18:26:03 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 2018/04/20 18:26:03 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xff80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 66.350853] binder: undelivered TRANSACTION_COMPLETE [ 66.365656] binder: undelivered TRANSACTION_COMPLETE [ 66.377792] binder: undelivered transaction 8, process died. 2018/04/20 18:26:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f00000001c0)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 2018/04/20 18:26:03 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xff80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) 2018/04/20 18:26:03 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) close(r0) fallocate(r1, 0x3, 0x0, 0xfffc) 2018/04/20 18:26:03 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 2018/04/20 18:26:03 executing program 7: r0 = gettid() clone(0x0, &(0x7f00008a7f11), &(0x7f0000530000), &(0x7f0000d44000), &(0x7f0000df0000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r0, 0x15) 2018/04/20 18:26:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f00000001c0)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 2018/04/20 18:26:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000002140)='selinux\x00', 0xfd0, 0x0) 2018/04/20 18:26:03 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xff80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) 2018/04/20 18:26:03 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) close(r0) fallocate(r1, 0x3, 0x0, 0xfffc) 2018/04/20 18:26:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000002140)='selinux\x00', 0xfd0, 0x0) 2018/04/20 18:26:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000), 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90), &(0x7f00002c7fe8)}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/04/20 18:26:04 executing program 4: syz_mount_image$f2fs(&(0x7f0000000480)='f2fs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000003c0)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000004c0)) 2018/04/20 18:26:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x4000000000ff0e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfff, &(0x7f0000000080), 0x8) r2 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x49) close(r2) 2018/04/20 18:26:04 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 2018/04/20 18:26:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f00000001c0)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) [ 67.181849] binder: undelivered TRANSACTION_COMPLETE [ 67.187176] binder: undelivered TRANSACTION_COMPLETE [ 67.215748] binder: undelivered transaction 11, process died. 2018/04/20 18:26:04 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) close(r0) fallocate(r1, 0x3, 0x0, 0xfffc) 2018/04/20 18:26:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000002140)='selinux\x00', 0xfd0, 0x0) 2018/04/20 18:26:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') close(r0) 2018/04/20 18:26:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000002140)='selinux\x00', 0xfd0, 0x0) [ 67.273574] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.307559] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 67.345223] attempt to access beyond end of device [ 67.357171] loop4: rw=48, want=8200, limit=20 [ 67.371439] F2FS-fs (loop4): invalid crc value [ 67.378082] attempt to access beyond end of device [ 67.383053] loop4: rw=48, want=12296, limit=20 [ 67.390237] F2FS-fs (loop4): invalid crc value [ 67.395160] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 67.401777] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.409170] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 67.417304] attempt to access beyond end of device [ 67.422232] loop4: rw=48, want=8200, limit=20 [ 67.426853] F2FS-fs (loop4): invalid crc value [ 67.431487] attempt to access beyond end of device [ 67.436495] loop4: rw=48, want=12296, limit=20 [ 67.441087] F2FS-fs (loop4): invalid crc value [ 67.445675] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 67.480612] attempt to access beyond end of device [ 67.485763] loop4: rw=48, want=8200, limit=20 [ 67.490424] attempt to access beyond end of device [ 67.495543] loop4: rw=48, want=12296, limit=20 [ 67.500354] attempt to access beyond end of device [ 67.505330] loop4: rw=48, want=8200, limit=20 [ 67.509861] attempt to access beyond end of device [ 67.514954] loop4: rw=48, want=12296, limit=20 [ 68.039438] binder: undelivered TRANSACTION_COMPLETE [ 68.045347] binder: undelivered TRANSACTION_COMPLETE [ 68.051394] binder: undelivered transaction 14, process died. 2018/04/20 18:26:05 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') 2018/04/20 18:26:05 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000012ff0)={&(0x7f000000df28)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') close(r0) 2018/04/20 18:26:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000002140)='selinux\x00', 0xfd0, 0x0) 2018/04/20 18:26:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000002140)='selinux\x00', 0xfd0, 0x0) 2018/04/20 18:26:05 executing program 2: mmap(&(0x7f0000001000/0x39a000)=nil, 0x39a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000004000), &(0x7f0000000000)=0x4) 2018/04/20 18:26:05 executing program 4: syz_mount_image$f2fs(&(0x7f0000000480)='f2fs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000003c0)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000004c0)) 2018/04/20 18:26:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x4000000000ff0e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfff, &(0x7f0000000080), 0x8) r2 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x49) close(r2) 2018/04/20 18:26:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') close(r0) 2018/04/20 18:26:05 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') 2018/04/20 18:26:05 executing program 2: mmap(&(0x7f0000001000/0x39a000)=nil, 0x39a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000004000), &(0x7f0000000000)=0x4) 2018/04/20 18:26:05 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) [ 68.341225] attempt to access beyond end of device [ 68.349196] loop4: rw=48, want=8200, limit=20 [ 68.354568] attempt to access beyond end of device [ 68.359865] loop4: rw=48, want=12296, limit=20 2018/04/20 18:26:05 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') 2018/04/20 18:26:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') close(r0) 2018/04/20 18:26:05 executing program 2: mmap(&(0x7f0000001000/0x39a000)=nil, 0x39a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000004000), &(0x7f0000000000)=0x4) [ 68.425368] attempt to access beyond end of device 2018/04/20 18:26:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x3e, 0x0, 0x0, 0x2]}, 0xc) ppoll(&(0x7f0000000140)=[{}, {r0}], 0x2, &(0x7f0000000180), &(0x7f00000001c0)={0x7}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/20 18:26:05 executing program 0: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) clock_getres(0x2, &(0x7f0000000000)) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x0, &(0x7f00000001c0)={0x400, 0x100000001, 0xfc, 0x3ff, 0x90000000, 0x81, 0x5, 0xfe}) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) mq_timedreceive(r1, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) [ 68.448532] loop4: rw=48, want=8200, limit=20 [ 68.468257] attempt to access beyond end of device [ 68.486612] loop4: rw=48, want=12296, limit=20 2018/04/20 18:26:06 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) 2018/04/20 18:26:06 executing program 2: mmap(&(0x7f0000001000/0x39a000)=nil, 0x39a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000004000), &(0x7f0000000000)=0x4) 2018/04/20 18:26:06 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') 2018/04/20 18:26:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000cde000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000badff4)={0x6}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000bb1ff4)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/20 18:26:06 executing program 4: syz_mount_image$f2fs(&(0x7f0000000480)='f2fs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000003c0)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000004c0)) 2018/04/20 18:26:06 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000012ff0)={&(0x7f000000df28)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x4000000000ff0e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfff, &(0x7f0000000080), 0x8) r2 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x49) close(r2) 2018/04/20 18:26:06 executing program 0: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) clock_getres(0x2, &(0x7f0000000000)) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x0, &(0x7f00000001c0)={0x400, 0x100000001, 0xfc, 0x3ff, 0x90000000, 0x81, 0x5, 0xfe}) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) mq_timedreceive(r1, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) 2018/04/20 18:26:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) 2018/04/20 18:26:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000cde000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000badff4)={0x6}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000bb1ff4)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/20 18:26:06 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) [ 69.322243] attempt to access beyond end of device 2018/04/20 18:26:06 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000012ff0)={&(0x7f000000df28)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000cde000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000badff4)={0x6}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000bb1ff4)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/20 18:26:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) 2018/04/20 18:26:06 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) [ 69.349348] loop4: rw=48, want=8200, limit=20 [ 69.376640] attempt to access beyond end of device [ 69.396650] loop4: rw=48, want=12296, limit=20 [ 69.425880] attempt to access beyond end of device [ 69.437478] loop4: rw=48, want=8200, limit=20 [ 69.447824] attempt to access beyond end of device [ 69.452819] loop4: rw=48, want=12296, limit=20 2018/04/20 18:26:07 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) 2018/04/20 18:26:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000cde000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000badff4)={0x6}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000bb1ff4)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/20 18:26:07 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) 2018/04/20 18:26:07 executing program 0: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) clock_getres(0x2, &(0x7f0000000000)) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x0, &(0x7f00000001c0)={0x400, 0x100000001, 0xfc, 0x3ff, 0x90000000, 0x81, 0x5, 0xfe}) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) mq_timedreceive(r1, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) 2018/04/20 18:26:07 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) 2018/04/20 18:26:07 executing program 4: syz_mount_image$f2fs(&(0x7f0000000480)='f2fs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000003c0)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000004c0)) 2018/04/20 18:26:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x4000000000ff0e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfff, &(0x7f0000000080), 0x8) r2 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x49) close(r2) 2018/04/20 18:26:07 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000012ff0)={&(0x7f000000df28)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:07 executing program 1: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) clock_getres(0x2, &(0x7f0000000000)) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x0, &(0x7f00000001c0)={0x400, 0x100000001, 0xfc, 0x3ff, 0x90000000, 0x81, 0x5, 0xfe}) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) mq_timedreceive(r1, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) 2018/04/20 18:26:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000012ff0)={&(0x7f000000df28)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="130000001000ffdde200f49ff60f05001b230a009d0000000f7fcb3c189814e301000000f949a1b4b88ed4fc65be060202000000f1da8ed7c06c7e00f70000d8a43d585282cd0001e42d732747442d1f90f26af0982d800000000006518c2c681bbce9ec3c3f8612f026723affc1681de8f100c8eec8a70935b80a7f41c08ffa56b97c987c4d465ddab5439b20db0f7e5bf12930d837b9cb3349b6c440007d886959eaeb01800000000000001ad5b56d2a91e1a70000000000000000000000914393c7d8", 0xc4) 2018/04/20 18:26:07 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) r1 = fanotify_init(0x2a, 0x0) fanotify_mark(r1, 0x11, 0x40000002, r0, &(0x7f0000000000)='./control\x00') r2 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x800000000402, 0xffffffffffffffff) open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) [ 70.314180] attempt to access beyond end of device [ 70.330850] loop4: rw=48, want=8200, limit=20 [ 70.342276] attempt to access beyond end of device [ 70.352398] loop4: rw=48, want=12296, limit=20 [ 70.357704] attempt to access beyond end of device [ 70.362631] loop4: rw=48, want=8200, limit=20 [ 70.372468] attempt to access beyond end of device [ 70.380374] loop4: rw=48, want=12296, limit=20 2018/04/20 18:26:08 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x3d9, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x60, &(0x7f0000000f80), 0x0, &(0x7f0000002480)}}], 0x2, 0x0) 2018/04/20 18:26:08 executing program 1: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) clock_getres(0x2, &(0x7f0000000000)) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x0, &(0x7f00000001c0)={0x400, 0x100000001, 0xfc, 0x3ff, 0x90000000, 0x81, 0x5, 0xfe}) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) mq_timedreceive(r1, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) 2018/04/20 18:26:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000012ff0)={&(0x7f000000df28)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:08 executing program 0: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) clock_getres(0x2, &(0x7f0000000000)) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x0, &(0x7f00000001c0)={0x400, 0x100000001, 0xfc, 0x3ff, 0x90000000, 0x81, 0x5, 0xfe}) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) mq_timedreceive(r1, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) 2018/04/20 18:26:08 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76000400005f746f5f7465616d00", 0x9519}) 2018/04/20 18:26:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="130000001000ffdde200f49ff60f05001b230a009d0000000f7fcb3c189814e301000000f949a1b4b88ed4fc65be060202000000f1da8ed7c06c7e00f70000d8a43d585282cd0001e42d732747442d1f90f26af0982d800000000006518c2c681bbce9ec3c3f8612f026723affc1681de8f100c8eec8a70935b80a7f41c08ffa56b97c987c4d465ddab5439b20db0f7e5bf12930d837b9cb3349b6c440007d886959eaeb01800000000000001ad5b56d2a91e1a70000000000000000000000914393c7d8", 0xc4) 2018/04/20 18:26:08 executing program 7: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001600)="6d82c1de7543c8518f5afa7e328e52863a00bafc071f096b0cc7d27bfe0849b66eddef929ccd1d484ae4ddd7dc139e65f6e8fc1371cde25363c79714485357084d6af3dc2dcf467aa22d5ed6480a2d486a0b51e9e362c8420981f8c4c67936ac3260a1a736faf87bd959b8ffaa50f5374e3032bf72d2363a36d9bb0dc8e1c2bc2bbf563cdc312c10d7ab620d0518644394ff1cd36f117896aead01a491abbdd4adb2bc77d50237120ef71f0c572517d87bda7624688967563e7b90abda8d9ebb8743ba1ae039beaaa98511107926b41df50424bc8c580f5894812e4ede63632767352e51e5967cb92d999aadc4cb94cb61879f1c67be31cc248bb80a77c3e8c9478f167ba620ef35c3dcddee861cf82a04f08bcd35afb6744d1303d07e9dc03772a6f470962519d0eeb64b6415ef6ef9c8aa0bc078c6cd177649fc6101c90b7ed832823a1a6cbec1a9f72a95b6762827287700cb719d6e67d4d6b8451aa48a91a37ec1f7ef2c97d6010543886f41a9607c37e27c83a224e282ef44d34dfda1d0cd4ff0937fa0adcb93f6822ae74f07f8409744daf46cd9765f07f64b6128246c860dd55251509ac341e050b9f0b0247224fb82449f01fb9b6e1a10e51ebc640bf090f7ca75322c06975cd071aef86a46de01079812f6da3c1166cf3e116557aa580f546434e4dbb022c558b15f15587b587adcbbc30c733a0cf826fb07243eba06fad9225362b2f1f68366e1911a83016188f1f52a340c9acc6f2e9d3da18cd5316d4d5fb6d660555ed3f514c866bedcc2c4c2fa0c6de64b141fb4feff1209cbd21742ffff06b39455ef0672e5f870663446eb9a7b44463611380d08e8532c96a9ea56760e3aeefdc1ce55ead46c2bc5915d7ac817f997a49ed4804190b9f8183e6bca7e49a1eb6ec660c620e7ec6398b9c963616061f310932b0acb7d3f585562337371a93ae67ba4bdde3f568e708f77d7f7b9b41992a34439a41633265d56d2c5a2b93e987cd4f4261aba3613f4b23b2350699dab6c63df526a985270b59606343ee4c93e06b2e77373d45775a8eba974e3c476ad7a895e2369e95c1ce9062e15f2b1befb1f82312b047e211ffcb9947d1f42abbbb9f16c862e406f30d60b441ba3d12ee9dfb620dd80a8c4f2be81da5529d9b7c52ff5d78d22d4772b8e2511f015a891892614e4afcd79c994dd6a527234a9bd31d3d8200ef97d36cdc1b8f54bc192ba6b790913ef269425e07e308634b88b25c4ae3c10c49fd38794a49d6c86cd11ee30c9855aea389631ffb2c0c2492c424417b862b8c3c2c8eaf36b3bca3b047dcd1f239d07bec0c041a66680cc63ffe40f17a1bb525c03f8e4e11f130d39cfe6e54cf094a987c11458dc86d98eb442265c637afec439fa68b8d7e3c1022cb6cf0a4a770059627c51e85969f52d4b0e3250a2b565b9debfd4fc7be22ff97fc734141070bc69aedd5999808e0d01b05992b2b9968d9d4210223b852aed4a8c479474d8c1504e3cf8dd39d976b40d4cb3b5c70925f01def1b920d1b9c17912fba5ebd927651ba2f3f81e9d0a7e7a0eeacd9b405c3330c0baad59d074ee4652c94880c7022c95b86ef8b97bacf2341e740ecc6c7054679418c6435b1b6af9ed4946e62861a0d0f06d9673a467166622e81da7fd47cdda50fe838a83acb85d805492c49f8ab0e51be35a7c15b59a081b6d67fc1135534d514c6a8136e3c106b23d90d1efe156389a747d76410a6b1718802e6df7df18f6829c952cd50f5c44558328bc847d2405f8b59e2551b6f9c8a668d1631fe5a0a2b642df99040aecb29a0bdb86d371e5923981d15636c0a5a06f0387c4ea7b4b4f50ec51080f6d761d3a46a982a2e8e8ab4b7fd47352f3866109bf6e540e13ca1a3b8d54a4eee6f7de94c307df4cebc0d6391c47308b606468b74f3300b381cd47524189c9ed3d6d5fc929f6ad4d488f45e108acbf49ac1e261856e4043c6618e508ac75ebb6dc6143fe4b86fd5a67e2623f9e95056f4329005c7ad4c33917bf19a31db5192c96b835678d71363a5e8608c7289b1cc85a51ef70dae065d1cd0cc1c4b3b6c7483134eeb434891eb3b1d6824fca9eb89919fc34523aefed2cd3b2627297ace6b09ae1338", 0x5e1}], 0x1, &(0x7f00000005c0)}}], 0x2, 0x0) 2018/04/20 18:26:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000573fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/142) 2018/04/20 18:26:08 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x3d9, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x60, &(0x7f0000000f80), 0x0, &(0x7f0000002480)}}], 0x2, 0x0) 2018/04/20 18:26:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="130000001000ffdde200f49ff60f05001b230a009d0000000f7fcb3c189814e301000000f949a1b4b88ed4fc65be060202000000f1da8ed7c06c7e00f70000d8a43d585282cd0001e42d732747442d1f90f26af0982d800000000006518c2c681bbce9ec3c3f8612f026723affc1681de8f100c8eec8a70935b80a7f41c08ffa56b97c987c4d465ddab5439b20db0f7e5bf12930d837b9cb3349b6c440007d886959eaeb01800000000000001ad5b56d2a91e1a70000000000000000000000914393c7d8", 0xc4) 2018/04/20 18:26:08 executing program 1: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) clock_getres(0x2, &(0x7f0000000000)) mq_open(&(0x7f00000000c0)='\x00', 0x800, 0x0, &(0x7f00000001c0)={0x400, 0x100000001, 0xfc, 0x3ff, 0x90000000, 0x81, 0x5, 0xfe}) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) mq_timedreceive(r1, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) 2018/04/20 18:26:08 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76000400005f746f5f7465616d00", 0x9519}) 2018/04/20 18:26:08 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x3d9, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x60, &(0x7f0000000f80), 0x0, &(0x7f0000002480)}}], 0x2, 0x0) 2018/04/20 18:26:08 executing program 0: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00') mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) dup2(r0, r1) 