0454cd, 0x10000000000030a) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/06/02 18:15:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffffffffff9) 2018/06/02 18:15:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x2d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'bond_slave_1\x00', 'yam0\x00', 'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa8, 0x128, 0x178, [@cluster={'cluster\x00', 0x10, {{0x2c}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xa0, 0xd0}, [@common=@STANDARD={'\x00', 0x8}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x350) 2018/06/02 18:15:30 executing program 2: setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000140)) setitimer(0x2, &(0x7f00000000c0), &(0x7f0000000100)) 2018/06/02 18:15:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/06/02 18:15:30 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f00000003c0)}, 0x10008000) close(r0) 2018/06/02 18:15:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x2d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'bond_slave_1\x00', 'yam0\x00', 'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa8, 0x128, 0x178, [@cluster={'cluster\x00', 0x10, {{0x2c}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xa0, 0xd0}, [@common=@STANDARD={'\x00', 0x8}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x350) 2018/06/02 18:15:30 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/28, 0xfffffe2d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffc}) [ 150.591058] xt_cluster: you have exceeded the maximum number of cluster nodes (44 > 32) [ 150.838234] xt_cluster: you have exceeded the maximum number of cluster nodes (44 > 32) 2018/06/02 18:15:31 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000008c0)={[{@sbsector={'sbsector', 0x3d, [0x35]}, 0x2c}, {@overriderock='overriderockperm', 0x2c}, {@check_strict='check=strict', 0x2c}]}) 2018/06/02 18:15:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', @ifru_settings={0x404f00}}) 2018/06/02 18:15:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0x3, &(0x7f0000000500)={{0x0, @multicast1=0xe0000001, 0x0, 0x0, 'sed\x00'}, {@loopback=0x7f000001}}, 0x3) 2018/06/02 18:15:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/06/02 18:15:31 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f00000003c0)}, 0x10008000) close(r0) 2018/06/02 18:15:31 executing program 2: setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000140)) setitimer(0x2, &(0x7f00000000c0), &(0x7f0000000100)) 2018/06/02 18:15:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) 2018/06/02 18:15:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_pauseparam}) 2018/06/02 18:15:32 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f00000003c0)}, 0x10008000) close(r0) 2018/06/02 18:15:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', @ifru_settings={0x404f00}}) 2018/06/02 18:15:32 executing program 2: setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000140)) setitimer(0x2, &(0x7f00000000c0), &(0x7f0000000100)) 2018/06/02 18:15:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_pauseparam}) 2018/06/02 18:15:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/06/02 18:15:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03}]}) [ 152.034917] ISOFS: Unable to identify CD-ROM format. 2018/06/02 18:15:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0x3, &(0x7f0000000500)={{0x0, @multicast1=0xe0000001, 0x0, 0x0, 'sed\x00'}, {@loopback=0x7f000001}}, 0x3) 2018/06/02 18:15:32 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000008c0)={[{@sbsector={'sbsector', 0x3d, [0x35]}, 0x2c}, {@overriderock='overriderockperm', 0x2c}, {@check_strict='check=strict', 0x2c}]}) [ 152.070114] ISOFS: Unable to identify CD-ROM format. 2018/06/02 18:15:32 executing program 2: setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000140)) setitimer(0x2, &(0x7f00000000c0), &(0x7f0000000100)) [ 152.313596] ISOFS: Unable to identify CD-ROM format. 2018/06/02 18:15:32 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000008c0)={[{@sbsector={'sbsector', 0x3d, [0x35]}, 0x2c}, {@overriderock='overriderockperm', 0x2c}, {@check_strict='check=strict', 0x2c}]}) 2018/06/02 18:15:32 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f00000003c0)}, 0x10008000) close(r0) 2018/06/02 18:15:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_pauseparam}) 2018/06/02 18:15:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/06/02 18:15:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0x3, &(0x7f0000000500)={{0x0, @multicast1=0xe0000001, 0x0, 0x0, 'sed\x00'}, {@loopback=0x7f000001}}, 0x3) 2018/06/02 18:15:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03}]}) 2018/06/02 18:15:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f}, 0xc) 2018/06/02 18:15:32 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x200000001, 0x0, 0x100}) 2018/06/02 18:15:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x10e, 0x3, &(0x7f0000000500)={{0x0, @multicast1=0xe0000001, 0x0, 0x0, 'sed\x00'}, {@loopback=0x7f000001}}, 0x3) 2018/06/02 18:15:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_pauseparam}) 2018/06/02 18:15:32 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x200000001, 0x0, 0x100}) 2018/06/02 18:15:32 executing program 7: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/06/02 18:15:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 2018/06/02 18:15:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03}]}) [ 152.596435] ISOFS: Unable to identify CD-ROM format. 2018/06/02 18:15:32 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000008c0)={[{@sbsector={'sbsector', 0x3d, [0x35]}, 0x2c}, {@overriderock='overriderockperm', 0x2c}, {@check_strict='check=strict', 0x2c}]}) 2018/06/02 18:15:32 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x200000001, 0x0, 0x100}) 2018/06/02 18:15:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f}, 0xc) 2018/06/02 18:15:32 executing program 7: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/06/02 18:15:32 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x100000000000014) [ 152.848401] ISOFS: Unable to identify CD-ROM format. 2018/06/02 18:15:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 2018/06/02 18:15:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03}]}) 2018/06/02 18:15:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa2fbe177b6baaddff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/02 18:15:33 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x200000001, 0x0, 0x100}) 2018/06/02 18:15:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f}, 0xc) 2018/06/02 18:15:33 executing program 6: msgsnd(0x0, &(0x7f0000292ff8), 0x8, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") msgsnd(0x0, &(0x7f00003ecff8), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x0, 0xa4a3ad41a879dde0) 2018/06/02 18:15:33 executing program 7: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/06/02 18:15:33 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x100000000000014) 2018/06/02 18:15:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 2018/06/02 18:15:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f}, 0xc) 2018/06/02 18:15:34 executing program 6: msgsnd(0x0, &(0x7f0000292ff8), 0x8, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") msgsnd(0x0, &(0x7f00003ecff8), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x0, 0xa4a3ad41a879dde0) 2018/06/02 18:15:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @loopback=0x7f000001}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/06/02 18:15:34 executing program 7: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/06/02 18:15:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa2fbe177b6baaddff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/02 18:15:34 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x100000000000014) 2018/06/02 18:15:34 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x0, 0x80000]}) 2018/06/02 18:15:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 2018/06/02 18:15:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @loopback=0x7f000001}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/06/02 18:15:34 executing program 6: msgsnd(0x0, &(0x7f0000292ff8), 0x8, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") msgsnd(0x0, &(0x7f00003ecff8), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x0, 0xa4a3ad41a879dde0) 2018/06/02 18:15:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa2fbe177b6baaddff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/02 18:15:35 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x0, 0x80000]}) 2018/06/02 18:15:35 executing program 6: msgsnd(0x0, &(0x7f0000292ff8), 0x8, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") msgsnd(0x0, &(0x7f00003ecff8), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x0, 0xa4a3ad41a879dde0) 2018/06/02 18:15:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa2fbe177b6baaddff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/02 18:15:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 2018/06/02 18:15:35 executing program 5: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x100000000000014) 2018/06/02 18:15:35 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x0, 0x80000]}) 2018/06/02 18:15:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 2018/06/02 18:15:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @loopback=0x7f000001}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/06/02 18:15:35 executing program 6: clock_gettime(0x6, &(0x7f0000000080)) 2018/06/02 18:15:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:35 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x0, 0x80000]}) 2018/06/02 18:15:35 executing program 6: kexec_load(0x0, 0x0, &(0x7f0000000100), 0x3e0002) 2018/06/02 18:15:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 2018/06/02 18:15:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @loopback=0x7f000001}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/06/02 18:15:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") personality(0x1bb2baf3005ac137) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 2018/06/02 18:15:36 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/79) close(r0) 2018/06/02 18:15:36 executing program 6: kexec_load(0x0, 0x0, &(0x7f0000000100), 0x3e0002) 2018/06/02 18:15:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 2018/06/02 18:15:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="26660f79ff0f08f20f915f5e66b9800000c00f326635001000000f3064260f216b66b9340000000f32660f6ca500000f22262e2e660f38229e0b002664660f383515", 0x42}], 0xb8, 0x0, &(0x7f0000000000), 0x3a7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0xffffffffffffffff, 0x28}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000100)) 2018/06/02 18:15:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") personality(0x1bb2baf3005ac137) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 2018/06/02 18:15:37 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 2018/06/02 18:15:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000040), 0x20, &(0x7f0000000100)={[{@journal_checksum='journal_checksum', 0x2c}]}) 2018/06/02 18:15:37 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) clock_gettime(0x0, &(0x7f0000005900)={0x0}) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000004140), 0x0, &(0x7f0000004180)=""/217, 0xd9}}, {{&(0x7f0000004280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000005680), 0x0, &(0x7f0000005700)=""/154, 0x9a}}], 0x2, 0x0, &(0x7f0000005940)={r2}) 2018/06/02 18:15:37 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/79) close(r0) 2018/06/02 18:15:37 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000f8ffff974f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000009d210006c0b4", 0x67}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:15:37 executing program 6: kexec_load(0x0, 0x0, &(0x7f0000000100), 0x3e0002) 2018/06/02 18:15:37 executing program 6: kexec_load(0x0, 0x0, &(0x7f0000000100), 0x3e0002) 2018/06/02 18:15:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") personality(0x1bb2baf3005ac137) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) [ 157.151886] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 2018/06/02 18:15:37 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 2018/06/02 18:15:37 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) clock_gettime(0x0, &(0x7f0000005900)={0x0}) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000004140), 0x0, &(0x7f0000004180)=""/217, 0xd9}}, {{&(0x7f0000004280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000005680), 0x0, &(0x7f0000005700)=""/154, 0x9a}}], 0x2, 0x0, &(0x7f0000005940)={r2}) [ 157.196367] *** Guest State *** [ 157.199963] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 157.205124] EXT4-fs (sda1): re-mounted. Opts: journal_checksum, [ 157.208863] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 157.223829] CR3 = 0xffffffffffffffff [ 157.227592] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 157.234135] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 157.240657] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 157.246676] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 157.252692] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 157.259413] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 157.267421] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 157.270757] XFS (loop1): bad version [ 157.275440] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 157.275457] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 2018/06/02 18:15:37 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) clock_gettime(0x0, &(0x7f0000005900)={0x0}) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000004140), 0x0, &(0x7f0000004180)=""/217, 0xd9}}, {{&(0x7f0000004280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000005680), 0x0, &(0x7f0000005700)=""/154, 0x9a}}], 0x2, 0x0, &(0x7f0000005940)={r2}) [ 157.275475] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 157.275490] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 157.275504] GDTR: limit=0x00000000, base=0x0000000000000000 [ 157.279857] XFS (loop1): SB validate failed with error -22. [ 157.287225] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 157.287238] IDTR: limit=0x00000000, base=0x0000000000000000 [ 157.287255] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 157.287266] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 157.287283] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 157.363042] Interruptibility = 00000000 ActivityState = 00000000 [ 157.369325] *** Host State *** [ 157.372550] RIP = 0xffffffff811f744c RSP = 0xffff8801af2ef390 [ 157.378573] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 157.385057] FSBase=00007fe703dca700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 157.392869] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 157.398777] CR0=0000000080050033 CR3=00000001b266f000 CR4=00000000001426f0 [ 157.405826] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 157.412531] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 157.418594] *** Control State *** [ 157.422077] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 157.428762] EntryControls=0000d1ff ExitControls=0023efff [ 157.434230] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 157.441167] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 157.447846] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 157.454440] reason=80000021 qualification=0000000000000000 [ 157.460770] IDTVectoring: info=00000000 errcode=00000000 [ 157.466230] TSC Offset = 0xffffffa8b1761059 [ 157.470565] EPT pointer = 0x00000001cfb0f01e [ 157.523147] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 157.584422] XFS (loop1): bad version [ 157.589130] XFS (loop1): SB validate failed with error -22. [ 157.597756] EXT4-fs (sda1): re-mounted. Opts: journal_checksum, 2018/06/02 18:15:38 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) clock_gettime(0x0, &(0x7f0000005900)={0x0}) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000004140), 0x0, &(0x7f0000004180)=""/217, 0xd9}}, {{&(0x7f0000004280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000005680), 0x0, &(0x7f0000005700)=""/154, 0x9a}}], 0x2, 0x0, &(0x7f0000005940)={r2}) 2018/06/02 18:15:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="26660f79ff0f08f20f915f5e66b9800000c00f326635001000000f3064260f216b66b9340000000f32660f6ca500000f22262e2e660f38229e0b002664660f383515", 0x42}], 0xb8, 0x0, &(0x7f0000000000), 0x3a7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0xffffffffffffffff, 0x28}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000100)) 2018/06/02 18:15:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") personality(0x1bb2baf3005ac137) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 2018/06/02 18:15:38 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/79) close(r0) 2018/06/02 18:15:38 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 2018/06/02 18:15:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000040), 0x20, &(0x7f0000000100)={[{@journal_checksum='journal_checksum', 0x2c}]}) 2018/06/02 18:15:38 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/79) close(r0) 2018/06/02 18:15:38 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000f8ffff974f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000009d210006c0b4", 0x67}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:15:38 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) [ 158.234379] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 2018/06/02 18:15:38 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/248) 2018/06/02 18:15:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000600)=[{&(0x7f0000000000)=@in6={0xa, 0x8100, 0x1, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000140)}, {&(0x7f00000003c0)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f00000005c0)}], 0x2, 0x0) 2018/06/02 18:15:38 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000f8ffff974f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000009d210006c0b4", 0x67}], 0x0, &(0x7f00000001c0)) [ 158.281094] XFS (loop1): bad version [ 158.285220] XFS (loop1): SB validate failed with error -22. [ 158.310416] EXT4-fs (sda1): re-mounted. Opts: journal_checksum, 2018/06/02 18:15:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xf, &(0x7f0000000100)=@req3, 0x1c) 2018/06/02 18:15:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000040), 0x20, &(0x7f0000000100)={[{@journal_checksum='journal_checksum', 0x2c}]}) 2018/06/02 18:15:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="26660f79ff0f08f20f915f5e66b9800000c00f326635001000000f3064260f216b66b9340000000f32660f6ca500000f22262e2e660f38229e0b002664660f383515", 0x42}], 0xb8, 0x0, &(0x7f0000000000), 0x3a7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0xffffffffffffffff, 0x28}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000100)) 2018/06/02 18:15:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000180)) 2018/06/02 18:15:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000600)=[{&(0x7f0000000000)=@in6={0xa, 0x8100, 0x1, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000140)}, {&(0x7f00000003c0)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f00000005c0)}], 0x2, 0x0) [ 158.428943] XFS (loop1): bad version [ 158.433077] XFS (loop1): SB validate failed with error -22. [ 158.534098] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 158.594442] EXT4-fs (sda1): re-mounted. Opts: journal_checksum, 2018/06/02 18:15:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000180)) 2018/06/02 18:15:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xf, &(0x7f0000000100)=@req3, 0x1c) 2018/06/02 18:15:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000600)=[{&(0x7f0000000000)=@in6={0xa, 0x8100, 0x1, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000140)}, {&(0x7f00000003c0)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f00000005c0)}], 0x2, 0x0) 2018/06/02 18:15:39 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000f8ffff974f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000009d210006c0b4", 0x67}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:15:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='/\x00', 0x0, 0x0, &(0x7f0000000040), 0x20, &(0x7f0000000100)={[{@journal_checksum='journal_checksum', 0x2c}]}) 2018/06/02 18:15:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="26660f79ff0f08f20f915f5e66b9800000c00f326635001000000f3064260f216b66b9340000000f32660f6ca500000f22262e2e660f38229e0b002664660f383515", 0x42}], 0xb8, 0x0, &(0x7f0000000000), 0x3a7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0xffffffffffffffff, 0x28}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000100)) 2018/06/02 18:15:39 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/79) close(r0) 2018/06/02 18:15:39 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/79) close(r0) [ 159.200669] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 2018/06/02 18:15:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000180)) 2018/06/02 18:15:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xf, &(0x7f0000000100)=@req3, 0x1c) 2018/06/02 18:15:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000600)=[{&(0x7f0000000000)=@in6={0xa, 0x8100, 0x1, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000140)}, {&(0x7f00000003c0)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f00000005c0)}], 0x2, 0x0) [ 159.250614] EXT4-fs (sda1): re-mounted. Opts: journal_checksum, [ 159.252209] XFS (loop1): bad version [ 159.260713] XFS (loop1): SB validate failed with error -22. 