2018/04/20 18:26:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="130000001000ffdde200f49ff60f05001b230a009d0000000f7fcb3c189814e301000000f949a1b4b88ed4fc65be060202000000f1da8ed7c06c7e00f70000d8a43d585282cd0001e42d732747442d1f90f26af0982d800000000006518c2c681bbce9ec3c3f8612f026723affc1681de8f100c8eec8a70935b80a7f41c08ffa56b97c987c4d465ddab5439b20db0f7e5bf12930d837b9cb3349b6c440007d886959eaeb01800000000000001ad5b56d2a91e1a70000000000000000000000914393c7d8", 0xc4) 2018/04/20 18:26:08 executing program 7: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001600)="6d82c1de7543c8518f5afa7e328e52863a00bafc071f096b0cc7d27bfe0849b66eddef929ccd1d484ae4ddd7dc139e65f6e8fc1371cde25363c79714485357084d6af3dc2dcf467aa22d5ed6480a2d486a0b51e9e362c8420981f8c4c67936ac3260a1a736faf87bd959b8ffaa50f5374e3032bf72d2363a36d9bb0dc8e1c2bc2bbf563cdc312c10d7ab620d0518644394ff1cd36f117896aead01a491abbdd4adb2bc77d50237120ef71f0c572517d87bda7624688967563e7b90abda8d9ebb8743ba1ae039beaaa98511107926b41df50424bc8c580f5894812e4ede63632767352e51e5967cb92d999aadc4cb94cb61879f1c67be31cc248bb80a77c3e8c9478f167ba620ef35c3dcddee861cf82a04f08bcd35afb6744d1303d07e9dc03772a6f470962519d0eeb64b6415ef6ef9c8aa0bc078c6cd177649fc6101c90b7ed832823a1a6cbec1a9f72a95b6762827287700cb719d6e67d4d6b8451aa48a91a37ec1f7ef2c97d6010543886f41a9607c37e27c83a224e282ef44d34dfda1d0cd4ff0937fa0adcb93f6822ae74f07f8409744daf46cd9765f07f64b6128246c860dd55251509ac341e050b9f0b0247224fb82449f01fb9b6e1a10e51ebc640bf090f7ca75322c06975cd071aef86a46de01079812f6da3c1166cf3e116557aa580f546434e4dbb022c558b15f15587b587adcbbc30c733a0cf826fb07243eba06fad9225362b2f1f68366e1911a83016188f1f52a340c9acc6f2e9d3da18cd5316d4d5fb6d660555ed3f514c866bedcc2c4c2fa0c6de64b141fb4feff1209cbd21742ffff06b39455ef0672e5f870663446eb9a7b44463611380d08e8532c96a9ea56760e3aeefdc1ce55ead46c2bc5915d7ac817f997a49ed4804190b9f8183e6bca7e49a1eb6ec660c620e7ec6398b9c963616061f310932b0acb7d3f585562337371a93ae67ba4bdde3f568e708f77d7f7b9b41992a34439a41633265d56d2c5a2b93e987cd4f4261aba3613f4b23b2350699dab6c63df526a985270b59606343ee4c93e06b2e77373d45775a8eba974e3c476ad7a895e2369e95c1ce9062e15f2b1befb1f82312b047e211ffcb9947d1f42abbbb9f16c862e406f30d60b441ba3d12ee9dfb620dd80a8c4f2be81da5529d9b7c52ff5d78d22d4772b8e2511f015a891892614e4afcd79c994dd6a527234a9bd31d3d8200ef97d36cdc1b8f54bc192ba6b790913ef269425e07e308634b88b25c4ae3c10c49fd38794a49d6c86cd11ee30c9855aea389631ffb2c0c2492c424417b862b8c3c2c8eaf36b3bca3b047dcd1f239d07bec0c041a66680cc63ffe40f17a1bb525c03f8e4e11f130d39cfe6e54cf094a987c11458dc86d98eb442265c637afec439fa68b8d7e3c1022cb6cf0a4a770059627c51e85969f52d4b0e3250a2b565b9debfd4fc7be22ff97fc734141070bc69aedd5999808e0d01b05992b2b9968d9d4210223b852aed4a8c479474d8c1504e3cf8dd39d976b40d4cb3b5c70925f01def1b920d1b9c17912fba5ebd927651ba2f3f81e9d0a7e7a0eeacd9b405c3330c0baad59d074ee4652c94880c7022c95b86ef8b97bacf2341e740ecc6c7054679418c6435b1b6af9ed4946e62861a0d0f06d9673a467166622e81da7fd47cdda50fe838a83acb85d805492c49f8ab0e51be35a7c15b59a081b6d67fc1135534d514c6a8136e3c106b23d90d1efe156389a747d76410a6b1718802e6df7df18f6829c952cd50f5c44558328bc847d2405f8b59e2551b6f9c8a668d1631fe5a0a2b642df99040aecb29a0bdb86d371e5923981d15636c0a5a06f0387c4ea7b4b4f50ec51080f6d761d3a46a982a2e8e8ab4b7fd47352f3866109bf6e540e13ca1a3b8d54a4eee6f7de94c307df4cebc0d6391c47308b606468b74f3300b381cd47524189c9ed3d6d5fc929f6ad4d488f45e108acbf49ac1e261856e4043c6618e508ac75ebb6dc6143fe4b86fd5a67e2623f9e95056f4329005c7ad4c33917bf19a31db5192c96b835678d71363a5e8608c7289b1cc85a51ef70dae065d1cd0cc1c4b3b6c7483134eeb434891eb3b1d6824fca9eb89919fc34523aefed2cd3b2627297ace6b09ae1338", 0x5e1}], 0x1, &(0x7f00000005c0)}}], 0x2, 0x0) 2018/04/20 18:26:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000012ff0)={&(0x7f000000df28)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:26:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000573fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/142) 2018/04/20 18:26:08 executing program 7: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001600)="6d82c1de7543c8518f5afa7e328e52863a00bafc071f096b0cc7d27bfe0849b66eddef929ccd1d484ae4ddd7dc139e65f6e8fc1371cde25363c79714485357084d6af3dc2dcf467aa22d5ed6480a2d486a0b51e9e362c8420981f8c4c67936ac3260a1a736faf87bd959b8ffaa50f5374e3032bf72d2363a36d9bb0dc8e1c2bc2bbf563cdc312c10d7ab620d0518644394ff1cd36f117896aead01a491abbdd4adb2bc77d50237120ef71f0c572517d87bda7624688967563e7b90abda8d9ebb8743ba1ae039beaaa98511107926b41df50424bc8c580f5894812e4ede63632767352e51e5967cb92d999aadc4cb94cb61879f1c67be31cc248bb80a77c3e8c9478f167ba620ef35c3dcddee861cf82a04f08bcd35afb6744d1303d07e9dc03772a6f470962519d0eeb64b6415ef6ef9c8aa0bc078c6cd177649fc6101c90b7ed832823a1a6cbec1a9f72a95b6762827287700cb719d6e67d4d6b8451aa48a91a37ec1f7ef2c97d6010543886f41a9607c37e27c83a224e282ef44d34dfda1d0cd4ff0937fa0adcb93f6822ae74f07f8409744daf46cd9765f07f64b6128246c860dd55251509ac341e050b9f0b0247224fb82449f01fb9b6e1a10e51ebc640bf090f7ca75322c06975cd071aef86a46de01079812f6da3c1166cf3e116557aa580f546434e4dbb022c558b15f15587b587adcbbc30c733a0cf826fb07243eba06fad9225362b2f1f68366e1911a83016188f1f52a340c9acc6f2e9d3da18cd5316d4d5fb6d660555ed3f514c866bedcc2c4c2fa0c6de64b141fb4feff1209cbd21742ffff06b39455ef0672e5f870663446eb9a7b44463611380d08e8532c96a9ea56760e3aeefdc1ce55ead46c2bc5915d7ac817f997a49ed4804190b9f8183e6bca7e49a1eb6ec660c620e7ec6398b9c963616061f310932b0acb7d3f585562337371a93ae67ba4bdde3f568e708f77d7f7b9b41992a34439a41633265d56d2c5a2b93e987cd4f4261aba3613f4b23b2350699dab6c63df526a985270b59606343ee4c93e06b2e77373d45775a8eba974e3c476ad7a895e2369e95c1ce9062e15f2b1befb1f82312b047e211ffcb9947d1f42abbbb9f16c862e406f30d60b441ba3d12ee9dfb620dd80a8c4f2be81da5529d9b7c52ff5d78d22d4772b8e2511f015a891892614e4afcd79c994dd6a527234a9bd31d3d8200ef97d36cdc1b8f54bc192ba6b790913ef269425e07e308634b88b25c4ae3c10c49fd38794a49d6c86cd11ee30c9855aea389631ffb2c0c2492c424417b862b8c3c2c8eaf36b3bca3b047dcd1f239d07bec0c041a66680cc63ffe40f17a1bb525c03f8e4e11f130d39cfe6e54cf094a987c11458dc86d98eb442265c637afec439fa68b8d7e3c1022cb6cf0a4a770059627c51e85969f52d4b0e3250a2b565b9debfd4fc7be22ff97fc734141070bc69aedd5999808e0d01b05992b2b9968d9d4210223b852aed4a8c479474d8c1504e3cf8dd39d976b40d4cb3b5c70925f01def1b920d1b9c17912fba5ebd927651ba2f3f81e9d0a7e7a0eeacd9b405c3330c0baad59d074ee4652c94880c7022c95b86ef8b97bacf2341e740ecc6c7054679418c6435b1b6af9ed4946e62861a0d0f06d9673a467166622e81da7fd47cdda50fe838a83acb85d805492c49f8ab0e51be35a7c15b59a081b6d67fc1135534d514c6a8136e3c106b23d90d1efe156389a747d76410a6b1718802e6df7df18f6829c952cd50f5c44558328bc847d2405f8b59e2551b6f9c8a668d1631fe5a0a2b642df99040aecb29a0bdb86d371e5923981d15636c0a5a06f0387c4ea7b4b4f50ec51080f6d761d3a46a982a2e8e8ab4b7fd47352f3866109bf6e540e13ca1a3b8d54a4eee6f7de94c307df4cebc0d6391c47308b606468b74f3300b381cd47524189c9ed3d6d5fc929f6ad4d488f45e108acbf49ac1e261856e4043c6618e508ac75ebb6dc6143fe4b86fd5a67e2623f9e95056f4329005c7ad4c33917bf19a31db5192c96b835678d71363a5e8608c7289b1cc85a51ef70dae065d1cd0cc1c4b3b6c7483134eeb434891eb3b1d6824fca9eb89919fc34523aefed2cd3b2627297ace6b09ae1338", 0x5e1}], 0x1, &(0x7f00000005c0)}}], 0x2, 0x0) 2018/04/20 18:26:08 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x3d9, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x60, &(0x7f0000000f80), 0x0, &(0x7f0000002480)}}], 0x2, 0x0) 2018/04/20 18:26:08 executing program 1: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa}) 2018/04/20 18:26:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/04/20 18:26:08 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76000400005f746f5f7465616d00", 0x9519}) 2018/04/20 18:26:08 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000b00)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/04/20 18:26:08 executing program 0: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00') mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) dup2(r0, r1) 2018/04/20 18:26:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000573fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/142) 2018/04/20 18:26:08 executing program 1: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa}) 2018/04/20 18:26:08 executing program 7: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001600)="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", 0x5e1}], 0x1, &(0x7f00000005c0)}}], 0x2, 0x0) 2018/04/20 18:26:09 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/04/20 18:26:09 executing program 1: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa}) 2018/04/20 18:26:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000553000)=[{&(0x7f0000c0c000)="580000001400190000bb4b01040d8c56020600000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007ffff51000174100005bffff001ce1ed900000000000000006b736231be86efd121f00ec6b0f536e", 0x58}], 0x1) 2018/04/20 18:26:09 executing program 1: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa}) 2018/04/20 18:26:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76000400005f746f5f7465616d00", 0x9519}) 2018/04/20 18:26:09 executing program 0: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00') mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) dup2(r0, r1) 2018/04/20 18:26:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000553000)=[{&(0x7f0000c0c000)="580000001400190000bb4b01040d8c56020600000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007ffff51000174100005bffff001ce1ed900000000000000006b736231be86efd121f00ec6b0f536e", 0x58}], 0x1) 2018/04/20 18:26:09 executing program 7: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) writev(r0, &(0x7f0000001ac0), 0x0) 2018/04/20 18:26:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000573fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/142) 2018/04/20 18:26:09 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0xa, &(0x7f0000000080)) 2018/04/20 18:26:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/04/20 18:26:09 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/04/20 