2018/06/02 18:15:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) 2018/06/02 18:15:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:39 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1300, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xf, &(0x7f0000000100)=@req3, 0x1c) 2018/06/02 18:15:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000180)) 2018/06/02 18:15:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) fchdir(0xffffffffffffffff) fallocate(r0, 0x0, 0x0, 0x8800000) 2018/06/02 18:15:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 2018/06/02 18:15:40 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1300, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r1, &(0x7f0000002740)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'tunl0\x00'}}, 0x80, &(0x7f0000002680), 0x0, &(0x7f0000002700)}, 0x0) 2018/06/02 18:15:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) fchdir(0xffffffffffffffff) fallocate(r0, 0x0, 0x0, 0x8800000) 2018/06/02 18:15:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 2018/06/02 18:15:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000002c0)=""/79) close(r0) 2018/06/02 18:15:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1300, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) fchdir(0xffffffffffffffff) fallocate(r0, 0x0, 0x0, 0x8800000) 2018/06/02 18:15:40 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 2018/06/02 18:15:40 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {}, {}, 0x1300, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15ffe90001abab"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) fchdir(0xffffffffffffffff) fallocate(r0, 0x0, 0x0, 0x8800000) 2018/06/02 18:15:40 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r1, r0) preadv(r1, &(0x7f00000004c0), 0x1c0, 0x0) 2018/06/02 18:15:40 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0xd, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}]}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:15:40 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000600)=""/80, 0x50}], 0x2, 0x0) 2018/06/02 18:15:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) 2018/06/02 18:15:40 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0) renameat2(r0, &(0x7f0000000480)="2e2f636f6e74726f6cff0500", r0, &(0x7f00000004c0)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000880)=""/77, 0x4d) 2018/06/02 18:15:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r1, &(0x7f0000002740)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'tunl0\x00'}}, 0x80, &(0x7f0000002680), 0x0, &(0x7f0000002700)}, 0x0) 2018/06/02 18:15:40 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="88", 0x1}]) 2018/06/02 18:15:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 2018/06/02 18:15:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000600)=""/80, 0x50}], 0x2, 0x0) 2018/06/02 18:15:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="88", 0x1}]) [ 161.012877] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 161.034460] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:15:41 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0) renameat2(r0, &(0x7f0000000480)="2e2f636f6e74726f6cff0500", r0, &(0x7f00000004c0)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000880)=""/77, 0x4d) 2018/06/02 18:15:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) close(r2) 2018/06/02 18:15:41 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80000001}, {0x6}]}, 0x10) 2018/06/02 18:15:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) prctl$getreaper(0xb, &(0x7f0000006f00)) setfsuid(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) 2018/06/02 18:15:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000600)=""/80, 0x50}], 0x2, 0x0) 2018/06/02 18:15:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="88", 0x1}]) 2018/06/02 18:15:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) close(r2) [ 161.306562] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:15:41 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0) renameat2(r0, &(0x7f0000000480)="2e2f636f6e74726f6cff0500", r0, &(0x7f00000004c0)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000880)=""/77, 0x4d) 2018/06/02 18:15:41 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80000001}, {0x6}]}, 0x10) 2018/06/02 18:15:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000600)=""/80, 0x50}], 0x2, 0x0) 2018/06/02 18:15:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="88", 0x1}]) 2018/06/02 18:15:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) prctl$getreaper(0xb, &(0x7f0000006f00)) setfsuid(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) 2018/06/02 18:15:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) close(r2) 2018/06/02 18:15:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r1, &(0x7f0000002740)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'tunl0\x00'}}, 0x80, &(0x7f0000002680), 0x0, &(0x7f0000002700)}, 0x0) 2018/06/02 18:15:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) [ 162.073860] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:15:42 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0) renameat2(r0, &(0x7f0000000480)="2e2f636f6e74726f6cff0500", r0, &(0x7f00000004c0)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000880)=""/77, 0x4d) 2018/06/02 18:15:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2002}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x80000000}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @broadcast=0xffffffff}}) 2018/06/02 18:15:42 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80000001}, {0x6}]}, 0x10) 2018/06/02 18:15:42 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) close(r2) 2018/06/02 18:15:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) prctl$getreaper(0xb, &(0x7f0000006f00)) setfsuid(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) 2018/06/02 18:15:42 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80000001}, {0x6}]}, 0x10) 2018/06/02 18:15:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) prctl$getreaper(0xb, &(0x7f0000006f00)) setfsuid(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) 2018/06/02 18:15:42 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r1, 0x29, 0x45, &(0x7f00000000c0), &(0x7f0000013000)=0x4) close(r1) close(r0) 2018/06/02 18:15:42 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2002}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x80000000}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @broadcast=0xffffffff}}) 2018/06/02 18:15:43 executing program 7: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x59ef63907af4d9ed}, 0x10) 2018/06/02 18:15:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) 2018/06/02 18:15:43 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_settings={0x1, 0x2, @sync=&(0x7f0000000040)}}) 2018/06/02 18:15:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0007667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5000000b72e331fb03e69dae87a56395732a2001e3e09de434cd736176d82dd8b0668db33599d7245f75346c47fa66923d7002886c68ce969580f3082aad3f2f0c7cd988884095a2b0b"], 0x1}, 0x1}, 0x0) 2018/06/02 18:15:43 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r1, 0x29, 0x45, &(0x7f00000000c0), &(0x7f0000013000)=0x4) close(r1) close(r0) 2018/06/02 18:15:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r1, &(0x7f0000002740)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'tunl0\x00'}}, 0x80, &(0x7f0000002680), 0x0, &(0x7f0000002700)}, 0x0) [ 163.298289] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:15:43 executing program 7: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x59ef63907af4d9ed}, 0x10) 2018/06/02 18:15:43 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 2018/06/02 18:15:43 executing program 0: inotify_init1(0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/73, 0x49}], 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/02 18:15:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x7f, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/06/02 18:15:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2002}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x80000000}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @broadcast=0xffffffff}}) 2018/06/02 18:15:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x7f, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/06/02 18:15:43 executing program 7: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x59ef63907af4d9ed}, 0x10) 2018/06/02 18:15:43 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0'}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) 2018/06/02 18:15:43 executing program 0: inotify_init1(0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/73, 0x49}], 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/02 18:15:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x7f, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/06/02 18:15:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) 2018/06/02 18:15:43 executing program 7: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x59ef63907af4d9ed}, 0x10) 2018/06/02 18:15:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x7f, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/06/02 18:15:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2002}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x80000000}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @broadcast=0xffffffff}}) [ 163.863407] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:15:44 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r1, 0x29, 0x45, &(0x7f00000000c0), &(0x7f0000013000)=0x4) close(r1) close(r0) 2018/06/02 18:15:44 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0'}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) 2018/06/02 18:15:44 executing program 0: inotify_init1(0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/73, 0x49}], 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/02 18:15:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f6d6366696c74657200cd5028f52809b172d32f1af976b704ac908231086181285a7daf493ae7f784debaa3e85efd14d0b287a5982dcd438ce754cbd29bc20fd24b7d0898ff1b8c2cf8a154115241945e343b7930c39d6745435a2e4282b37dd684bbbedf1f1ea93a5a03985333d79eef6f36070ac24b2f7e4db2ee5532ae17c2ba7c3060ab61bce9f93643bb45badfa0d09c0daf8197228bca6e73c90ce02375c60d535e0e20e6e264e8040e5ba4d15125fe94c7d5169068bdf23856c067f8fa8ac30051f15eab49ca309e5aaa86e2b9d751d7f6b9db9bb96dbbd85b85") mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x80000012, r0, 0x0) 2018/06/02 18:15:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/06/02 18:15:44 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0'}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) 2018/06/02 18:15:44 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mount(&(0x7f0000000380)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='adfs\x00', 0x0, &(0x7f0000000740)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 2018/06/02 18:15:44 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r1, 0x29, 0x45, &(0x7f00000000c0), &(0x7f0000013000)=0x4) close(r1) close(r0) 2018/06/02 18:15:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@allow_utime={'allow_utime', 0x3d}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@showexec='showexec', 0x2c}, {@usefree='usefree', 0x2c}, {@nocase='nocase', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000880)='./file0/f.Le0\x00', 0x0) [ 165.010737] FAT-fs (loop4): Unrecognized mount option "allow_utime=" or missing value 2018/06/02 18:15:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f6d6366696c74657200cd5028f52809b172d32f1af976b704ac908231086181285a7daf493ae7f784debaa3e85efd14d0b287a5982dcd438ce754cbd29bc20fd24b7d0898ff1b8c2cf8a154115241945e343b7930c39d6745435a2e4282b37dd684bbbedf1f1ea93a5a03985333d79eef6f36070ac24b2f7e4db2ee5532ae17c2ba7c3060ab61bce9f93643bb45badfa0d09c0daf8197228bca6e73c90ce02375c60d535e0e20e6e264e8040e5ba4d15125fe94c7d5169068bdf23856c067f8fa8ac30051f15eab49ca309e5aaa86e2b9d751d7f6b9db9bb96dbbd85b85") mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x80000012, r0, 0x0) 2018/06/02 18:15:45 executing program 0: inotify_init1(0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/73, 0x49}], 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/06/02 18:15:45 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0'}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) 2018/06/02 18:15:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@allow_utime={'allow_utime', 0x3d}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@showexec='showexec', 0x2c}, {@usefree='usefree', 0x2c}, {@nocase='nocase', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000880)='./file0/f.Le0\x00', 0x0) 2018/06/02 18:15:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f6d6366696c74657200cd5028f52809b172d32f1af976b704ac908231086181285a7daf493ae7f784debaa3e85efd14d0b287a5982dcd438ce754cbd29bc20fd24b7d0898ff1b8c2cf8a154115241945e343b7930c39d6745435a2e4282b37dd684bbbedf1f1ea93a5a03985333d79eef6f36070ac24b2f7e4db2ee5532ae17c2ba7c3060ab61bce9f93643bb45badfa0d09c0daf8197228bca6e73c90ce02375c60d535e0e20e6e264e8040e5ba4d15125fe94c7d5169068bdf23856c067f8fa8ac30051f15eab49ca309e5aaa86e2b9d751d7f6b9db9bb96dbbd85b85") mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x80000012, r0, 0x0) 2018/06/02 18:15:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/06/02 18:15:45 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0'}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) 2018/06/02 18:15:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/06/02 18:15:45 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mount(&(0x7f0000000380)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='adfs\x00', 0x0, &(0x7f0000000740)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 2018/06/02 18:15:45 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0xfde5}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:45 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0'}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) [ 165.926004] FAT-fs (loop4): Unrecognized mount option "allow_utime=" or missing value 2018/06/02 18:15:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f6d6366696c74657200cd5028f52809b172d32f1af976b704ac908231086181285a7daf493ae7f784debaa3e85efd14d0b287a5982dcd438ce754cbd29bc20fd24b7d0898ff1b8c2cf8a154115241945e343b7930c39d6745435a2e4282b37dd684bbbedf1f1ea93a5a03985333d79eef6f36070ac24b2f7e4db2ee5532ae17c2ba7c3060ab61bce9f93643bb45badfa0d09c0daf8197228bca6e73c90ce02375c60d535e0e20e6e264e8040e5ba4d15125fe94c7d5169068bdf23856c067f8fa8ac30051f15eab49ca309e5aaa86e2b9d751d7f6b9db9bb96dbbd85b85") mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x80000012, r0, 0x0) 2018/06/02 18:15:46 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0xfde5}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:46 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0'}, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) 2018/06/02 18:15:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x2, 0x0) fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x11, 0x800000003, 0x600081) r3 = socket$key(0xf, 0x3, 0x2) bind(r2, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x181000, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r5) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x4}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0xfffffffffffffffe) 2018/06/02 18:15:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/06/02 18:15:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@allow_utime={'allow_utime', 0x3d}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@showexec='showexec', 0x2c}, {@usefree='usefree', 0x2c}, {@nocase='nocase', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000880)='./file0/f.Le0\x00', 0x0) 2018/06/02 18:15:46 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/06/02 18:15:46 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0x34000) [ 166.288371] FAT-fs (loop4): Unrecognized mount option "allow_utime=" or missing value 2018/06/02 18:15:46 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0xfde5}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x2, 0x0) fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x11, 0x800000003, 0x600081) r3 = socket$key(0xf, 0x3, 0x2) bind(r2, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x181000, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r5) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x4}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0xfffffffffffffffe) 2018/06/02 18:15:46 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) write$tun(r1, &(0x7f0000000480)={@void, @val={0xfde5}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xb002, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@allow_utime={'allow_utime', 0x3d}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@showexec='showexec', 0x2c}, {@usefree='usefree', 0x2c}, {@nocase='nocase', 0x2c}]}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000880)='./file0/f.Le0\x00', 0x0) 2018/06/02 18:15:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) [ 166.546798] FAT-fs (loop4): Unrecognized mount option "allow_utime=" or missing value 2018/06/02 18:15:47 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0x34000) 2018/06/02 18:15:47 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0xfde5}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:47 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)) 2018/06/02 18:15:47 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) write$tun(r1, &(0x7f0000000480)={@void, @val={0xfde5}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xb002, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0xc) 2018/06/02 18:15:47 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mount(&(0x7f0000000380)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='adfs\x00', 0x0, &(0x7f0000000740)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 2018/06/02 18:15:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x2, 0x0) fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x11, 0x800000003, 0x600081) r3 = socket$key(0xf, 0x3, 0x2) bind(r2, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x181000, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r5) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x4}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0xfffffffffffffffe) 2018/06/02 18:15:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) [ 167.275304] syz-executor7 (11309) used greatest stack depth: 10712 bytes left 2018/06/02 18:15:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x2, 0x0) fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x11, 0x800000003, 0x600081) r3 = socket$key(0xf, 0x3, 0x2) bind(r2, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x181000, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r5) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x4}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0xfffffffffffffffe) 2018/06/02 18:15:47 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)) 2018/06/02 18:15:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0xc) 2018/06/02 18:15:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab72, 0x0, &(0x7f0000000580), 0x0) 2018/06/02 18:15:47 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) write$tun(r1, &(0x7f0000000480)={@void, @val={0xfde5}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xb002, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:47 executing program 0: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000013ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f0000026ffa)) 2018/06/02 18:15:47 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, &(0x7f0000000240)) 2018/06/02 18:15:47 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)) 2018/06/02 18:15:48 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0x34000) 2018/06/02 18:15:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0xc) 2018/06/02 18:15:48 executing program 0: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000013ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f0000026ffa)) 2018/06/02 18:15:48 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, &(0x7f0000000240)) 2018/06/02 18:15:48 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)) 2018/06/02 18:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab72, 0x0, &(0x7f0000000580), 0x0) 2018/06/02 18:15:48 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) write$tun(r1, &(0x7f0000000480)={@void, @val={0xfde5}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xb002, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:15:48 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mount(&(0x7f0000000380)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='adfs\x00', 0x0, &(0x7f0000000740)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 2018/06/02 18:15:48 executing program 0: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000013ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f0000026ffa)) 2018/06/02 18:15:48 executing program 4: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000500)) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x240) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000480)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clock_gettime(0x7, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f0000000140)={0x0, r4+30000000}, &(0x7f0000000180), 0x8) 2018/06/02 18:15:48 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, &(0x7f0000000240)) 2018/06/02 18:15:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0xc) 2018/06/02 18:15:48 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0xffffff90) 2018/06/02 18:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab72, 0x0, &(0x7f0000000580), 0x0) 2018/06/02 18:15:48 executing program 0: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000013ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f0000026ffa)) 2018/06/02 18:15:48 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000006a40)=@nfc={0x27}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006cc0)}}], 0x1, 0x0) [ 169.285694] sched: DL replenish lagged too much 2018/06/02 18:15:49 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0x34000) 2018/06/02 18:15:49 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0xffffff90) 2018/06/02 18:15:49 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, &(0x7f0000000240)) 2018/06/02 18:15:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab72, 0x0, &(0x7f0000000580), 0x0) 2018/06/02 18:15:49 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000006a40)=@nfc={0x27}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006cc0)}}], 0x1, 0x0) 2018/06/02 18:15:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 2018/06/02 18:15:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={[{@subvol={'subvol', 0x3d, [0x70]}, 0x2c}, {@subvol={'subvol', 0x3d, [0x7f]}, 0x2c}]}) 2018/06/02 18:15:49 executing program 4: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000500)) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x240) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000480)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clock_gettime(0x7, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f0000000140)={0x0, r4+30000000}, &(0x7f0000000180), 0x8) 2018/06/02 18:15:49 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000006a40)=@nfc={0x27}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006cc0)}}], 0x1, 0x0) 2018/06/02 18:15:49 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0xffffff90) 2018/06/02 18:15:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 2018/06/02 18:15:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={[{@subvol={'subvol', 0x3d, [0x70]}, 0x2c}, {@subvol={'subvol', 0x3d, [0x7f]}, 0x2c}]}) 2018/06/02 18:15:49 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 2018/06/02 18:15:49 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000006a40)=@nfc={0x27}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006cc0)}}], 0x1, 0x0) 2018/06/02 18:15:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg(r1, &(0x7f0000000300)={0x0, 0x2f7, &(0x7f0000000140), 0x133}, 0x0) 2018/06/02 18:15:49 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0xffffff90) 2018/06/02 18:15:50 executing program 4: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000500)) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x240) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000480)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clock_gettime(0x7, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f0000000140)={0x0, r4+30000000}, &(0x7f0000000180), 0x8) 2018/06/02 18:15:50 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 2018/06/02 18:15:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 2018/06/02 18:15:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021]}) 2018/06/02 18:15:50 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x82040, 0x0) dup3(r0, r1, 0x0) 2018/06/02 18:15:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg(r1, &(0x7f0000000300)={0x0, 0x2f7, &(0x7f0000000140), 0x133}, 0x0) 2018/06/02 18:15:50 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={[{@subvol={'subvol', 0x3d, [0x70]}, 0x2c}, {@subvol={'subvol', 0x3d, [0x7f]}, 0x2c}]}) 2018/06/02 18:15:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg(r1, &(0x7f0000000300)={0x0, 0x2f7, &(0x7f0000000140), 0x133}, 0x0) 2018/06/02 18:15:50 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 2018/06/02 18:15:50 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x82040, 0x0) dup3(r0, r1, 0x0) 2018/06/02 18:15:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg(r1, &(0x7f0000000300)={0x0, 0x2f7, &(0x7f0000000140), 0x133}, 0x0) 2018/06/02 18:15:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 2018/06/02 18:15:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg(r1, &(0x7f0000000300)={0x0, 0x2f7, &(0x7f0000000140), 0x133}, 0x0) 2018/06/02 18:15:50 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={[{@subvol={'subvol', 0x3d, [0x70]}, 0x2c}, {@subvol={'subvol', 0x3d, [0x7f]}, 0x2c}]}) 2018/06/02 18:15:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021]}) 2018/06/02 18:15:50 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x82040, 0x0) dup3(r0, r1, 0x0) 2018/06/02 18:15:51 executing program 4: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000500)) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x240) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000480)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) clock_gettime(0x7, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f0000000140)={0x0, r4+30000000}, &(0x7f0000000180), 0x8) 2018/06/02 18:15:51 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'wrr\x00'}, 0x2c) 2018/06/02 18:15:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) 2018/06/02 18:15:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg(r1, &(0x7f0000000300)={0x0, 0x2f7, &(0x7f0000000140), 0x133}, 0x0) 2018/06/02 18:15:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg(r1, &(0x7f0000000300)={0x0, 0x2f7, &(0x7f0000000140), 0x133}, 0x0) 2018/06/02 18:15:51 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x82040, 0x0) dup3(r0, r1, 0x0) 2018/06/02 18:15:51 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0x0, 0x9}) 2018/06/02 18:15:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021]}) 2018/06/02 18:15:51 executing program 7: io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001440)}]) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002091f001cfffd946fa283005b580a000900020009000000000015000404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:15:51 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f6e65742f697076342f6e000000000000000000000400000000", 0x2, 0x0) 2018/06/02 18:15:51 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'wrr\x00'}, 0x2c) 2018/06/02 18:15:51 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0x0, 0x9}) 2018/06/02 18:15:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021]}) 2018/06/02 18:15:51 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f00000000008000028000007a03000000a7ef90b44d64"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187}, 0x17) [ 171.858694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2018/06/02 18:15:51 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'wrr\x00'}, 0x2c) 2018/06/02 18:15:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) [ 171.919266] netlink: 5 bytes leftover after parsing attributes in process `syz-executor7'. [ 171.983435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 172.066452] netlink: 5 bytes leftover after parsing attributes in process `syz-executor7'. 2018/06/02 18:15:52 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'wrr\x00'}, 0x2c) 2018/06/02 18:15:52 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f6e65742f697076342f6e000000000000000000000400000000", 0x2, 0x0) 2018/06/02 18:15:52 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0x0, 0x9}) 2018/06/02 18:15:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) 2018/06/02 18:15:52 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f00000000008000028000007a03000000a7ef90b44d64"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187}, 0x17) 2018/06/02 18:15:52 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f00000004c0)=""/114, 0x72, 0x0, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/06/02 18:15:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) 2018/06/02 18:15:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/02 18:15:52 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0x0, 0x9}) 2018/06/02 18:15:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/02 18:15:53 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f6e65742f697076342f6e000000000000000000000400000000", 0x2, 0x0) 2018/06/02 18:15:53 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f00000000008000028000007a03000000a7ef90b44d64"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187}, 0x17) 2018/06/02 18:15:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/02 18:15:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) 2018/06/02 18:15:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x3) 2018/06/02 18:15:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) 2018/06/02 18:15:53 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) unshare(0x400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340), &(0x7f0000000380)=0xc) 2018/06/02 18:15:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x3) 2018/06/02 18:15:53 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f00000000008000028000007a03000000a7ef90b44d64"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187}, 0x17) [ 173.684486] sctp: [Deprecated]: syz-executor4 (pid 11659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.684486] Use struct sctp_sack_info instead 2018/06/02 18:15:53 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f6e65742f697076342f6e000000000000000000000400000000", 0x2, 0x0) [ 173.765811] sctp: [Deprecated]: syz-executor4 (pid 11659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.765811] Use struct sctp_sack_info instead 2018/06/02 18:15:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/02 18:15:53 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x218, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2}]}, 0x628) 2018/06/02 18:15:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) 2018/06/02 18:15:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x3) 2018/06/02 18:15:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000001840)=[{&(0x7f0000001740)='R', 0x1}], 0x1) [ 173.899123] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/06/02 18:15:54 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) unshare(0x400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340), &(0x7f0000000380)=0xc) 2018/06/02 18:15:54 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000000000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/02 18:15:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/02 18:15:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x18, &(0x7f0000005780)={{{@in6, @in6=@loopback}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005880)=0x3) close(r2) close(r1) 2018/06/02 18:15:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x3) 2018/06/02 18:15:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/02 18:15:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000001840)=[{&(0x7f0000001740)='R', 0x1}], 0x1) 2018/06/02 18:15:54 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x218, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2}]}, 0x628) 2018/06/02 18:15:54 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000000000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/02 18:15:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000001840)=[{&(0x7f0000001740)='R', 0x1}], 0x1) [ 174.164196] sctp: [Deprecated]: syz-executor4 (pid 11709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.164196] Use struct sctp_sack_info instead [ 174.190672] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/06/02 18:15:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x391, 0x2, [{0x51, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1}, 0x0) 2018/06/02 18:15:54 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) unshare(0x400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340), &(0x7f0000000380)=0xc) [ 174.294619] netlink: 120 bytes leftover after parsing attributes in process `syz-executor5'. [ 174.358312] sctp: [Deprecated]: syz-executor4 (pid 11737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.358312] Use struct sctp_sack_info instead 2018/06/02 18:15:54 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x218, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2}]}, 0x628) 2018/06/02 18:15:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x5, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 2018/06/02 18:15:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000001840)=[{&(0x7f0000001740)='R', 0x1}], 0x1) 2018/06/02 18:15:54 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000000000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/02 18:15:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x391, 0x2, [{0x51, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1}, 0x0) 2018/06/02 18:15:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/02 18:15:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x18, &(0x7f0000005780)={{{@in6, @in6=@loopback}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005880)=0x3) close(r2) close(r1) 2018/06/02 18:15:54 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) unshare(0x400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340), &(0x7f0000000380)=0xc) 2018/06/02 18:15:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x5, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 2018/06/02 18:15:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x27, 0x1, 0x0, 0x0, {0x14}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:15:55 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000000000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 175.034292] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 175.044701] netlink: 120 bytes leftover after parsing attributes in process `syz-executor5'. [ 175.054418] sctp: [Deprecated]: syz-executor4 (pid 11756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.054418] Use struct sctp_sack_info instead 2018/06/02 18:15:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x391, 0x2, [{0x51, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1}, 0x0) 2018/06/02 18:15:55 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) poll(&(0x7f0000000040), 0x1e6, 0x0) 2018/06/02 18:15:55 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x218, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2}]}, 0x628) 2018/06/02 18:15:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x6002}) pread64(r1, &(0x7f0000000140)=""/204, 0x4a0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x100000803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000003440)={'ifb0\x00', 0xa1fd}) 2018/06/02 18:15:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x5, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 2018/06/02 18:15:55 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 175.225953] netlink: 120 bytes leftover after parsing attributes in process `syz-executor5'. [ 175.230072] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/06/02 18:15:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x27, 0x1, 0x0, 0x0, {0x14}}, 0x14}, 0x1}, 0x0) [ 176.079996] device ifb0 entered promiscuous mode 2018/06/02 18:15:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x391, 0x2, [{0x51, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1}, 0x0) 2018/06/02 18:15:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x5, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 2018/06/02 18:15:56 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/02 18:15:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) poll(&(0x7f0000000040), 0x1e6, 0x0) 2018/06/02 18:15:56 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/06/02 18:15:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0xffffffffffffff85) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/02 18:15:56 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x27, 0x1, 0x0, 0x0, {0x14}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:15:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x18, &(0x7f0000005780)={{{@in6, @in6=@loopback}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005880)=0x3) close(r2) close(r1) 2018/06/02 18:15:56 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) [ 176.166796] netlink: 120 bytes leftover after parsing attributes in process `syz-executor5'. 2018/06/02 18:15:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0xffffffffffffff85) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/02 18:15:56 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/02 18:15:56 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 2018/06/02 18:15:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) poll(&(0x7f0000000040), 0x1e6, 0x0) 2018/06/02 18:15:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffdcffffffffffffffffffff08004500fec30000000000019078ac14ffbbe00000010000000000089078d6ad880171a073e6d07fd1218e7fe05b92a3f096aae61171"], 0x0) 2018/06/02 18:15:56 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x27, 0x1, 0x0, 0x0, {0x14}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:15:56 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/02 18:15:56 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 2018/06/02 18:15:56 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/06/02 18:15:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x18, &(0x7f0000005780)={{{@in6, @in6=@loopback}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005880)=0x3) close(r2) close(r1) 2018/06/02 18:15:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa283005b580a000900020009000000080015000404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:15:56 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 2018/06/02 18:15:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0xffffffffffffff85) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/02 18:15:56 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/06/02 18:15:56 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 2018/06/02 18:15:56 executing program 7: r0 = eventfd2(0x0, 0x80801) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)="32e10570b7e4f5d7", 0x8}, {&(0x7f00000005c0)='h', 0x1}], 0x2) 2018/06/02 18:15:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) poll(&(0x7f0000000040), 0x1e6, 0x0) [ 177.011917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/06/02 18:15:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) [ 177.059877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 177.091723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 177.110609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/06/02 18:15:57 executing program 7: r0 = eventfd2(0x0, 0x80801) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)="32e10570b7e4f5d7", 0x8}, {&(0x7f00000005c0)='h', 0x1}], 0x2) 2018/06/02 18:15:57 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 2018/06/02 18:15:57 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) 2018/06/02 18:15:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0xffffffffffffff85) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/02 18:15:57 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000000)='..', &(0x7f0000000280)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x800020, &(0x7f0000000400)=ANY=[@ANYBLOB='noquota']) 2018/06/02 18:15:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 2018/06/02 18:15:57 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa283005b580a000900020009000000080015000404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:15:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fstat(r1, &(0x7f0000009f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r2) 2018/06/02 18:15:57 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) [ 177.911903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 177.950527] EXT4-fs (sda1): re-mounted. Opts: noquota 2018/06/02 18:15:57 executing program 7: r0 = eventfd2(0x0, 0x80801) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)="32e10570b7e4f5d7", 0x8}, {&(0x7f00000005c0)='h', 0x1}], 0x2) 2018/06/02 18:15:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 2018/06/02 18:15:57 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) [ 177.964178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/06/02 18:15:58 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r2, &(0x7f0000000080), 0x80000003) 2018/06/02 18:15:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fstat(r1, &(0x7f0000009f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r2) 2018/06/02 18:15:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa283005b580a000900020009000000080015000404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:15:58 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) 2018/06/02 18:15:58 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000000)='..', &(0x7f0000000280)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x800020, &(0x7f0000000400)=ANY=[@ANYBLOB='noquota']) 2018/06/02 18:15:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1}, 0x0) 2018/06/02 18:15:58 executing program 7: r0 = eventfd2(0x0, 0x80801) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)="32e10570b7e4f5d7", 0x8}, {&(0x7f00000005c0)='h', 0x1}], 0x2) 2018/06/02 18:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fa0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 178.163201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 178.198643] EXT4-fs (sda1): re-mounted. Opts: noquota 2018/06/02 18:15:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fstat(r1, &(0x7f0000009f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r2) 2018/06/02 18:15:58 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 2018/06/02 18:15:58 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) 2018/06/02 