18:26:09 executing program 1: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/04/20 18:26:09 executing program 7: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) writev(r0, &(0x7f0000001ac0), 0x0) 2018/04/20 18:26:09 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0xa, &(0x7f0000000080)) 2018/04/20 18:26:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000553000)=[{&(0x7f0000c0c000)="580000001400190000bb4b01040d8c56020600000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007ffff51000174100005bffff001ce1ed900000000000000006b736231be86efd121f00ec6b0f536e", 0x58}], 0x1) 2018/04/20 18:26:09 executing program 7: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) writev(r0, &(0x7f0000001ac0), 0x0) 2018/04/20 18:26:09 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0xa, &(0x7f0000000080)) 2018/04/20 18:26:09 executing program 7: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) writev(r0, &(0x7f0000001ac0), 0x0) 2018/04/20 18:26:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000553000)=[{&(0x7f0000c0c000)="580000001400190000bb4b01040d8c56020600000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007ffff51000174100005bffff001ce1ed900000000000000006b736231be86efd121f00ec6b0f536e", 0x58}], 0x1) 2018/04/20 18:26:09 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0xa, &(0x7f0000000080)) 2018/04/20 18:26:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/04/20 18:26:10 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x106}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'gre0\x00', 0x400}) 2018/04/20 18:26:10 executing program 4: capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) 2018/04/20 18:26:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/04/20 18:26:10 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/04/20 18:26:10 executing program 0: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00') mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) dup2(r0, r1) 2018/04/20 18:26:10 executing program 1: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/04/20 18:26:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1=0xe0000001, @in=@multicast2=0xe0000002}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8) 2018/04/20 18:26:10 executing program 4: capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) 2018/04/20 18:26:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/04/20 18:26:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1=0xe0000001, @in=@multicast2=0xe0000002}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8) 2018/04/20 18:26:10 executing program 4: capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) 2018/04/20 18:26:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/04/20 18:26:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1=0xe0000001, @in=@multicast2=0xe0000002}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8) 2018/04/20 18:26:10 executing program 4: capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) 2018/04/20 18:26:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1=0xe0000001, @in=@multicast2=0xe0000002}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8) 2018/04/20 18:26:11 executing program 1: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/04/20 18:26:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 2018/04/20 18:26:11 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r1, r0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:11 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x106}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'gre0\x00', 0x400}) 2018/04/20 18:26:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/04/20 18:26:11 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 2018/04/20 18:26:11 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a184ce452bddd6637aedad4b3921b677e112d6fd319127a87f645594e08128442a4e0d403a9ff7da5f8808e70b54e610a758a18093c49d273ae74b7a7961a228b2972638b053d") ioctl$DRM_IOCTL_RES_CTX(r2, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) 2018/04/20 18:26:11 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000080), 0x0) 2018/04/20 18:26:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/20 18:26:11 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a184ce452bddd6637aedad4b3921b677e112d6fd319127a87f645594e08128442a4e0d403a9ff7da5f8808e70b54e610a758a18093c49d273ae74b7a7961a228b2972638b053d") ioctl$DRM_IOCTL_RES_CTX(r2, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) 2018/04/20 18:26:11 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x106}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'gre0\x00', 0x400}) 2018/04/20 18:26:11 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a184ce452bddd6637aedad4b3921b677e112d6fd319127a87f645594e08128442a4e0d403a9ff7da5f8808e70b54e610a758a18093c49d273ae74b7a7961a228b2972638b053d") ioctl$DRM_IOCTL_RES_CTX(r2, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) 2018/04/20 18:26:11 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a184ce452bddd6637aedad4b3921b677e112d6fd319127a87f645594e08128442a4e0d403a9ff7da5f8808e70b54e610a758a18093c49d273ae74b7a7961a228b2972638b053d") ioctl$DRM_IOCTL_RES_CTX(r2, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) 2018/04/20 18:26:11 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a184ce452bddd6637aedad4b3921b677e112d6fd319127a87f645594e08128442a4e0d403a9ff7da5f8808e70b54e610a758a18093c49d273ae74b7a7961a228b2972638b053d") ioctl$DRM_IOCTL_RES_CTX(r2, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) 2018/04/20 18:26:11 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x106}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'gre0\x00', 0x400}) 2018/04/20 18:26:11 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a184ce452bddd6637aedad4b3921b677e112d6fd319127a87f645594e08128442a4e0d403a9ff7da5f8808e70b54e610a758a18093c49d273ae74b7a7961a228b2972638b053d") ioctl$DRM_IOCTL_RES_CTX(r2, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) 2018/04/20 18:26:12 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0x7) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a184ce452bddd6637aedad4b3921b677e112d6fd319127a87f645594e08128442a4e0d403a9ff7da5f8808e70b54e610a758a18093c49d273ae74b7a7961a228b2972638b053d") ioctl$DRM_IOCTL_RES_CTX(r2, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) 2018/04/20 18:26:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012d00)) 2018/04/20 18:26:12 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') fcntl$notify(r0, 0x402, 0x24) unlinkat(r0, &(0x7f0000000200)='./file1\x00', 0x0) 2018/04/20 18:26:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000580)) 2018/04/20 18:26:12 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r1, r0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/20 18:26:12 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000080), 0x0) 2018/04/20 18:26:12 executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r1, r0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000580)) 2018/04/20 18:26:12 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') fcntl$notify(r0, 0x402, 0x24) unlinkat(r0, &(0x7f0000000200)='./file1\x00', 0x0) 2018/04/20 18:26:12 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') fcntl$notify(r0, 0x402, 0x24) unlinkat(r0, &(0x7f0000000200)='./file1\x00', 0x0) 2018/04/20 18:26:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000580)) 2018/04/20 18:26:12 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') fcntl$notify(r0, 0x402, 0x24) unlinkat(r0, &(0x7f0000000200)='./file1\x00', 0x0) 2018/04/20 18:26:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000580)) 2018/04/20 18:26:12 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) getsockopt$sock_int(r0, 0x1, 0x1c, &(0x7f0000000080), &(0x7f0000000200)=0x4) 2018/04/20 18:26:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x5}}) 2018/04/20 18:26:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004523, &(0x7f0000000380)) 2018/04/20 18:26:13 executing program 1: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000140), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012d00)) 2018/04/20 18:26:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004523, &(0x7f0000000380)) 2018/04/20 18:26:13 executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r1, r0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/20 18:26:13 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r1, r0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:13 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000080), 0x0) 2018/04/20 18:26:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x5}}) 2018/04/20 18:26:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x5}}) 2018/04/20 18:26:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x5}}) 2018/04/20 18:26:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012d00)) 2018/04/20 18:26:13 executing program 1: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000140), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004523, &(0x7f0000000380)) 2018/04/20 18:26:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012d00)) 2018/04/20 18:26:13 executing program 1: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000140), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) [ 76.960238] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 3, id = 0 2018/04/20 18:26:13 executing program 1: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000140), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) [ 77.074487] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 3, id = 0 2018/04/20 18:26:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004523, &(0x7f0000000380)) 2018/04/20 18:26:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:14 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r1, r0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:14 executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r1, r0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/04/20 