18:15:58 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) 2018/06/02 18:15:58 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000000)='..', &(0x7f0000000280)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x800020, &(0x7f0000000400)=ANY=[@ANYBLOB='noquota']) 2018/06/02 18:15:58 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r2, &(0x7f0000000080), 0x80000003) [ 178.310887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/06/02 18:15:58 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0) 2018/06/02 18:15:58 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fstat(r1, &(0x7f0000009f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r2) 2018/06/02 18:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fa0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 178.413591] EXT4-fs (sda1): re-mounted. Opts: noquota 2018/06/02 18:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fa0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:15:58 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000000)='..', &(0x7f0000000280)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x800020, &(0x7f0000000400)=ANY=[@ANYBLOB='noquota']) 2018/06/02 18:15:58 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) 2018/06/02 18:15:58 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) 2018/06/02 18:15:58 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r2, &(0x7f0000000080), 0x80000003) 2018/06/02 18:15:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fchown(r0, 0x0, 0x0) 2018/06/02 18:15:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa283005b580a000900020009000000080015000404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:15:58 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:58 executing program 6: clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000718000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x10000) 2018/06/02 18:15:58 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:58 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) [ 178.664862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 178.692771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 178.704820] EXT4-fs (sda1): re-mounted. Opts: noquota 2018/06/02 18:15:58 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) 2018/06/02 18:15:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x80000) getdents(r0, &(0x7f0000000240)=""/122, 0x7a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') mkdir(&(0x7f0000001340)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)=""/233, &(0x7f00000001c0)=0xe9) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 2018/06/02 18:15:58 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x2000000, 0x100}, 0x10) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 2018/06/02 18:15:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fa0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:15:59 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r2, &(0x7f0000000080), 0x80000003) 2018/06/02 18:15:59 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/06/02 18:15:59 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) 2018/06/02 18:15:59 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) 2018/06/02 18:15:59 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x2000000, 0x100}, 0x10) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 2018/06/02 18:15:59 executing program 6: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b4f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bf1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c187c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343070e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec6e49151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887c81cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5f9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163521d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e812c48e2d7fa4f446d06e5712", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:15:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x80000) getdents(r0, &(0x7f0000000240)=""/122, 0x7a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') mkdir(&(0x7f0000001340)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)=""/233, &(0x7f00000001c0)=0xe9) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 2018/06/02 18:15:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x80000) getdents(r0, &(0x7f0000000240)=""/122, 0x7a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') mkdir(&(0x7f0000001340)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)=""/233, &(0x7f00000001c0)=0xe9) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 2018/06/02 18:15:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 2018/06/02 18:15:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000080)) 2018/06/02 18:15:59 executing program 6: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:15:59 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/06/02 18:15:59 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x2000000, 0x100}, 0x10) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 2018/06/02 18:15:59 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:15:59 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xfdef) 2018/06/02 18:16:00 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x805, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) listen(r1, 0x3) sendto$inet(r1, &(0x7f0000000200)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/06/02 18:16:00 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x2000000, 0x100}, 0x10) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 2018/06/02 18:16:00 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/06/02 18:16:00 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:16:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000080)) 2018/06/02 18:16:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x80000) getdents(r0, &(0x7f0000000240)=""/122, 0x7a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') mkdir(&(0x7f0000001340)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)=""/233, &(0x7f00000001c0)=0xe9) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 2018/06/02 18:16:00 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xfdef) 2018/06/02 18:16:00 executing program 6: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b4f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bf1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c187c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343070e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec6e49151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887c81cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5f9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163521d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e812c48e2d7fa4f446d06e5712", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:16:00 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 2018/06/02 18:16:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000120000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="afaefc5d", 0x4) 2018/06/02 18:16:00 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/06/02 18:16:00 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:16:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000080)) 2018/06/02 18:16:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000120000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="afaefc5d", 0x4) 2018/06/02 18:16:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") prctl$void(0x7) 2018/06/02 18:16:00 executing program 6: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:16:00 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xfdef) 2018/06/02 18:16:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x9, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x200, 0x1a0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/06/02 18:16:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000120000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="afaefc5d", 0x4) 2018/06/02 18:16:00 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/06/02 18:16:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") prctl$void(0x7) 2018/06/02 18:16:00 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:16:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000080)) 2018/06/02 18:16:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x9, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x200, 0x1a0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/06/02 18:16:00 executing program 6: pipe2(&(0x7f0000b57ff8), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/06/02 18:16:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000120000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="afaefc5d", 0x4) 2018/06/02 18:16:00 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x2f, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xfdef) 2018/06/02 18:16:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x0) 2018/06/02 18:16:00 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xff, &(0x7f0000000000), 0x8) 2018/06/02 18:16:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") prctl$void(0x7) 2018/06/02 18:16:00 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0x8008af00, 0x707000) 2018/06/02 18:16:00 executing program 6: pipe2(&(0x7f0000b57ff8), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/06/02 18:16:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x9, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x200, 0x1a0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/06/02 18:16:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x0) 2018/06/02 18:16:00 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xff, &(0x7f0000000000), 0x8) 2018/06/02 18:16:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b000)={r0, 0x0, 0x36, 0x9d, &(0x7f0000013000)="e460019234060dc106621abc86dd6a000000000706eb305660319056115082553800800000000000e8d5000000010000001400000000", &(0x7f000001df63)=""/157}, 0x28) 2018/06/02 18:16:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") prctl$void(0x7) 2018/06/02 18:16:00 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0x8008af00, 0x707000) 2018/06/02 18:16:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x9, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x200, 0x1a0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/06/02 18:16:00 executing program 2: unshare(0x2000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000003c0)=@known='system.posix_acl_access\x00') 2018/06/02 18:16:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x0) 2018/06/02 18:16:01 executing program 6: pipe2(&(0x7f0000b57ff8), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/06/02 18:16:01 executing program 2: unshare(0x2000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000003c0)=@known='system.posix_acl_access\x00') 2018/06/02 18:16:01 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0x8008af00, 0x707000) 2018/06/02 18:16:01 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xff, &(0x7f0000000000), 0x8) 2018/06/02 18:16:01 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2018/06/02 18:16:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b000)={r0, 0x0, 0x36, 0x9d, &(0x7f0000013000)="e460019234060dc106621abc86dd6a000000000706eb305660319056115082553800800000000000e8d5000000010000001400000000", &(0x7f000001df63)=""/157}, 0x28) 2018/06/02 18:16:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:16:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x0) 2018/06/02 18:16:01 executing program 2: unshare(0x2000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000003c0)=@known='system.posix_acl_access\x00') 2018/06/02 18:16:01 executing program 6: pipe2(&(0x7f0000b57ff8), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/06/02 18:16:01 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0x8008af00, 0x707000) 2018/06/02 18:16:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:16:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/06/02 18:16:01 executing program 2: unshare(0x2000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000003c0)=@known='system.posix_acl_access\x00') 2018/06/02 18:16:01 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xff, &(0x7f0000000000), 0x8) 2018/06/02 18:16:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b000)={r0, 0x0, 0x36, 0x9d, &(0x7f0000013000)="e460019234060dc106621abc86dd6a000000000706eb305660319056115082553800800000000000e8d5000000010000001400000000", &(0x7f000001df63)=""/157}, 0x28) 2018/06/02 18:16:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='cmdline\x00') exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) 2018/06/02 18:16:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b000)={r0, 0x0, 0x36, 0x9d, &(0x7f0000013000)="e460019234060dc106621abc86dd6a000000000706eb305660319056115082553800800000000000e8d5000000010000001400000000", &(0x7f000001df63)=""/157}, 0x28) 2018/06/02 18:16:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:16:01 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x4, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) [ 182.218343] device bridge_slave_1 left promiscuous mode [ 182.224273] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.240551] device bridge_slave_0 left promiscuous mode [ 182.246155] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.291539] team0 (unregistering): Port device team_slave_1 removed [ 182.301318] team0 (unregistering): Port device team_slave_0 removed [ 182.313683] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 182.330320] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/06/02 18:16:02 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x4, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) 2018/06/02 18:16:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/06/02 18:16:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:16:02 executing program 6: setgroups(0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) 2018/06/02 18:16:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2018/06/02 18:16:02 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000080), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x15, 0x0, 0x0, 'teql0\x00', 'bridge0\x00', 'veth0_to_bridge\x00', '\x00', @empty, [], @random="7d855f2b3fce", [], 0xa0, 0x118, 0x148, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x2, 0x0, "bc3d7c06aee9fe3070472aa06df3e1b705ca7658ab0d48dc198400351364cd6a3f007bb3c654ba02af7cddc865ad78e97455f369190682b7c19ff54108305512"}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x250) 2018/06/02 18:16:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/06/02 18:16:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='cmdline\x00') exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) [ 182.358643] bond0 (unregistering): Released all slaves 2018/06/02 18:16:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/06/02 18:16:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capability\x00', 0x14, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) lchown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) [ 184.171984] IPVS: ftp: loaded support on port[0] = 21 [ 184.485177] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.491560] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.498653] device bridge_slave_0 entered promiscuous mode [ 184.521465] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.527836] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.534963] device bridge_slave_1 entered promiscuous mode [ 184.558248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.580896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 184.643826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.668629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.764751] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.771822] team0: Port device team_slave_0 added [ 184.793197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.800472] team0: Port device team_slave_1 added [ 184.821958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.846381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.871343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.895521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.116716] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.123116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.129743] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.136096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.863780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.936407] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.008774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.014964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.022985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.095733] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:16:07 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000080), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x15, 0x0, 0x0, 'teql0\x00', 'bridge0\x00', 'veth0_to_bridge\x00', '\x00', @empty, [], @random="7d855f2b3fce", [], 0xa0, 0x118, 0x148, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x2, 0x0, "bc3d7c06aee9fe3070472aa06df3e1b705ca7658ab0d48dc198400351364cd6a3f007bb3c654ba02af7cddc865ad78e97455f369190682b7c19ff54108305512"}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x250) 2018/06/02 18:16:07 executing program 0: clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) 2018/06/02 18:16:07 executing program 6: setgroups(0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) 2018/06/02 18:16:07 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x4, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) 2018/06/02 18:16:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capability\x00', 0x14, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) lchown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 2018/06/02 18:16:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/06/02 18:16:07 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2018/06/02 18:16:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='cmdline\x00') exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) 2018/06/02 18:16:07 executing program 6: setgroups(0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) 2018/06/02 18:16:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capability\x00', 0x14, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) lchown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 2018/06/02 18:16:07 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000080), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x15, 0x0, 0x0, 'teql0\x00', 'bridge0\x00', 'veth0_to_bridge\x00', '\x00', @empty, [], @random="7d855f2b3fce", [], 0xa0, 0x118, 0x148, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x2, 0x0, "bc3d7c06aee9fe3070472aa06df3e1b705ca7658ab0d48dc198400351364cd6a3f007bb3c654ba02af7cddc865ad78e97455f369190682b7c19ff54108305512"}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x250) 2018/06/02 18:16:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 2018/06/02 18:16:07 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x4, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) 2018/06/02 18:16:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capability\x00', 0x14, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) lchown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 2018/06/02 18:16:07 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2018/06/02 18:16:07 executing program 6: setgroups(0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) 2018/06/02 18:16:07 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000080), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x15, 0x0, 0x0, 'teql0\x00', 'bridge0\x00', 'veth0_to_bridge\x00', '\x00', @empty, [], @random="7d855f2b3fce", [], 0xa0, 0x118, 0x148, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x2, 0x0, "bc3d7c06aee9fe3070472aa06df3e1b705ca7658ab0d48dc198400351364cd6a3f007bb3c654ba02af7cddc865ad78e97455f369190682b7c19ff54108305512"}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x250) [ 187.623415] device bridge_slave_1 left promiscuous mode [ 187.629054] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.682057] device bridge_slave_0 left promiscuous mode [ 187.687659] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.801642] team0 (unregistering): Port device team_slave_1 removed [ 187.808182] IPVS: ftp: loaded support on port[0] = 21 [ 187.817402] team0 (unregistering): Port device team_slave_0 removed [ 187.826777] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 187.841280] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 187.870790] bond0 (unregistering): Released all slaves [ 188.490961] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.497400] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.505185] device bridge_slave_0 entered promiscuous mode [ 188.540823] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.547271] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.554939] device bridge_slave_1 entered promiscuous mode [ 188.589443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.624668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.729287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.766421] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.928410] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.935786] team0: Port device team_slave_0 added [ 188.970574] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.977978] team0: Port device team_slave_1 added [ 