18:26:14 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000080), 0x0) 2018/04/20 18:26:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/20 18:26:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x200000004e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0xfffffffffffffffc, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) [ 77.851995] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 3, id = 0 2018/04/20 18:26:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x200000004e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0xfffffffffffffffc, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) 2018/04/20 18:26:14 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='0', 0x1) 2018/04/20 18:26:14 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='0', 0x1) 2018/04/20 18:26:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x200000004e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0xfffffffffffffffc, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) 2018/04/20 18:26:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x200000004e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0xfffffffffffffffc, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) 2018/04/20 18:26:14 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='0', 0x1) 2018/04/20 18:26:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x14) 2018/04/20 18:26:15 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='0', 0x1) 2018/04/20 18:26:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000007c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpgid(0x0) waitid(0x2, r2, &(0x7f0000000040), 0x1, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xe, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="56515256b11fb53935757357722e242700a9e26ea72e2c99abfbf12b75fc11fe5739eeec72c5d18694ee4bf11f367f605819e43e58a4302ceaacbb7c5b46ff025d0f0a2e5a44de2fcd5bce36c6df03e0a82a523b948fb1da777a389ca6a3be5ac70ce1c04f28b1b5d1cac805a95cdc"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0xffffffffffffffc6, 0x3, 0x7}, {0x6, 0x0, 0x440d, 0x45}, {0x20, 0x0, 0x6, 0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_0\x00', 0x3}, 0x18) 2018/04/20 18:26:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/142, 0x8e}], 0x2, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/20 18:26:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@setneightbl={0x14, 0x43, 0x5d4f717c9232a26d}, 0x14}, 0x1}, 0x0) 2018/04/20 18:26:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)=0x30e) 2018/04/20 18:26:15 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0x7) 2018/04/20 18:26:15 executing program 6: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/04/20 18:26:15 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0x7) 2018/04/20 18:26:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x14) 2018/04/20 18:26:15 executing program 5: r0 = creat(&(0x7f0000d26000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000d4bfe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="0200000001a5180040000000", 0xc, 0x0) 2018/04/20 18:26:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@setneightbl={0x14, 0x43, 0x5d4f717c9232a26d}, 0x14}, 0x1}, 0x0) 2018/04/20 18:26:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)=0x30e) [ 78.818154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 78.843969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 78.899941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 78.913257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 78.922591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 78.931586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 78.940431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/20 18:26:15 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0x7) 2018/04/20 18:26:15 executing program 6: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/04/20 18:26:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x14) 2018/04/20 18:26:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@setneightbl={0x14, 0x43, 0x5d4f717c9232a26d}, 0x14}, 0x1}, 0x0) 2018/04/20 18:26:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)=0x30e) 2018/04/20 18:26:15 executing program 5: r0 = creat(&(0x7f0000d26000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000d4bfe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="0200000001a5180040000000", 0xc, 0x0) 2018/04/20 18:26:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/142, 0x8e}], 0x2, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/20 18:26:15 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/142, 0x8e}], 0x2, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/20 18:26:15 executing program 6: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/04/20 18:26:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@setneightbl={0x14, 0x43, 0x5d4f717c9232a26d}, 0x14}, 0x1}, 0x0) 2018/04/20 18:26:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)=0x30e) 2018/04/20 18:26:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x14) 2018/04/20 18:26:15 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0x7) 2018/04/20 18:26:15 executing program 5: r0 = creat(&(0x7f0000d26000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000d4bfe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="0200000001a5180040000000", 0xc, 0x0) 2018/04/20 18:26:15 executing program 6: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) [ 79.014375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 79.049674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/20 18:26:15 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/142, 0x8e}], 0x2, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/20 18:26:15 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:systemd_passwd_agent_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x35}, 0x59) 2018/04/20 18:26:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2c, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0xfffffffffffffff9, 0x0, {@broadcast=0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@random=0x4, @random="f5f87ef0efc9"}}}}}, &(0x7f0000000000)) 2018/04/20 18:26:15 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f00000005c0)="a24f3671a5299d3abc513edaf12dcc36412a515ac93ef05183bf57ae04a923fd9cf42cbb1c6ef9536b096bfa20ba6f5b46cd77bd8192c19c65d334ab853570658e7225dac6b0537fcf0f6d501eff75fa9dc358afe8084ee3599991968437dbc265377a509bc73bff1687cf84787bb0db3faa474c05daf79b3a8649424a6f9439297efbe8d43ddaa8309bdbcaa84c7ab46f3ca20a0a73b571e225cdbb0180929b130f08c51518f2acb7a7748ddf6331760b11c847b483e6e0ffe19bf8d8849b66dde89bf75f165cecbc8e72a40ed3dbe03e245313839b8f4f0864bb051a9cf836af1a30179fff986170c78acc0d891046b03c980266d50a5d0169ad3f61d605562c29565e71644c80def7da598bced658d3438606d64e4db3aabdbe051c03bc6d00722c509d1df568b9c1e8f58f8c52545ddeff98952e84b5187b1ca744150dd08443e604b0004c43fdd71d5b42a690287b69b18668b28440057b1fc58fe73f2083e9f96e988bb84ce7afa798fc93f627c5f92a0f9cf611e74452b46de420c47c42fa7fab9e740696db08f5908bcd09403e407ddfd18f043bfbe0262e552a4b33612dc4f0c732c913ab2847a8d2a6d977257bc57dba0bb647edb84cada4e5e903325da13f3abfc3ec53001055a6b375cf978f3dd4af5d5c41bc7378d8a056914502fc14eb02c7d04ffa8407215100f448c5e6ceb2f808e22ee83a502ffaff5a51", 0x200}]) 2018/04/20 18:26:15 executing program 5: r0 = creat(&(0x7f0000d26000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000d4bfe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="0200000001a5180040000000", 0xc, 0x0) 2018/04/20 18:26:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/142, 0x8e}], 0x2, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/20 18:26:15 executing program 0: r0 = socket(0x10, 0x8000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='M', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, r1, 0x0) 2018/04/20 18:26:15 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0x0, 0x0) [ 79.067835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/20 18:26:15 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/142, 0x8e}], 0x2, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/20 18:26:15 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:systemd_passwd_agent_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x35}, 0x59) 2018/04/20 18:26:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/142, 0x8e}], 0x2, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/20 18:26:15 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x47e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0xf6}], 0x30) 2018/04/20 18:26:15 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0x0, 0x0) 2018/04/20 18:26:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) 2018/04/20 18:26:15 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:systemd_passwd_agent_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x35}, 0x59) 2018/04/20 18:26:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/71, 0x2}], 0x1, 0x7ffffffffffffffb) 2018/04/20 18:26:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x200000000001) 2018/04/20 18:26:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x50, r1, 0x27, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty={[0xfc]}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x50}, 0x1}, 0x0) [ 79.186187] Dev loop7: unable to read RDB block 1 [ 79.191099] loop7: unable to read partition table [ 79.223868] loop7: partition table beyond EOD, truncated [ 79.239671] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 79.314424] Dev loop7: unable to read RDB block 1 [ 79.319368] loop7: unable to read partition table [ 79.324595] loop7: partition table beyond EOD, truncated [ 79.330181] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) 2018/04/20 18:26:16 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0x0, 0x0) 2018/04/20 18:26:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/71, 0x2}], 0x1, 0x7ffffffffffffffb) 2018/04/20 18:26:16 