189.012094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.049644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.086466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.093640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.104391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.123490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.362855] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.369234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.375867] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.382216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.121656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.194576] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.264916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.271117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.278568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.346365] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:16:11 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 2018/06/02 18:16:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='cmdline\x00') exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) 2018/06/02 18:16:11 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xa9, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x5, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/06/02 18:16:11 executing program 0: clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) 2018/06/02 18:16:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) chmod(&(0x7f0000000340)='./file0/file0\x00', 0x0) 2018/06/02 18:16:11 executing program 2: mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000180)='/\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='msdos\x00', 0x2805, &(0x7f00000002c0)) 2018/06/02 18:16:11 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4020940d, &(0x7f00000000c0)=r2) 2018/06/02 18:16:11 executing program 1: prctl$setname(0x3, &(0x7f0000000080)="76626f786e657431da00") 2018/06/02 18:16:11 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 2018/06/02 18:16:11 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4020940d, &(0x7f00000000c0)=r2) 2018/06/02 18:16:11 executing program 2: mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000180)='/\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='msdos\x00', 0x2805, &(0x7f00000002c0)) 2018/06/02 18:16:11 executing program 6: prctl$setname(0xf, &(0x7f0000000080)="262774727573746564225b73656c66766d6e6574301876626f786e6574313a5c2500") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 2018/06/02 18:16:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) chmod(&(0x7f0000000340)='./file0/file0\x00', 0x0) [ 191.746438] audit: type=1326 audit(1527963371.719:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 2018/06/02 18:16:11 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x20) [ 191.833240] audit: type=1326 audit(1527963371.747:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x455a09 code=0x50000 [ 191.854339] audit: type=1326 audit(1527963371.747:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 191.875320] audit: type=1326 audit(1527963371.747:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 191.896278] audit: type=1326 audit(1527963371.748:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 191.917229] audit: type=1326 audit(1527963371.748:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 191.938183] audit: type=1326 audit(1527963371.753:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 191.959155] audit: type=1326 audit(1527963371.753:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 191.980348] audit: type=1326 audit(1527963371.755:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 192.001393] audit: type=1326 audit(1527963371.755:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12935 comm=262774727573746564225B73656C66 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 [ 192.066300] device bridge_slave_1 left promiscuous mode [ 192.071855] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.082627] device bridge_slave_0 left promiscuous mode [ 192.088155] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.120422] team0 (unregistering): Port device team_slave_1 removed [ 192.130162] team0 (unregistering): Port device team_slave_0 removed [ 192.141384] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 192.159953] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 192.186768] bond0 (unregistering): Released all slaves 2018/06/02 18:16:12 executing program 2: mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000180)='/\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='msdos\x00', 0x2805, &(0x7f00000002c0)) 2018/06/02 18:16:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) chmod(&(0x7f0000000340)='./file0/file0\x00', 0x0) 2018/06/02 18:16:12 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4020940d, &(0x7f00000000c0)=r2) 2018/06/02 18:16:12 executing program 0: clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) 2018/06/02 18:16:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) chmod(&(0x7f0000000340)='./file0/file0\x00', 0x0) 2018/06/02 18:16:12 executing program 6: prctl$setname(0xf, &(0x7f0000000080)="262774727573746564225b73656c66766d6e6574301876626f786e6574313a5c2500") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 2018/06/02 18:16:12 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000019c0)={&(0x7f0000001840)={0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0x30, r0, 0x201, 0x0, 0x0, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0x30}, 0x1}, 0x0) 2018/06/02 18:16:12 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) [ 192.644242] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/06/02 18:16:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) chmod(&(0x7f0000000340)='./file0/file0\x00', 0x0) [ 192.686388] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/06/02 18:16:12 executing program 6: prctl$setname(0xf, &(0x7f0000000080)="262774727573746564225b73656c66766d6e6574301876626f786e6574313a5c2500") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 2018/06/02 18:16:12 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4020940d, &(0x7f00000000c0)=r2) 2018/06/02 18:16:12 executing program 2: mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000180)='/\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='msdos\x00', 0x2805, &(0x7f00000002c0)) 2018/06/02 18:16:12 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) 2018/06/02 18:16:12 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000019c0)={&(0x7f0000001840)={0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0x30, r0, 0x201, 0x0, 0x0, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0x30}, 0x1}, 0x0) 2018/06/02 18:16:12 executing program 6: prctl$setname(0xf, &(0x7f0000000080)="262774727573746564225b73656c66766d6e6574301876626f786e6574313a5c2500") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) [ 192.897237] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 192.980163] IPVS: ftp: loaded support on port[0] = 21 [ 193.578172] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.584590] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.591886] device bridge_slave_0 entered promiscuous mode [ 193.625343] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.631717] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.638796] device bridge_slave_1 entered promiscuous mode [ 193.662856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.687171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.753913] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.779005] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.803209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 193.810099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.834922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.841791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.904654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 193.911763] team0: Port device team_slave_0 added [ 193.933753] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 193.940835] team0: Port device team_slave_1 added [ 193.969952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.995713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.019970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.027109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.034991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.053551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.060591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.068910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.269515] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.275931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.282579] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.288946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.296297] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.783119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.045890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.118316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.189661] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.195866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.203368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.271737] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:16:15 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) 2018/06/02 18:16:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/06/02 18:16:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:16:15 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 2018/06/02 18:16:15 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000019c0)={&(0x7f0000001840)={0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0x30, r0, 0x201, 0x0, 0x0, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0x30}, 0x1}, 0x0) 2018/06/02 18:16:15 executing program 0: clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) 2018/06/02 18:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) chmod(&(0x7f0000000340)='./file0/file0\x00', 0x0) 2018/06/02 18:16:15 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc008551c, &(0x7f0000000000)) 2018/06/02 18:16:15 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) [ 195.742933] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/06/02 18:16:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/06/02 18:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) chmod(&(0x7f0000000340)='./file0/file0\x00', 0x0) 2018/06/02 18:16:15 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc008551c, &(0x7f0000000000)) 2018/06/02 18:16:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:16:15 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 2018/06/02 18:16:15 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000019c0)={&(0x7f0000001840)={0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0x30, r0, 0x201, 0x0, 0x0, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0x30}, 0x1}, 0x0) 2018/06/02 18:16:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 2018/06/02 18:16:15 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc008551c, &(0x7f0000000000)) 2018/06/02 18:16:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/06/02 18:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x1000, 0x0) 2018/06/02 18:16:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 195.948896] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/06/02 18:16:16 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 2018/06/02 18:16:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/06/02 18:16:16 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc008551c, &(0x7f0000000000)) 2018/06/02 18:16:16 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) tgkill(r1, r1, 0x2f) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregs(0x4209, r1, 0x730004, &(0x7f0000000000)=""/38) 2018/06/02 18:16:16 executing program 0: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0xfffffffffffffffc, 0x200, &(0x7f0000000080)={0x0, 0x6, 0x1, 0x20}) 2018/06/02 18:16:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 2018/06/02 18:16:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:16:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x1000, 0x0) 2018/06/02 18:16:16 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000000)) 2018/06/02 18:16:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x73e0) 2018/06/02 18:16:16 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) tgkill(r1, r1, 0x2f) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregs(0x4209, r1, 0x730004, &(0x7f0000000000)=""/38) 2018/06/02 18:16:16 executing program 0: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0xfffffffffffffffc, 0x200, &(0x7f0000000080)={0x0, 0x6, 0x1, 0x20}) 2018/06/02 18:16:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x1000, 0x0) 2018/06/02 18:16:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/06/02 18:16:17 executing program 0: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0xfffffffffffffffc, 0x200, &(0x7f0000000080)={0x0, 0x6, 0x1, 0x20}) 2018/06/02 18:16:17 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 2018/06/02 18:16:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 2018/06/02 18:16:17 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000000)) 2018/06/02 18:16:17 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) tgkill(r1, r1, 0x2f) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregs(0x4209, r1, 0x730004, &(0x7f0000000000)=""/38) [ 197.272298] device bridge_slave_1 left promiscuous mode [ 197.277889] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.313106] device bridge_slave_0 left promiscuous mode [ 197.318685] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.394452] IPVS: ftp: loaded support on port[0] = 21 [ 197.403678] team0 (unregistering): Port device team_slave_1 removed [ 197.413798] team0 (unregistering): Port device team_slave_0 removed [ 197.422968] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 197.440768] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 197.465249] bond0 (unregistering): Released all slaves [ 197.987659] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.994092] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.001388] device bridge_slave_0 entered promiscuous mode [ 198.036009] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.042439] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.049716] device bridge_slave_1 entered promiscuous mode [ 198.083774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.120646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.223788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.262938] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.424807] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.432721] team0: Port device team_slave_0 added [ 198.467314] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.474668] team0: Port device team_slave_1 added [ 198.510417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.544955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.581789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.588934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.598111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.618488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.625687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.634161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.908302] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.914679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.921304] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.927652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.651796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.722986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.794517] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.800679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.809421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.876521] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:16:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x73e0) 2018/06/02 18:16:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x1000, 0x0) 2018/06/02 18:16:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/06/02 18:16:21 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) tgkill(r1, r1, 0x2f) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregs(0x4209, r1, 0x730004, &(0x7f0000000000)=""/38) 2018/06/02 18:16:21 executing program 0: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0xfffffffffffffffc, 0x200, &(0x7f0000000080)={0x0, 0x6, 0x1, 0x20}) 2018/06/02 18:16:21 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f00000018c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/06/02 18:16:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 2018/06/02 18:16:21 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000000)) 2018/06/02 18:16:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x73e0) 2018/06/02 18:16:21 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) read$eventfd(r0, &(0x7f0000000180), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/06/02 18:16:21 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f0000000140)) 2018/06/02 18:16:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/06/02 18:16:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1) 2018/06/02 18:16:21 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f00000018c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/06/02 18:16:21 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000000)) 2018/06/02 18:16:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x73e0) 2018/06/02 18:16:21 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f0000000140)) 2018/06/02 18:16:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1) 2018/06/02 18:16:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/06/02 18:16:21 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f00000018c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/06/02 18:16:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100), 0x18) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x20}) epoll_create(0x0) 2018/06/02 18:16:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f38239ea7ba0000c4012172d4002e64427efd40dd41b5c401d758d766baf80cb81cf2e48aef66bafc0ced66410f38220c7043d24d970f618aef000000c744240052000000c7442402a5000000ff2c24", 0x51}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073, 0x101]}) 2018/06/02 18:16:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000007c0), 0x1b7, 0x200007f8, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000180), 0x8) 2018/06/02 18:16:22 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f0000000140)) 2018/06/02 18:16:22 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000100937e, &(0x7f0000006f80)="010000000000000018") 2018/06/02 18:16:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2018/06/02 18:16:22 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f00000018c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/06/02 18:16:22 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000008000", &(0x7f0000000000)=@ethtool_cmd={0x12, 0x0, 0x707000, 0x0, 0x0, 0x0, 0x2}}) 2018/06/02 18:16:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1) 2018/06/02 18:16:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f38239ea7ba0000c4012172d4002e64427efd40dd41b5c401d758d766baf80cb81cf2e48aef66bafc0ced66410f38220c7043d24d970f618aef000000c744240052000000c7442402a5000000ff2c24", 0x51}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073, 0x101]}) 2018/06/02 18:16:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2018/06/02 18:16:22 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000100937e, &(0x7f0000006f80)="010000000000000018") 2018/06/02 18:16:22 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f0000000140)) 2018/06/02 18:16:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1) 2018/06/02 18:16:22 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000008000", &(0x7f0000000000)=@ethtool_cmd={0x12, 0x0, 0x707000, 0x0, 0x0, 0x0, 0x2}}) 2018/06/02 18:16:22 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$packet(0x11, 0x800000000002, 0x300) setsockopt(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "459ee3795c661eda"}, 0x10}, 0x1}, 0x0) 2018/06/02 18:16:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000007c0), 0x1b7, 0x200007f8, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000180), 0x8) 2018/06/02 18:16:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f38239ea7ba0000c4012172d4002e64427efd40dd41b5c401d758d766baf80cb81cf2e48aef66bafc0ced66410f38220c7043d24d970f618aef000000c744240052000000c7442402a5000000ff2c24", 0x51}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073, 0x101]}) 2018/06/02 18:16:22 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000008000", &(0x7f0000000000)=@ethtool_cmd={0x12, 0x0, 0x707000, 0x0, 0x0, 0x0, 0x2}}) 2018/06/02 18:16:22 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000100937e, &(0x7f0000006f80)="010000000000000018") 2018/06/02 18:16:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2018/06/02 18:16:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x5cccdbb890594114, &(0x7f0000000100)={0x0, 0x1c9c380}) 2018/06/02 18:16:22 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$packet(0x11, 0x800000000002, 0x300) setsockopt(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "459ee3795c661eda"}, 0x10}, 0x1}, 0x0) 2018/06/02 18:16:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) [ 202.533426] XFS (loop1): Mounting V4 Filesystem [ 202.557403] XFS (loop1): totally zeroed log [ 202.570126] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 202.579839] XFS (loop1): Unmount and run