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:systemd_passwd_agent_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x35}, 0x59) 2018/04/20 18:26:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) 2018/04/20 18:26:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x200000000001) 2018/04/20 18:26:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x47e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0xf6}], 0x30) 2018/04/20 18:26:16 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f00000005c0)="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", 0x200}]) 2018/04/20 18:26:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x50, r1, 0x27, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty={[0xfc]}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x50}, 0x1}, 0x0) 2018/04/20 18:26:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/71, 0x2}], 0x1, 0x7ffffffffffffffb) 2018/04/20 18:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190710003fffffffda0602000080ff0f0001040000040d000600000000000000000001", 0x29}], 0x1) 2018/04/20 18:26:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) 2018/04/20 18:26:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x200000000001) 2018/04/20 18:26:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x50, r1, 0x27, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty={[0xfc]}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x50}, 0x1}, 0x0) 2018/04/20 18:26:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x47e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0xf6}], 0x30) 2018/04/20 18:26:16 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0x0, 0x0) [ 79.436977] Dev loop7: unable to read RDB block 1 [ 79.442888] loop7: unable to read partition table 2018/04/20 18:26:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) 2018/04/20 18:26:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/71, 0x2}], 0x1, 0x7ffffffffffffffb) 2018/04/20 18:26:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x200000000001) 2018/04/20 18:26:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x50, r1, 0x27, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty={[0xfc]}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x50}, 0x1}, 0x0) 2018/04/20 18:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190710003fffffffda0602000080ff0f0001040000040d000600000000000000000001", 0x29}], 0x1) 2018/04/20 18:26:16 executing program 6: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x0, 0x0, 0x1}) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/20 18:26:16 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f00000005c0)="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", 0x200}]) 2018/04/20 18:26:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x47e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0xf6}], 0x30) 2018/04/20 18:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190710003fffffffda0602000080ff0f0001040000040d000600000000000000000001", 0x29}], 0x1) 2018/04/20 18:26:16 executing program 0: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000040)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) 2018/04/20 18:26:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="a22c10", 0x3}], 0x1, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="8775", 0x2}], 0x1, &(0x7f0000000200)}, 0x0) 2018/04/20 18:26:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) [ 79.478475] loop7: partition table beyond EOD, truncated [ 79.486094] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) 2018/04/20 18:26:16 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9d6}, 0x4) getcwd(&(0x7f0000004580)=""/210, 0xd2) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/167, 0xa7, 0x6}, 0x7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/47, 0x2f}], 0x1, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x3, &(0x7f0000004240)=""/178, 0xb2}, 0x7}], 0x4, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) [ 79.584674] Dev loop7: unable to read RDB block 1 [ 79.591126] loop7: unable to read partition table [ 79.608899] loop7: partition table beyond EOD, [ 79.609696] hrtimer: interrupt took 25761 ns [ 79.617946] truncated [ 79.621378] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 79.695442] PPPIOCDETACH file->f_count=2 2018/04/20 18:26:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/20 18:26:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190710003fffffffda0602000080ff0f0001040000040d000600000000000000000001", 0x29}], 0x1) 2018/04/20 18:26:17 executing program 6: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x0, 0x0, 0x1}) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/20 18:26:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="a22c10", 0x3}], 0x1, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="8775", 0x2}], 0x1, &(0x7f0000000200)}, 0x0) 2018/04/20 18:26:17 executing program 0: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000040)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) 2018/04/20 18:26:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9d6}, 0x4) getcwd(&(0x7f0000004580)=""/210, 0xd2) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/167, 0xa7, 0x6}, 0x7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/47, 0x2f}], 0x1, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x3, &(0x7f0000004240)=""/178, 0xb2}, 0x7}], 0x4, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) 2018/04/20 18:26:17 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:17 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f00000005c0)="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", 0x200}]) 2018/04/20 18:26:17 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/20 18:26:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="a22c10", 0x3}], 0x1, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="8775", 0x2}], 0x1, &(0x7f0000000200)}, 0x0) 2018/04/20 18:26:17 executing program 0: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000040)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) 2018/04/20 18:26:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9d6}, 0x4) getcwd(&(0x7f0000004580)=""/210, 0xd2) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/167, 0xa7, 0x6}, 0x7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/47, 0x2f}], 0x1, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x3, &(0x7f0000004240)=""/178, 0xb2}, 0x7}], 0x4, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) 2018/04/20 18:26:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="a22c10", 0x3}], 0x1, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="8775", 0x2}], 0x1, &(0x7f0000000200)}, 0x0) 2018/04/20 18:26:17 executing program 6: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x0, 0x0, 0x1}) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/20 18:26:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/20 18:26:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9d6}, 0x4) getcwd(&(0x7f0000004580)=""/210, 0xd2) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/167, 0xa7, 0x6}, 0x7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/47, 0x2f}], 0x1, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x3, &(0x7f0000004240)=""/178, 0xb2}, 0x7}], 0x4, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) [ 80.482463] Dev loop7: unable to read RDB block 1 [ 80.485709] PPPIOCDETACH file->f_count=2 [ 80.510763] loop7: unable to read partition table [ 80.541996] loop7: partition table beyond EOD, [ 80.554967] PPPIOCDETACH file->f_count=2 [ 80.573753] truncated [ 80.577887] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) 2018/04/20 18:26:18 executing program 0: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000040)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) 2018/04/20 18:26:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9d6}, 0x4) getcwd(&(0x7f0000004580)=""/210, 0xd2) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/167, 0xa7, 0x6}, 0x7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/47, 0x2f}], 0x1, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x3, &(0x7f0000004240)=""/178, 0xb2}, 0x7}], 0x4, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) 2018/04/20 18:26:18 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:18 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:18 executing program 6: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x0, 0x0, 0x1}) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/20 18:26:18 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:18 executing program 7: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000040)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) 2018/04/20 18:26:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003ff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000300000000000000000020000000000000000000060000000001e000000100000000000000da2fde7b8c37aec6000000efffffff000000000000030006000000000002000000ac14ffbb000000000000000003000500000000000200e6ffab14ffbb00000000000000000400030000000000000000000000000000000000cf0000000000000000000000"], 0xa0}, 0x1}, 0x0) 2018/04/20 18:26:18 executing program 7: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000040)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) 2018/04/20 18:26:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9d6}, 0x4) getcwd(&(0x7f0000004580)=""/210, 0xd2) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/167, 0xa7, 0x6}, 0x7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/47, 0x2f}], 0x1, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x3, &(0x7f0000004240)=""/178, 0xb2}, 0x7}], 0x4, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) 2018/04/20 18:26:18 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@overriderock='overriderockperm', 0x2c}]}) 2018/04/20 18:26:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x6e4}}, @IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x40}, 0x1}, 0x0) 2018/04/20 