xfs_repair [ 202.584893] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 202.591574] 00000000fdc7b8b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.600425] 00000000fcd906c6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.609285] 0000000047fad1b1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.618137] 00000000b0f24a3c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.626989] 0000000097aa3b01: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.635844] 0000000069ce82ac: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.644695] 0000000081433a78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.653544] 0000000036a9359a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.662458] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 202.671833] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 202.680378] XFS (loop1): failed to read root inode [ 202.719103] XFS (loop1): Mounting V4 Filesystem [ 202.725638] XFS (loop1): totally zeroed log [ 202.730580] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 202.740175] XFS (loop1): Unmount and run xfs_repair [ 202.745239] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 202.751948] 000000002cfa034e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.760819] 0000000093021d70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.769672] 0000000045bc86a2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.778529] 00000000fa762a3d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.787390] 00000000b378a97e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.796261] 000000002b192fa1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.805108] 000000003e9d39b2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2018/06/02 18:16:22 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000008000", &(0x7f0000000000)=@ethtool_cmd={0x12, 0x0, 0x707000, 0x0, 0x0, 0x0, 0x2}}) 2018/06/02 18:16:22 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$packet(0x11, 0x800000000002, 0x300) setsockopt(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "459ee3795c661eda"}, 0x10}, 0x1}, 0x0) 2018/06/02 18:16:22 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000100937e, &(0x7f0000006f80)="010000000000000018") 2018/06/02 18:16:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2018/06/02 18:16:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x5cccdbb890594114, &(0x7f0000000100)={0x0, 0x1c9c380}) 2018/06/02 18:16:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000007c0), 0x1b7, 0x200007f8, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000180), 0x8) 2018/06/02 18:16:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:16:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f38239ea7ba0000c4012172d4002e64427efd40dd41b5c401d758d766baf80cb81cf2e48aef66bafc0ced66410f38220c7043d24d970f618aef000000c744240052000000c7442402a5000000ff2c24", 0x51}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073, 0x101]}) [ 202.813966] 0000000034b5720e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.822869] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 202.832272] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 202.840801] XFS (loop1): failed to read root inode 2018/06/02 18:16:22 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$packet(0x11, 0x800000000002, 0x300) setsockopt(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "459ee3795c661eda"}, 0x10}, 0x1}, 0x0) 2018/06/02 18:16:22 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x3}}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/06/02 18:16:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x5cccdbb890594114, &(0x7f0000000100)={0x0, 0x1c9c380}) 2018/06/02 18:16:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000007c0), 0x1b7, 0x200007f8, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000180), 0x8) 2018/06/02 18:16:23 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000640)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read(r1, &(0x7f0000003700)=""/215, 0xd7) 2018/06/02 18:16:23 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$packet(0x11, 0x800000000002, 0x300) setsockopt(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "459ee3795c661eda"}, 0x10}, 0x1}, 0x0) 2018/06/02 18:16:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) [ 203.008592] XFS (loop1): Mounting V4 Filesystem [ 203.068813] XFS (loop1): totally zeroed log [ 203.081005] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 203.090706] XFS (loop1): Unmount and run xfs_repair [ 203.095776] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 203.102490] 00000000751cc065: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.111388] 000000008a6c1576: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.120289] 00000000a211dba0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.129170] 00000000743db4b5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.138064] 00000000736a126b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.146953] 000000008006f579: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.155838] 000000003e91e24a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2018/06/02 18:16:23 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$packet(0x11, 0x800000000002, 0x300) setsockopt(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "459ee3795c661eda"}, 0x10}, 0x1}, 0x0) [ 203.164727] 00000000a8bfe34a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.173654] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 203.183137] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 203.191713] XFS (loop1): failed to read root inode 2018/06/02 18:16:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x5cccdbb890594114, &(0x7f0000000100)={0x0, 0x1c9c380}) 2018/06/02 18:16:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0xd, &(0x7f0000000080), 0x8) close(r2) close(r1) 2018/06/02 18:16:24 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x2) 2018/06/02 18:16:24 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000640)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read(r1, &(0x7f0000003700)=""/215, 0xd7) 2018/06/02 18:16:24 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$packet(0x11, 0x800000000002, 0x300) setsockopt(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "459ee3795c661eda"}, 0x10}, 0x1}, 0x0) 2018/06/02 18:16:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:16:24 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/06/02 18:16:24 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x3}}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 204.086921] binder_alloc: binder_alloc_mmap_handler: 13866 20000000-20002000 already mapped failed -16 2018/06/02 18:16:24 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000640)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read(r1, &(0x7f0000003700)=""/215, 0xd7) 2018/06/02 18:16:24 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x2) 2018/06/02 18:16:24 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@fmask={'fmask', 0x3d}, 0x2c}]}) 2018/06/02 18:16:24 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) [ 204.210669] XFS (loop1): Mounting V4 Filesystem [ 204.218438] XFS (loop1): totally zeroed log [ 204.223785] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 204.233456] XFS (loop1): Unmount and run xfs_repair [ 204.238536] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 204.245242] 00000000e40b5a28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.254132] 0000000058f2afb3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.263009] 000000005f5de64b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.271896] 00000000b93c2484: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.280778] 00000000c2f61005: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.289648] 00000000c5748b82: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.298530] 000000001bd68907: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2018/06/02 18:16:24 executing program 0: tkill(0x0, 0x35) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) open(&(0x7f0000000000)='./file0/file0\x00', 0x80000, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) statx(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0xfff, &(0x7f0000000200)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/02 18:16:24 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000640)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read(r1, &(0x7f0000003700)=""/215, 0xd7) [ 204.307401] 000000002a49a0c9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.316475] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 204.325898] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 204.334437] XFS (loop1): failed to read root inode [ 204.350813] __ntfs_error: 236 callbacks suppressed 2018/06/02 18:16:24 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x2) [ 204.350823] ntfs: (device loop5): parse_options(): The fmask option requires an argument. 2018/06/02 18:16:24 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) [ 204.405650] ntfs: (device loop5): parse_options(): The fmask option requires an argument. 2018/06/02 18:16:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) [ 204.573316] XFS (loop1): Mounting V4 Filesystem [ 204.593731] XFS (loop1): totally zeroed log [ 204.601956] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 204.611634] XFS (loop1): Unmount and run xfs_repair [ 204.616685] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 204.623370] 00000000e01b3917: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.632244] 00000000498353ac: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.641092] 00000000b6dbc6d4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.649948] 00000000fc708306: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.658815] 000000009abd0259: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.667687] 00000000ff9ea5ab: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.676534] 00000000a8b4a64f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.685389] 00000000a362a477: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.694294] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 204.703746] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 204.712281] XFS (loop1): failed to read root inode 2018/06/02 18:16:25 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@fmask={'fmask', 0x3d}, 0x2c}]}) 2018/06/02 18:16:25 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/06/02 18:16:25 executing program 6: chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfsd\x00', 0x0, &(0x7f0000000200)) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 2018/06/02 18:16:25 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x2) 2018/06/02 18:16:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0xd, &(0x7f0000000080), 0x8) close(r2) close(r1) 2018/06/02 18:16:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000020000000200000800005d14dfb51571a4", 0x39}], 0x1) 2018/06/02 18:16:25 executing program 0: tkill(0x0, 0x35) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) open(&(0x7f0000000000)='./file0/file0\x00', 0x80000, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) statx(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0xfff, &(0x7f0000000200)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/02 18:16:25 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x3}}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/06/02 18:16:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {}, 0x5, 0x1}, 0xe) 2018/06/02 18:16:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/06/02 18:16:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000020000000200000800005d14dfb51571a4", 0x39}], 0x1) 2018/06/02 18:16:25 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c626262c851dbf012cf66f") ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) close(r0) [ 205.400832] ntfs: (device loop5): parse_options(): The fmask option requires an argument. 2018/06/02 18:16:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {}, 0x5, 0x1}, 0xe) 2018/06/02 18:16:25 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@fmask={'fmask', 0x3d}, 0x2c}]}) 2018/06/02 18:16:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000020000000200000800005d14dfb51571a4", 0x39}], 0x1) [ 205.553895] binder: 14004:14005 ioctl c0306201 20a20000 returned -14 [ 205.567835] ntfs: (device loop5): parse_options(): The fmask option requires an argument. [ 205.585695] binder: 14004:14013 unknown command 0 2018/06/02 18:16:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {}, 0x5, 0x1}, 0xe) 2018/06/02 18:16:25 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000013c0)={[{@fmask={'fmask', 0x3d}, 0x2c}]}) [ 205.602993] binder: 14004:14013 ioctl c0306201 20a20000 returned -22 [ 205.692848] ntfs: (device loop5): parse_options(): The fmask option requires an argument. 2018/06/02 18:16:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/06/02 18:16:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000020000000200000800005d14dfb51571a4", 0x39}], 0x1) 2018/06/02 18:16:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {}, 0x5, 0x1}, 0xe) 2018/06/02 18:16:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) 2018/06/02 18:16:26 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x3}}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/06/02 18:16:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0xd, &(0x7f0000000080), 0x8) close(r2) close(r1) 2018/06/02 18:16:26 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c626262c851dbf012cf66f") ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) close(r0) 2018/06/02 18:16:26 executing program 0: tkill(0x0, 0x35) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) open(&(0x7f0000000000)='./file0/file0\x00', 0x80000, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) statx(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0xfff, &(0x7f0000000200)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/02 18:16:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c626262c851dbf012cf66f") ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) close(r0) 2018/06/02 18:16:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) 2018/06/02 18:16:26 executing program 1: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000000c0)="0f073e660f01c866b9800000c00f326635000800000f303e0f01c966b9800000c00f326635008000000f309a5b918d000f20c06635000004000f22c00f090f704100a23e660f5a2a", 0x48}], 0x43, 0x0, &(0x7f0000000480), 0x0) 2018/06/02 18:16:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) [ 206.400453] binder: 14054:14055 ioctl c0306201 20a20000 returned -14 2018/06/02 18:16:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) 2018/06/02 18:16:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f00000000c0)}) [ 206.516740] binder: 14072:14073 ioctl c0306201 20a20000 returned -14 2018/06/02 18:16:26 executing program 1: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000000c0)="0f073e660f01c866b9800000c00f326635000800000f303e0f01c966b9800000c00f326635008000000f309a5b918d000f20c06635000004000f22c00f090f704100a23e660f5a2a", 0x48}], 0x43, 0x0, &(0x7f0000000480), 0x0) 2018/06/02 18:16:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) [ 206.597533] binder: 14079:14080 ioctl c0306201 20a20000 returned -14 2018/06/02 18:16:26 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}}], 0xff5f) 2018/06/02 18:16:26 executing program 1: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000000c0)="0f073e660f01c866b9800000c00f326635000800000f303e0f01c966b9800000c00f326635008000000f309a5b918d000f20c06635000004000f22c00f090f704100a23e660f5a2a", 0x48}], 0x43, 0x0, &(0x7f0000000480), 0x0) 2018/06/02 18:16:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @rand_addr}}, 0x0, 0x54ac, 0x0, "57db51e49db17aa9b7d62b7eee603f1d56fb62521fb25a3e6b760e2d136aa8596384344e3686cf1a35ff2304052d092df7e9d2f3c6f885a01fdc07e101839e4f2ad434c454d5a8177bc3f940997f27a5"}, 0xd8) 2018/06/02 18:16:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @rand_addr}}, 0x0, 0x54ac, 0x0, "57db51e49db17aa9b7d62b7eee603f1d56fb62521fb25a3e6b760e2d136aa8596384344e3686cf1a35ff2304052d092df7e9d2f3c6f885a01fdc07e101839e4f2ad434c454d5a8177bc3f940997f27a5"}, 0xd8) 2018/06/02 18:16:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @rand_addr}}, 0x0, 0x54ac, 0x0, "57db51e49db17aa9b7d62b7eee603f1d56fb62521fb25a3e6b760e2d136aa8596384344e3686cf1a35ff2304052d092df7e9d2f3c6f885a01fdc07e101839e4f2ad434c454d5a8177bc3f940997f27a5"}, 0xd8) 2018/06/02 18:16:27 executing program 1: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000000c0)="0f073e660f01c866b9800000c00f326635000800000f303e0f01c966b9800000c00f326635008000000f309a5b918d000f20c06635000004000f22c00f090f704100a23e660f5a2a", 0x48}], 0x43, 0x0, &(0x7f0000000480), 0x0) 2018/06/02 18:16:27 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c626262c851dbf012cf66f") ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) close(r0) 2018/06/02 18:16:27 executing program 0: tkill(0x0, 0x35) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) open(&(0x7f0000000000)='./file0/file0\x00', 0x80000, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) statx(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0xfff, &(0x7f0000000200)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/02 18:16:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c626262c851dbf012cf66f") ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) close(r0) 2018/06/02 18:16:34 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "1fa81bdfc5693eaacc403eec0ebb14069da82c46b9813b79a6bb872e811c474e9e1f68d7e3ad316b235a8651"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e7ad6a30f0efb3a8f2f1256dcb0c09c578524021857b879d300ee8a096c658540ed7e3898814aeaed1611e728d6809376f03ff0306b84c23a50bca46a74d3c2d", &(0x7f000000cff7)="e60000000500ab2500", 0x9, [], [0x8]}) r0 = syz_open_dev$sndctrl(&(0x7f0000012000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/06/02 18:16:34 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c626262c851dbf012cf66f") ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) close(r0) 2018/06/02 18:16:34 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}}], 0xff5f) 2018/06/02 18:16:34 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) r1 = socket(0xa, 0x1, 0x0) dup2(r1, r0) 2018/06/02 18:16:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0xd, &(0x7f0000000080), 0x8) close(r2) close(r1) 2018/06/02 18:16:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/06/02 18:16:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @rand_addr}}, 0x0, 0x54ac, 0x0, "57db51e49db17aa9b7d62b7eee603f1d56fb62521fb25a3e6b760e2d136aa8596384344e3686cf1a35ff2304052d092df7e9d2f3c6f885a01fdc07e101839e4f2ad434c454d5a8177bc3f940997f27a5"}, 0xd8) 2018/06/02 18:16:34 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) r1 = socket(0xa, 0x1, 0x0) dup2(r1, r0) 2018/06/02 18:16:34 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "1fa81bdfc5693eaacc403eec0ebb14069da82c46b9813b79a6bb872e811c474e9e1f68d7e3ad316b235a8651"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e7ad6a30f0efb3a8f2f1256dcb0c09c578524021857b879d300ee8a096c658540ed7e3898814aeaed1611e728d6809376f03ff0306b84c23a50bca46a74d3c2d", &(0x7f000000cff7)="e60000000500ab2500", 0x9, [], [0x8]}) r0 = syz_open_dev$sndctrl(&(0x7f0000012000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/06/02 18:16:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/233}, 0x18) 2018/06/02 18:16:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/06/02 18:16:35 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "1fa81bdfc5693eaacc403eec0ebb14069da82c46b9813b79a6bb872e811c474e9e1f68d7e3ad316b235a8651"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e7ad6a30f0efb3a8f2f1256dcb0c09c578524021857b879d300ee8a096c658540ed7e3898814aeaed1611e728d6809376f03ff0306b84c23a50bca46a74d3c2d", &(0x7f000000cff7)="e60000000500ab2500", 0x9, [], [0x8]}) r0 = syz_open_dev$sndctrl(&(0x7f0000012000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/06/02 18:16:35 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) r1 = socket(0xa, 0x1, 0x0) dup2(r1, r0) 2018/06/02 18:16:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/233}, 0x18) 2018/06/02 18:16:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/06/02 18:16:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c626262c851dbf012cf66f") ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) close(r0) 2018/06/02 18:16:43 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}}], 0xff5f) 2018/06/02 18:16:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 2018/06/02 18:16:43 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "1fa81bdfc5693eaacc403eec0ebb14069da82c46b9813b79a6bb872e811c474e9e1f68d7e3ad316b235a8651"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e7ad6a30f0efb3a8f2f1256dcb0c09c578524021857b879d300ee8a096c658540ed7e3898814aeaed1611e728d6809376f03ff0306b84c23a50bca46a74d3c2d", &(0x7f000000cff7)="e60000000500ab2500", 0x9, [], [0x8]}) r0 = syz_open_dev$sndctrl(&(0x7f0000012000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/06/02 18:16:43 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) r1 = socket(0xa, 0x1, 0x0) dup2(r1, r0) 2018/06/02 18:16:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/233}, 0x18) 2018/06/02 18:16:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/06/02 18:16:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) sendmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000002c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000002cc0), 0x0, &(0x7f0000005000)}}], 0x1, 0x0) futex(&(0x7f0000002ec0), 0x4, 0x0, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) 2018/06/02 