18:26:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x9d6}, 0x4) getcwd(&(0x7f0000004580)=""/210, 0xd2) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/167, 0xa7, 0x6}, 0x7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/47, 0x2f}], 0x1, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x3, &(0x7f0000004240)=""/178, 0xb2}, 0x7}], 0x4, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) 2018/04/20 18:26:18 executing program 3: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0xfffffffffffffffa}) 2018/04/20 18:26:18 executing program 7: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000040)) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/116, 0xfded) [ 81.348228] ISOFS: Unable to identify CD-ROM format. [ 81.424287] PPPIOCDETACH file->f_count=2 [ 81.436556] ISOFS: Unable to identify CD-ROM format. [ 81.564248] PPPIOCDETACH file->f_count=2 [ 81.624319] PPPIOCDETACH file->f_count=2 2018/04/20 18:26:18 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:18 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='ns/pid\x00') setns(r0, 0x0) 2018/04/20 18:26:18 executing program 7: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x0, 0x0) 2018/04/20 18:26:18 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@overriderock='overriderockperm', 0x2c}]}) 2018/04/20 18:26:18 executing program 3: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0xfffffffffffffffa}) 2018/04/20 18:26:18 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:18 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:18 executing program 5: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0xfffffffffffffffa}) 2018/04/20 18:26:18 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='ns/pid\x00') setns(r0, 0x0) 2018/04/20 18:26:18 executing program 7: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x0, 0x0) 2018/04/20 18:26:18 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='ns/pid\x00') setns(r0, 0x0) [ 82.163503] ISOFS: Unable to identify CD-ROM format. 2018/04/20 18:26:18 executing program 7: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x0, 0x0) 2018/04/20 18:26:19 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='ns/pid\x00') setns(r0, 0x0) 2018/04/20 18:26:19 executing program 3: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0xfffffffffffffffa}) 2018/04/20 18:26:19 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@overriderock='overriderockperm', 0x2c}]}) 2018/04/20 18:26:19 executing program 7: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x0, 0x0) [ 82.307927] PPPIOCDETACH file->f_count=2 [ 82.331826] ISOFS: Unable to identify CD-ROM format. [ 82.404752] PPPIOCDETACH file->f_count=2 [ 82.484349] PPPIOCDETACH file->f_count=2 2018/04/20 18:26:19 executing program 3: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0xfffffffffffffffa}) 2018/04/20 18:26:19 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80, 0x800) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000340)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00007b6ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000412f0a)=""/246) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/91, &(0x7f0000000080)=0x5b) ioctl$EVIOCGREP(r2, 0x4004743c, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3}, &(0x7f0000000580)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/110) getrandom(&(0x7f0000000480)=""/80, 0x50, 0x2) 2018/04/20 18:26:19 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) 2018/04/20 18:26:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/20 18:26:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) 2018/04/20 18:26:19 executing program 5: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0xfffffffffffffffa}) 2018/04/20 18:26:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f1fffefffffe03edf8fef5dd00000010000100000a0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/20 18:26:19 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@overriderock='overriderockperm', 0x2c}]}) 2018/04/20 18:26:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f1fffefffffe03edf8fef5dd00000010000100000a0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/20 18:26:19 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) [ 82.982005] EXT4-fs (loop7): bad geometry: block count 2048 exceeds size of device (2 blocks) 2018/04/20 18:26:19 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) 2018/04/20 18:26:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f1fffefffffe03edf8fef5dd00000010000100000a0900fcff4d00040e05a5", 0x58}], 0x1) [ 83.024988] ISOFS: Unable to identify CD-ROM format. 2018/04/20 18:26:19 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) 2018/04/20 18:26:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f1fffefffffe03edf8fef5dd00000010000100000a0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/20 18:26:19 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) [ 83.061437] EXT4-fs (loop7): bad geometry: block count 2048 exceeds size of device (2 blocks) 2018/04/20 18:26:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) [ 83.189556] EXT4-fs (loop7): bad geometry: block count 2048 exceeds size of device (2 blocks) [ 83.234903] PPPIOCDETACH file->f_count=2 2018/04/20 18:26:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f00000003c0)='U', 0x1, 0x0, 0x0, 0x0) 2018/04/20 18:26:20 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f0000eabe80)=""/384, 0x24c) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffff7fffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) dup3(r1, r0, 0x0) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/20 18:26:20 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) 2018/04/20 18:26:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) 2018/04/20 18:26:20 executing program 5: perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0xfffffffffffffffa}) 2018/04/20 18:26:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) 2018/04/20 18:26:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff2c, 0x0, &(0x7f0000000040)={0x2}, 0x3) 2018/04/20 18:26:20 executing program 2: r0 = eventfd2(0x0, 0x800) ppoll(&(0x7f0000a61000)=[{r0}], 0x1, &(0x7f000012bff0)={0x77359400}, &(0x7f0000025000), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000dafff7)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x400000ff) 2018/04/20 18:26:20 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x1, &(0x7f0000000000)) 2018/04/20 18:26:20 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0xdcc3bd5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x380, 0x4) sendto$inet6(r0, &(0x7f0000000200)="0400000000e3cd682c46", 0xa, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80}}, 0x1c) 2018/04/20 18:26:20 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000004ac0)=@nfc, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/106, 0x6a}}], 0x1, 0x0, &(0x7f0000004e40)) [ 83.796346] EXT4-fs (loop7): bad geometry: block count 2048 exceeds size of device (2 blocks) 2018/04/20 18:26:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/20 18:26:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff2c, 0x0, &(0x7f0000000040)={0x2}, 0x3) 2018/04/20 18:26:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) 2018/04/20 18:26:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff2c, 0x0, &(0x7f0000000040)={0x2}, 0x3) 2018/04/20 18:26:20 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000004ac0)=@nfc, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/106, 0x6a}}], 0x1, 0x0, &(0x7f0000004e40)) 2018/04/20 18:26:20 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000004ac0)=@nfc, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/106, 0x6a}}], 0x1, 0x0, &(0x7f0000004e40)) [ 83.910429] binder: 10737:10740 ERROR: BC_REGISTER_LOOPER called without request [ 83.918373] EXT4-fs (loop7): bad geometry: block count 2048 exceeds size of device (2 blocks) [ 84.689560] binder: release 10737:10740 transaction 17 out, still active [ 84.696444] binder: release 10737:10740 transaction 16 in, still active [ 84.703247] binder: undelivered TRANSACTION_COMPLETE [ 84.738442] binder: 10737:10768 got new transaction with bad transaction stack, transaction 16 has target 0:0 [ 84.749198] binder: 10737:10768 transaction failed 29201/-71, size 0-0 line 3037 [ 84.862792] binder: BINDER_SET_CONTEXT_MGR already set [ 84.868456] binder: 10737:10772 ioctl 40046207 0 returned -16 [ 84.877737] binder: 10737:10768 ERROR: BC_REGISTER_LOOPER called without request [ 84.877751] binder_alloc: 10737: binder_alloc_buf, no vma [ 84.877771] binder: 10737:10772 transaction failed 29189/-3, size 0-0 line 3133 [ 84.901606] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.901624] binder_alloc: 10737: binder_alloc_buf, no vma 2018/04/20 18:26:21 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0xdcc3bd5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x380, 0x4) sendto$inet6(r0, &(0x7f0000000200)="0400000000e3cd682c46", 0xa, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80}}, 0x1c) 2018/04/20 18:26:21 executing program 2: r0 = eventfd2(0x0, 0x800) ppoll(&(0x7f0000a61000)=[{r0}], 0x1, &(0x7f000012bff0)={0x77359400}, &(0x7f0000025000), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000dafff7)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x400000ff) 2018/04/20 18:26:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x0, {{0x2}}, 0x0, 0x5, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @rand_addr}}, {{0x2}}, {{0x2, 0x0, @multicast2=0xe0000002}}]}, 0x85f) 2018/04/20 18:26:21 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/20 18:26:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff2c, 0x0, &(0x7f0000000040)={0x2}, 0x3) 2018/04/20 18:26:21 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000004ac0)=@nfc, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/106, 0x6a}}], 0x1, 0x0, &(0x7f0000004e40)) 2018/04/20 18:26:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/20 