18:16:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 2018/06/02 18:16:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/233}, 0x18) 2018/06/02 18:16:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/06/02 18:16:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000919fdb)="240000000706f5f81cffeb0600000000000000391000010006ebfff5ff00000001000000", 0x24}], 0x1}, 0x0) 2018/06/02 18:16:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) sendmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000002c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000002cc0), 0x0, &(0x7f0000005000)}}], 0x1, 0x0) futex(&(0x7f0000002ec0), 0x4, 0x0, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) 2018/06/02 18:16:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 2018/06/02 18:16:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000003c0)) 2018/06/02 18:16:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 223.392079] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 223.411564] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 223.425565] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 223.433464] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/06/02 18:16:51 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}}], 0xff5f) 2018/06/02 18:16:51 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 2018/06/02 18:16:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) sendmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000002c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000002cc0), 0x0, &(0x7f0000005000)}}], 0x1, 0x0) futex(&(0x7f0000002ec0), 0x4, 0x0, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) 2018/06/02 18:16:51 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0xc0045878, 0xffffffffffffffff) 2018/06/02 18:16:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 2018/06/02 18:16:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/06/02 18:16:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000919fdb)="240000000706f5f81cffeb0600000000000000391000010006ebfff5ff00000001000000", 0x24}], 0x1}, 0x0) 2018/06/02 18:16:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f636b7461626c653d2e2c6c6f636b70726f746f3d6c43236f2b6c229a9dfa80637163fdb96283752f4916a2dcb7e12d498e19574a6143348923e84d19f447d07820b64ec801049cf13016561bdc744d390ab2c08a"]) 2018/06/02 18:16:51 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) [ 231.469786] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 231.493268] gfs2: can't find protocol lC#o+l"šú€cqcý¹bƒu/I¢Ü·á-IŽWJaC4‰#èMôGÐx ¶NÈœñ0VÜtM9 [ 231.493268] ²À 2018/06/02 18:16:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 2018/06/02 18:16:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/06/02 18:16:51 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0xc0045878, 0xffffffffffffffff) 2018/06/02 18:16:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) sendmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000002c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000002cc0), 0x0, &(0x7f0000005000)}}], 0x1, 0x0) futex(&(0x7f0000002ec0), 0x4, 0x0, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) [ 231.516313] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/06/02 18:16:51 executing program 6: r0 = gettid() r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) read(r1, &(0x7f0000000340)=""/4096, 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) [ 231.572755] gfs2: can't find protocol lC#o+l"šú€cqcý¹bƒu/I¢Ü·á-IŽWJaC4‰#èMôGÐx ¶NÈœñ0VÜtM9 [ 231.572755] ²À 2018/06/02 18:16:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f636b7461626c653d2e2c6c6f636b70726f746f3d6c43236f2b6c229a9dfa80637163fdb96283752f4916a2dcb7e12d498e19574a6143348923e84d19f447d07820b64ec801049cf13016561bdc744d390ab2c08a"]) 2018/06/02 18:16:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 231.731201] gfs2: can't find protocol lC#o+l"šú€cqcý¹bƒu/I¢Ü·á-IŽWJaC4‰#èMôGÐx ¶NÈœñ0VÜtM9 [ 231.731201] ²À 2018/06/02 18:16:59 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f00000021c0), 0x0) 2018/06/02 18:16:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000919fdb)="240000000706f5f81cffeb0600000000000000391000010006ebfff5ff00000001000000", 0x24}], 0x1}, 0x0) 2018/06/02 18:16:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0xfffffffffffffff3) 2018/06/02 18:16:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0xc0045878, 0xffffffffffffffff) 2018/06/02 18:16:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r1, 0x601, 0x0, 0x0, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x2f5}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 2018/06/02 18:16:59 executing program 3: clone(0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000480)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:16:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f636b7461626c653d2e2c6c6f636b70726f746f3d6c43236f2b6c229a9dfa80637163fdb96283752f4916a2dcb7e12d498e19574a6143348923e84d19f447d07820b64ec801049cf13016561bdc744d390ab2c08a"]) 2018/06/02 18:16:59 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) flistxattr(r0, &(0x7f0000000000), 0x0) 2018/06/02 18:16:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0xc0045878, 0xffffffffffffffff) [ 239.714409] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 239.735744] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 239.745888] gfs2: can't find protocol lC#o+l"šú€cqcý¹bƒu/I¢Ü·á-IŽWJaC4‰#èMôGÐx ¶NÈœñ0VÜtM9 [ 239.745888] ²À 2018/06/02 18:16:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0xfffffffffffffff3) 2018/06/02 18:16:59 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) flistxattr(r0, &(0x7f0000000000), 0x0) 2018/06/02 18:16:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0xfffffffffffffff3) [ 239.769918] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 239.788126] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/06/02 18:17:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f00000021c0), 0x0) 2018/06/02 18:17:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000040c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000004400), 0x0, &(0x7f0000004440)}}], 0x1, 0x40004) 2018/06/02 18:17:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f636b7461626c653d2e2c6c6f636b70726f746f3d6c43236f2b6c229a9dfa80637163fdb96283752f4916a2dcb7e12d498e19574a6143348923e84d19f447d07820b64ec801049cf13016561bdc744d390ab2c08a"]) 2018/06/02 18:17:00 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) flistxattr(r0, &(0x7f0000000000), 0x0) 2018/06/02 18:17:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r1, 0x601, 0x0, 0x0, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x2f5}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 2018/06/02 18:17:00 executing program 3: clone(0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000480)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:17:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0xfffffffffffffff3) 2018/06/02 18:17:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000919fdb)="240000000706f5f81cffeb0600000000000000391000010006ebfff5ff00000001000000", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:00 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) flistxattr(r0, &(0x7f0000000000), 0x0) 2018/06/02 18:17:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f00000021c0), 0x0) 2018/06/02 18:17:00 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 2018/06/02 18:17:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000040c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000004400), 0x0, &(0x7f0000004440)}}], 0x1, 0x40004) [ 240.624496] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 240.638715] gfs2: can't find protocol lC#o+l"šú€cqcý¹bƒu/I¢Ü·á-IŽWJaC4‰#èMôGÐx ¶NÈœñ0VÜtM9 [ 240.638715] ²À [ 240.658935] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 240.707698] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/06/02 18:17:01 executing program 3: clone(0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000480)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:17:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000040c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000004400), 0x0, &(0x7f0000004440)}}], 0x1, 0x40004) 2018/06/02 18:17:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r1, 0x601, 0x0, 0x0, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x2f5}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 2018/06/02 18:17:01 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f00000021c0), 0x0) 2018/06/02 18:17:01 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 2018/06/02 18:17:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 2018/06/02 18:17:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/06/02 18:17:01 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 2018/06/02 18:17:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000040c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000004400), 0x0, &(0x7f0000004440)}}], 0x1, 0x40004) 2018/06/02 18:17:01 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 241.574134] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/06/02 18:17:01 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 2018/06/02 18:17:02 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 2018/06/02 18:17:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r1, 0x601, 0x0, 0x0, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x2f5}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 2018/06/02 18:17:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/06/02 18:17:02 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 2018/06/02 18:17:02 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/06/02 18:17:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 2018/06/02 18:17:02 executing program 3: clone(0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000480)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:17:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f000000010aff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 2018/06/02 18:17:02 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 242.447703] nla_parse: 10 callbacks suppressed [ 242.447710] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 242.447877] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/06/02 18:17:02 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 2018/06/02 18:17:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/06/02 18:17:02 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/06/02 18:17:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 2018/06/02 18:17:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x80000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x63, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 242.493777] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/06/02 18:17:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f000000010aff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 2018/06/02 18:17:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2707d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0x2c) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r1, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)={0x8}, &(0x7f0000001ffc), 0x1400) 2018/06/02 18:17:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/06/02 18:17:02 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 242.614849] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/06/02 18:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001b00)={0x0}) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000000440)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)=""/22, 0x16}}, {{&(0x7f00000016c0)=@can, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/223, 0xdf}}], 0x2, 0x0, &(0x7f0000001b40)={r2}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}, 0x1}, 0x0) 2018/06/02 18:17:02 executing program 1: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0042fc2f07d82c99240970") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r2, 0x38, &(0x7f0000000340)}, 0x10) 2018/06/02 18:17:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f000000010aff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 2018/06/02 18:17:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xfff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) [ 242.742393] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 242.767172] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/06/02 18:17:03 executing program 6: linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000000) 2018/06/02 18:17:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2707d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0x2c) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r1, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)={0x8}, &(0x7f0000001ffc), 0x1400) 2018/06/02 18:17:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f000000010aff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 2018/06/02 18:17:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x80000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x63, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/06/02 18:17:03 executing program 1: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0042fc2f07d82c99240970") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r2, 0x38, &(0x7f0000000340)}, 0x10) 2018/06/02 18:17:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xfff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080)="a710", &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000100)="9f", &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) 2018/06/02 18:17:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001b00)={0x0}) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000000440)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)=""/22, 0x16}}, {{&(0x7f00000016c0)=@can, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/223, 0xdf}}], 0x2, 0x0, &(0x7f0000001b40)={r2}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}, 0x1}, 0x0) [ 243.495660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 243.504239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/06/02 18:17:03 executing program 6: linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000000) 2018/06/02 18:17:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2707d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0x2c) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r1, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)={0x8}, &(0x7f0000001ffc), 0x1400) 2018/06/02 18:17:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x80000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x63, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/06/02 18:17:03 executing program 1: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0042fc2f07d82c99240970") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r2, 0x38, &(0x7f0000000340)}, 0x10) [ 243.579490] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 243.580676] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/06/02 18:17:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080)="a710", &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000100)="9f", &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) 2018/06/02 18:17:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xfff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:03 executing program 6: linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000000) 2018/06/02 18:17:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2707d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0x2c) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r1, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)={0x8}, &(0x7f0000001ffc), 0x1400) 2018/06/02 18:17:03 executing program 1: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0042fc2f07d82c99240970") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r2, 0x38, &(0x7f0000000340)}, 0x10) 2018/06/02 18:17:03 executing program 6: linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000000) [ 243.750604] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/06/02 18:17:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x80000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x63, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/06/02 18:17:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xfff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080)="a710", &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000100)="9f", &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) 2018/06/02 18:17:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="fe", 0x1}], 0x1, &(0x7f0000000400)}], 0x1, 0x0) 2018/06/02 18:17:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r2) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r3) tkill(r3, 0x16) [ 243.900535] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 244.416542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 244.425108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/06/02 18:17:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001b00)={0x0}) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000000440)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)=""/22, 0x16}}, {{&(0x7f00000016c0)=@can, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/223, 0xdf}}], 0x2, 0x0, &(0x7f0000001b40)={r2}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}, 0x1}, 0x0) 2018/06/02 18:17:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r2) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r3) tkill(r3, 0x16) 2018/06/02 18:17:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="fe", 0x1}], 0x1, &(0x7f0000000400)}], 0x1, 0x0) 2018/06/02 18:17:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2b, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:17:04 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r4 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 2018/06/02 18:17:04 executing program 6: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) syslog(0x0, &(0x7f0000000080)=""/23, 0xffffffffffffff36) 2018/06/02 18:17:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080)="a710", &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000100)="9f", &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) 2018/06/02 18:17:04 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) preadv(r1, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x31, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 2018/06/02 18:17:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2b, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:17:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1400000008912, &(0x7f00000001c0)="0047fc2f07d82c99240970") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000000000bc0000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000080b00000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 2018/06/02 18:17:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2b, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 244.855748] syz-executor6 (14620): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). 