18:26:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 84.901642] binder: 10737:10768 transaction failed 29189/-3, size 0-0 line 3133 [ 84.928629] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.934349] binder: release 10737:10768 transaction 16 out, still active [ 84.941783] binder: undelivered TRANSACTION_COMPLETE [ 84.951804] binder: send failed reply for transaction 17, target dead 2018/04/20 18:26:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/20 18:26:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x0, {{0x2}}, 0x0, 0x5, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @rand_addr}}, {{0x2}}, {{0x2, 0x0, @multicast2=0xe0000002}}]}, 0x85f) 2018/04/20 18:26:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)}, 0x0) [ 84.969558] binder: send failed reply for transaction 16, target dead [ 84.985470] binder: 10783:10789 ERROR: BC_REGISTER_LOOPER called without request [ 85.000339] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/20 18:26:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x0, {{0x2}}, 0x0, 0x5, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @rand_addr}}, {{0x2}}, {{0x2, 0x0, @multicast2=0xe0000002}}]}, 0x85f) 2018/04/20 18:26:21 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/20 18:26:21 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0xdcc3bd5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x380, 0x4) sendto$inet6(r0, &(0x7f0000000200)="0400000000e3cd682c46", 0xa, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80}}, 0x1c) 2018/04/20 18:26:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x0, {{0x2}}, 0x0, 0x5, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @rand_addr}}, {{0x2}}, {{0x2, 0x0, @multicast2=0xe0000002}}]}, 0x85f) 2018/04/20 18:26:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 85.000347] binder: 10792:10793 ioctl 40046207 0 returned -16 [ 85.000958] binder: 10792:10793 ERROR: BC_REGISTER_LOOPER called without request [ 85.064394] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/20 18:26:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 85.780904] binder: release 10783:10789 transaction 23 out, still active [ 85.787808] binder: release 10783:10789 transaction 22 in, still active [ 85.794913] binder: undelivered TRANSACTION_COMPLETE [ 85.798153] binder: 10792:10825 got new transaction with bad transaction stack, transaction 24 has target 10783:0 [ 85.798164] binder: 10792:10825 transaction failed 29201/-71, size 0-0 line 3037 [ 85.801603] binder: release 10792:10825 transaction 24 out, still active [ 85.801606] binder: undelivered TRANSACTION_COMPLETE [ 85.801613] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.847843] binder: release 10783:10824 transaction 26 in, still active [ 85.854762] binder: send failed reply for transaction 26 to 10783:10824 [ 85.864022] ================================================================== [ 85.871392] BUG: KASAN: use-after-free in __list_del_entry+0x1a9/0x1c0 [ 85.878040] Read of size 8 at addr ffff8801d92ecd10 by task kworker/1:0/18 [ 85.885025] [ 85.886643] CPU: 1 PID: 18 Comm: kworker/1:0 Not tainted 4.9.95-g13cc540 #2 [ 85.893725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.903072] Workqueue: events binder_deferred_func [ 85.908091] ffff8801d9bd7a58 ffffffff81eb0ba9 ffffea000764bb00 ffff8801d92ecd10 [ 85.916095] 0000000000000000 ffff8801d92ecd10 ffffed0038bf5949 ffff8801d9bd7a90 [ 85.924091] ffffffff815653cb ffff8801d92ecd10 0000000000000008 0000000000000000 [ 85.932090] Call Trace: [ 85.934654] [] dump_stack+0xc1/0x128 [ 85.940000] [] print_address_description+0x6c/0x234 [ 85.946646] [] kasan_report.cold.6+0x242/0x2fe [ 85.952869] [] ? __list_del_entry+0x1a9/0x1c0 [ 85.959003] [] __asan_report_load8_noabort+0x14/0x20 [ 85.965755] [] __list_del_entry+0x1a9/0x1c0 [ 85.971724] [] binder_release_work+0x6f/0x1d0 2018/04/20 18:26:22 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/20 18:26:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/20 18:26:22 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/20 18:26:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/20 18:26:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)}, 0x0) 2018/04/20 18:26:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="200a4f7d2cd3cf681df3e40f9a52c906790667ea55684d1647b5e62cd403c20cdc7d576f7ea8e978c8aec8834536b5140fed9f16c9c0763033919c342ff0084dd944f0455006071b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000500)='j'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/20 18:26:22 executing program 2: r0 = eventfd2(0x0, 0x800) ppoll(&(0x7f0000a61000)=[{r0}], 0x1, &(0x7f000012bff0)={0x77359400}, &(0x7f0000025000), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000dafff7)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x400000ff) 2018/04/20 18:26:22 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0xdcc3bd5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x380, 0x4) sendto$inet6(r0, &(0x7f0000000200)="0400000000e3cd682c46", 0xa, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80}}, 0x1c) [ 85.975615] binder: 10834:10841 ERROR: BC_REGISTER_LOOPER called without request [ 85.977557] binder: BINDER_SET_CONTEXT_MGR already set [ 85.977564] binder: 10838:10842 ioctl 40046207 0 returned -16 [ 85.978079] binder: 10838:10842 ERROR: BC_REGISTER_LOOPER called without request [ 86.004003] [] ? binder_send_failed_reply+0x1c8/0x230 [ 86.010838] [] binder_thread_release+0x425/0x520 [ 86.017233] [] binder_deferred_func+0x44d/0xc30 [ 86.023535] [] ? __lock_is_held+0xa2/0xf0 [ 86.029312] [] process_one_work+0x7e1/0x1500 [ 86.035356] [] ? process_one_work+0x728/0x1500 [ 86.041569] [] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 86.048044] [] worker_thread+0xd6/0x10a0 [ 86.053730] [] kthread+0x26d/0x300 [ 86.058904] [] ? process_one_work+0x1500/0x1500 [ 86.065202] [] ? kthread_park+0xa0/0xa0 [ 86.070808] [] ? kthread_park+0xa0/0xa0 [ 86.076413] [] ? kthread_park+0xa0/0xa0 [ 86.082023] [] ret_from_fork+0x5c/0x70 [ 86.087542] [ 86.089152] Allocated by task 10824: [ 86.092853] save_stack_trace+0x16/0x20 [ 86.096800] save_stack+0x43/0xd0 [ 86.100234] kasan_kmalloc+0xc7/0xe0 [ 86.103928] kmem_cache_alloc_trace+0xfd/0x2b0 [ 86.108492] binder_transaction+0x8d4/0x61c0 [ 86.112884] binder_thread_write+0xa40/0x2160 [ 86.117359] binder_ioctl_write_read.isra.46+0x1eb/0x810 [ 86.122783] binder_ioctl+0x702/0x1160 [ 86.126645] do_vfs_ioctl+0x1ac/0x11a0 [ 86.130506] SyS_ioctl+0x8f/0xc0 [ 86.133856] do_syscall_64+0x1a6/0x490 [ 86.137730] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 86.142817] [ 86.144421] Freed by task 18: [ 86.147509] save_stack_trace+0x16/0x20 [ 86.151462] save_stack+0x43/0xd0 [ 86.154886] kasan_slab_free+0x72/0xc0 [ 86.158746] kfree+0xfb/0x310 [ 86.161830] binder_free_transaction+0x6a/0x90 [ 86.166390] binder_send_failed_reply+0x1c3/0x230 [ 86.171204] binder_thread_release+0x413/0x520 [ 86.175758] binder_deferred_func+0x44d/0xc30 [ 86.180228] process_one_work+0x7e1/0x1500 [ 86.184459] worker_thread+0xd6/0x10a0 [ 86.188332] kthread+0x26d/0x300 [ 86.191677] ret_from_fork+0x5c/0x70 [ 86.195372] [ 86.196979] The buggy address belongs to the object at ffff8801d92ecd00 [ 86.196979] which belongs to the cache kmalloc-192 of size 192 [ 86.209616] The buggy address is located 16 bytes inside of [ 86.209616] 192-byte region [ffff8801d92ecd00, ffff8801d92ecdc0) [ 86.221374] The buggy address belongs to the page: [ 86.226276] page:ffffea000764bb00 count:1 mapcount:0 mapping: (null) index:0x0 [ 86.234520] flags: 0x8000000000000080(slab) [ 86.238820] page dumped because: kasan: bad access detected [ 86.244508] [ 86.246109] Memory state around the buggy address: [ 86.251024] ffff8801d92ecc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.258368] ffff8801d92ecc80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 86.265698] >ffff8801d92ecd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.273040] ^ [ 86.276912] ffff8801d92ecd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.284250] ffff8801d92ece00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.291582] ================================================================== [ 86.298918] Disabling lock debugging due to kernel taint [ 86.304544] Kernel panic - not syncing: panic_on_warn set ... [ 86.304544] [ 86.311891] CPU: 1 PID: 18 Comm: kworker/1:0 Tainted: G B 4.9.95-g13cc540 #2 [ 86.320184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.329531] Workqueue: events binder_deferred_func [ 86.334570] ffff8801d9bd79b8 ffffffff81eb0ba9 ffffffff841c4485 00000000ffffffff [ 86.342576] 0000000000000000 0000000000000001 ffffed0038bf5949 ffff8801d9bd7a78 [ 86.350564] ffffffff8141f945 0000000041b58ab3 ffffffff841b7b88 ffffffff8141f786 [ 86.358549] Call Trace: [ 86.361111] [] dump_stack+0xc1/0x128 [ 86.366452] [] panic+0x1bf/0x3bc [ 86.371441] [] ? add_taint.cold.6+0x16/0x16 [ 86.377406] [] kasan_end_report+0x47/0x4f [ 86.383182] [] kasan_report.cold.6+0x76/0x2fe [ 86.389304] [] ? __list_del_entry+0x1a9/0x1c0 [ 86.395424] [] __asan_report_load8_noabort+0x14/0x20 [ 86.402152] [] __list_del_entry+0x1a9/0x1c0 [ 86.408102] [] binder_release_work+0x6f/0x1d0 [ 86.414231] [] ? binder_send_failed_reply+0x1c8/0x230 [ 86.421053] [] binder_thread_release+0x425/0x520 [ 86.427441] [] binder_deferred_func+0x44d/0xc30 [ 86.433746] [] ? __lock_is_held+0xa2/0xf0 [ 86.439526] [] process_one_work+0x7e1/0x1500 [ 86.445565] [] ? process_one_work+0x728/0x1500 [ 86.451768] [] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 86.458232] [] worker_thread+0xd6/0x10a0 [ 86.463916] [] kthread+0x26d/0x300 [ 86.469087] [] ? process_one_work+0x1500/0x1500 [ 86.475396] [] ? kthread_park+0xa0/0xa0 [ 86.480999] [] ? kthread_park+0xa0/0xa0 [ 86.486594] [] ? kthread_park+0xa0/0xa0 [ 86.492192] [] ret_from_fork+0x5c/0x70 [ 86.498137] Dumping ftrace buffer: [ 86.501649] (ftrace buffer empty) [ 86.505341] Kernel Offset: disabled [ 86.508939] Rebooting in 86400 seconds..