2018/06/02 18:17:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x2) 2018/06/02 18:17:04 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r4 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 2018/06/02 18:17:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2b, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:17:04 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x0, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x5, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/06/02 18:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x2) [ 245.645373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/06/02 18:17:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001b00)={0x0}) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f0000000440)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)=""/22, 0x16}}, {{&(0x7f00000016c0)=@can, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/223, 0xdf}}], 0x2, 0x0, &(0x7f0000001b40)={r2}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}, 0x1}, 0x0) 2018/06/02 18:17:05 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) preadv(r1, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x31, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 2018/06/02 18:17:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="fe", 0x1}], 0x1, &(0x7f0000000400)}], 0x1, 0x0) 2018/06/02 18:17:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r2) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r3) tkill(r3, 0x16) 2018/06/02 18:17:05 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r4 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 2018/06/02 18:17:05 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x0, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x5, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/06/02 18:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x2) 2018/06/02 18:17:05 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/02 18:17:05 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x0, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x5, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/06/02 18:17:05 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)={@void, @val, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x29, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xfdef) 2018/06/02 18:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x2) 2018/06/02 18:17:05 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r4 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 2018/06/02 18:17:05 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x0, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x5, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/06/02 18:17:05 executing program 3: syslog(0x3, &(0x7f0000000480)=""/6, 0x6) 2018/06/02 18:17:05 executing program 1: r0 = socket(0x2000000000010, 0x20000000000003, 0x0) write(r0, &(0x7f0000000080)="220000005e000725004f10f7e2bacaf5fe2ab095b90e959776a9ffd9000000000000", 0x22) 2018/06/02 18:17:05 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)) 2018/06/02 18:17:06 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)) 2018/06/02 18:17:06 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) preadv(r1, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x31, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 2018/06/02 18:17:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="fe", 0x1}], 0x1, &(0x7f0000000400)}], 0x1, 0x0) 2018/06/02 18:17:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r2) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r3) tkill(r3, 0x16) 2018/06/02 18:17:06 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='erspan0\x00'}) 2018/06/02 18:17:06 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/06/02 18:17:06 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366f00eb0100000008"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 2018/06/02 18:17:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=@delqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1}, 0x0) 2018/06/02 18:17:06 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='erspan0\x00'}) 2018/06/02 18:17:07 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)) 2018/06/02 18:17:07 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366f00eb0100000008"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 2018/06/02 18:17:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=@delqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1}, 0x0) 2018/06/02 18:17:07 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='erspan0\x00'}) 2018/06/02 18:17:07 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/06/02 18:17:07 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) preadv(r1, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x31, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 2018/06/02 18:17:07 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366f00eb0100000008"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 2018/06/02 18:17:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:07 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)) 2018/06/02 18:17:07 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='erspan0\x00'}) 2018/06/02 18:17:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=@delqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1}, 0x0) 2018/06/02 18:17:07 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366f00eb0100000008"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 2018/06/02 18:17:07 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366f00eb0100000008"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) [ 247.767882] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/06/02 18:17:07 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/06/02 18:17:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x0, &(0x7f0000000000), 0x0) 2018/06/02 18:17:08 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366f00eb0100000008"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 2018/06/02 18:17:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001280)=""/200, &(0x7f0000000040)=0xc8) close(r0) 2018/06/02 18:17:08 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000100)={0x10, 0xa}, 0xc, &(0x7f0000000000)={&(0x7f0000002dc0)=@ipv6_newroute={0x28, 0x18, 0x401, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:08 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/06/02 18:17:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=@delqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1}, 0x0) 2018/06/02 18:17:08 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000fa084c2ab1366f00eb0100000008"]) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 2018/06/02 18:17:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x0, &(0x7f0000000000), 0x0) 2018/06/02 18:17:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/06/02 18:17:08 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000100)={0x10, 0xa}, 0xc, &(0x7f0000000000)={&(0x7f0000002dc0)=@ipv6_newroute={0x28, 0x18, 0x401, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x0, &(0x7f0000000000), 0x0) [ 248.604580] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/06/02 18:17:08 executing program 4: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt(r0, 0x111, 0x1, &(0x7f0000000000), 0x8b83c3f) 2018/06/02 18:17:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) gettid() bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0xf, 0x1, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x9}, 0xfffffffffffffcb7) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0, 0x200}, 0xfffffffffffffd11) r3 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) rt_sigprocmask(0x0, &(0x7f0000000000)={0x4}, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x20000005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x13}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0x7, 0x4) r4 = socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x3f}, &(0x7f0000000480)=0x8) r5 = socket(0x8, 0x8000a, 0xd63) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) sendfile(r6, r6, &(0x7f00000000c0)=0x202, 0xdd) 2018/06/02 18:17:08 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/06/02 18:17:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x0, &(0x7f0000000000), 0x0) 2018/06/02 18:17:08 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000100)={0x10, 0xa}, 0xc, &(0x7f0000000000)={&(0x7f0000002dc0)=@ipv6_newroute={0x28, 0x18, 0x401, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:08 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) [ 248.742644] l2tp_ppp: tunl 4: set debug=7665642f [ 248.759500] IPVS: length: 39 != 8 [ 248.777330] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 248.862975] IPVS: length: 39 != 8 2018/06/02 18:17:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/06/02 18:17:09 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/06/02 18:17:09 executing program 4: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt(r0, 0x111, 0x1, &(0x7f0000000000), 0x8b83c3f) 2018/06/02 18:17:09 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000100)={0x10, 0xa}, 0xc, &(0x7f0000000000)={&(0x7f0000002dc0)=@ipv6_newroute={0x28, 0x18, 0x401, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001280)=""/200, &(0x7f0000000040)=0xc8) close(r0) 2018/06/02 18:17:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) gettid() bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0xf, 0x1, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x9}, 0xfffffffffffffcb7) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0, 0x200}, 0xfffffffffffffd11) r3 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) rt_sigprocmask(0x0, &(0x7f0000000000)={0x4}, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x20000005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x13}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0x7, 0x4) r4 = socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x3f}, &(0x7f0000000480)=0x8) r5 = socket(0x8, 0x8000a, 0xd63) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) sendfile(r6, r6, &(0x7f00000000c0)=0x202, 0xdd) 2018/06/02 18:17:09 executing program 6: prctl$setmm(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) 2018/06/02 18:17:09 executing program 6: prctl$setmm(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) 2018/06/02 18:17:09 executing program 4: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt(r0, 0x111, 0x1, &(0x7f0000000000), 0x8b83c3f) 2018/06/02 18:17:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/06/02 18:17:09 executing program 0: r0 = socket(0x800000002b, 0x1, 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/06/02 18:17:09 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001280)=""/200, &(0x7f0000000040)=0xc8) close(r0) [ 249.711070] l2tp_ppp: tunl 4: set debug=7665642f [ 249.720967] IPVS: length: 39 != 8 [ 249.727645] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/06/02 18:17:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) [ 249.812099] l2tp_ppp: tunl 4: set debug=7665642f 2018/06/02 18:17:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) gettid() bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0xf, 0x1, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x9}, 0xfffffffffffffcb7) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0, 0x200}, 0xfffffffffffffd11) r3 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) rt_sigprocmask(0x0, &(0x7f0000000000)={0x4}, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x20000005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x13}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0x7, 0x4) r4 = socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x3f}, &(0x7f0000000480)=0x8) r5 = socket(0x8, 0x8000a, 0xd63) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) sendfile(r6, r6, &(0x7f00000000c0)=0x202, 0xdd) 2018/06/02 18:17:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/06/02 18:17:10 executing program 6: prctl$setmm(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) 2018/06/02 18:17:10 executing program 4: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt(r0, 0x111, 0x1, &(0x7f0000000000), 0x8b83c3f) 2018/06/02 18:17:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x3, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x108) 2018/06/02 18:17:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) 2018/06/02 18:17:10 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001280)=""/200, &(0x7f0000000040)=0xc8) close(r0) 2018/06/02 18:17:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001280)=""/200, &(0x7f0000000040)=0xc8) close(r0) [ 250.815037] l2tp_ppp: tunl 4: set debug=7665642f 2018/06/02 18:17:10 executing program 6: prctl$setmm(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) 2018/06/02 18:17:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x3, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x108) 2018/06/02 18:17:10 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) [ 250.843716] IPVS: length: 39 != 8 2018/06/02 18:17:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) 2018/06/02 18:17:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0xfffffffffffffffb}}) 2018/06/02 18:17:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) gettid() bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0xf, 0x1, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x9}, 0xfffffffffffffcb7) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0, 0x200}, 0xfffffffffffffd11) r3 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) rt_sigprocmask(0x0, &(0x7f0000000000)={0x4}, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x20000005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x13}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0x7, 0x4) r4 = socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x3f}, &(0x7f0000000480)=0x8) r5 = socket(0x8, 0x8000a, 0xd63) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) sendfile(r6, r6, &(0x7f00000000c0)=0x202, 0xdd) [ 251.019835] IPVS: length: 39 != 8 2018/06/02 18:17:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001280)=""/200, &(0x7f0000000040)=0xc8) close(r0) 2018/06/02 18:17:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x3, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x108) 2018/06/02 18:17:11 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0xfffffffffffffffb}}) 2018/06/02 18:17:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) 2018/06/02 18:17:11 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001280)=""/200, &(0x7f0000000040)=0xc8) close(r0) 2018/06/02 18:17:11 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0xfffffffffffffffb}}) 2018/06/02 18:17:11 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x3, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x108) 2018/06/02 18:17:11 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0xfffffffffffffffb}}) 2018/06/02 18:17:12 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:12 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, [0x0, 0x80080000000]}) 2018/06/02 18:17:12 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 2018/06/02 18:17:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x101, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) 2018/06/02 18:17:12 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x49, 0x0, 0x11]}) 2018/06/02 18:17:12 executing program 0: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:12 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:12 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r1, &(0x7f0000009f9c)=""/100, 0x64) 2018/06/02 18:17:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/252, 0xfc}], 0x1, 0x0) 2018/06/02 18:17:12 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:12 executing program 0: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x101, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) 2018/06/02 18:17:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, [0x0, 0x80080000000]}) 2018/06/02 18:17:12 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x49, 0x0, 0x11]}) 2018/06/02 18:17:12 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 2018/06/02 18:17:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, [0x0, 0x80080000000]}) 2018/06/02 18:17:12 executing program 0: r0 = semget$private(0x0, 0x3, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6915, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x4, 0x20400) accept4$inet(r2, 0x0, &(0x7f00000009c0)=0xfcf8, 0xfffffffffffffffd) init_module(&(0x7f0000000240)="7daf28619f6509000e2525c535fb5e6833a382c76302cfc9ca75bcb8cc011af64fa85853211024700f683b7f17396c51ddc08ef0952f132907a1834a574e86afd919ba84248a5ea4b2af782ee92a2a1568f98ba7b73b29275b394ecdec9adad6e5ef3caf897aaf78d54a843c5ea2cb87d2f5bf6be681c5baa44aa48d8f6b86890fef716084", 0x85, &(0x7f0000000300)="7b6370757365749c2d74727573746564285d232a6b657972696e6773797374656d80302d00") sendto$ax25(r3, &(0x7f00000005c0)="537aad17e69f25d46df7cb3fcc5aa3d3cf914242c44b84b312577253a4ef4440ec1dbfe4733f969aa39099391f053c01f72008c9ca109491c0a2c5b3146a1e33d24ad653", 0x44, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, "159e9c232f92f3ba5c0feddf94041585f080d83d192469ee40dd28436a51c8b331a5b51f9b9301c770edf151"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0x5]}) syslog(0x0, &(0x7f0000000640)=""/108, 0x53) open_by_handle_at(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="08f60d000000000000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x4}}, 0x3, 0x7, 0x10001, "a3a55df5f9ceec0c658727f8ef55357eab7115c98b768039c42f3a5db2f3058cac8138712395f1c3811ee389fccde312afab9b8fb1225d0e4659b2e457426bffe1c7e604fb6927b0b04957e1caea44ff"}, 0xd8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/72) semop(0x0, &(0x7f0000000040)=[{0x20, 0xb52e}, {}], 0x2aaaaaf2) semop(r0, &(0x7f0000000080)=[{0x3, 0xd55, 0x1800}, {0x2, 0x80}, {0x2, 0x0, 0x1800}, {0x1, 0x3, 0x1000}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x40600) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) 2018/06/02 18:17:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/252, 0xfc}], 0x1, 0x0) 2018/06/02 18:17:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x101, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) 2018/06/02 18:17:13 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x49, 0x0, 0x11]}) 2018/06/02 18:17:13 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 2018/06/02 18:17:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x101, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) 2018/06/02 18:17:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x101, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) 2018/06/02 18:17:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, [0x0, 0x80080000000]}) 2018/06/02 18:17:13 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r1, &(0x7f0000009f9c)=""/100, 0x64) 2018/06/02 18:17:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/252, 0xfc}], 0x1, 0x0) 2018/06/02 18:17:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/252, 0xfc}], 0x1, 0x0) 2018/06/02 18:17:14 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 2018/06/02 18:17:14 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0xe78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x938, 0xab0, 0xae0, [@among={'among\x00', 0x850, {{0x50080000, 0x0, 0x0, {[], 0x1, [{[], @dev={0xac, 0x14, 0x14}}]}, {[], 0x3, [{[], @dev={0xac, 0x14, 0x14}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @broadcast=0xffffffff}]}}}}, @helper={'helper\x00', 0x28, {{0x0, 'H.245\x00'}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0xef0) 2018/06/02 18:17:14 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x49, 0x0, 0x11]}) 2018/06/02 18:17:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x101, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) 2018/06/02 18:17:14 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r1, &(0x7f0000009f9c)=""/100, 0x64) 2018/06/02 18:17:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="440f017143b8010000000f01c166baf80cb8c4f67087ef66bafc0ced66bad00466b8000066ef660f38827ae3460f22800f01df66baf80cb894cff68eef66bafc0c66b8ef5c66efc74424005a000000c74424020cc90000ff2c2443d9ff", 0x5d}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 2018/06/02 18:17:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0xe78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x938, 0xab0, 0xae0, [@among={'among\x00', 0x850, {{0x50080000, 0x0, 0x0, {[], 0x1, [{[], @dev={0xac, 0x14, 0x14}}]}, {[], 0x3, [{[], @dev={0xac, 0x14, 0x14}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @broadcast=0xffffffff}]}}}}, @helper={'helper\x00', 0x28, {{0x0, 'H.245\x00'}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0xef0) 2018/06/02 18:17:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x101, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x14, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) 2018/06/02 18:17:14 executing program 4: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000a32000/0x4000)=nil, 0x4000) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000140)=ANY=[]) 2018/06/02 18:17:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:14 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0xe78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x938, 0xab0, 0xae0, [@among={'among\x00', 0x850, {{0x50080000, 0x0, 0x0, {[], 0x1, [{[], @dev={0xac, 0x14, 0x14}}]}, {[], 0x3, [{[], @dev={0xac, 0x14, 0x14}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @broadcast=0xffffffff}]}}}}, @helper={'helper\x00', 0x28, {{0x0, 'H.245\x00'}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0xef0) 2018/06/02 18:17:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/06/02 18:17:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:15 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r1, &(0x7f0000009f9c)=""/100, 0x64) 2018/06/02 18:17:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, "", [[], []]}, 0x220) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000002c0), 0x40000f7, 0x60, &(0x7f0000000200)={0x0, r4+10000000}) 2018/06/02 18:17:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:15 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0xe78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x938, 0xab0, 0xae0, [@among={'among\x00', 0x850, {{0x50080000, 0x0, 0x0, {[], 0x1, [{[], @dev={0xac, 0x14, 0x14}}]}, {[], 0x3, [{[], @dev={0xac, 0x14, 0x14}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @broadcast=0xffffffff}]}}}}, @helper={'helper\x00', 0x28, {{0x0, 'H.245\x00'}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0xef0) 2018/06/02 18:17:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000f840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8000) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/06/02 18:17:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/06/02 18:17:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000003580)=@ax25, 0x80, &(0x7f0000003780), 0x0, &(0x7f00000037c0)=""/171, 0xab}}], 0x1, 0x0, &(0x7f0000003ac0)) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2018/06/02 18:17:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) [ 255.749609] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 2018/06/02 18:17:16 executing program 4: r0 = socket$kcm(0x29, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000480)={@void, @val, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:16 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x1a, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 2018/06/02 18:17:16 executing program 1: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @control}], 0x30) r5 = memfd_create(&(0x7f00008effff)='\t', 0x0) r6 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r6, r5) write$sndseq(r5, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 2018/06/02 18:17:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000003580)=@ax25, 0x80, &(0x7f0000003780), 0x0, &(0x7f00000037c0)=""/171, 0xab}}], 0x1, 0x0, &(0x7f0000003ac0)) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2018/06/02 18:17:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, "", [[], []]}, 0x220) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000002c0), 0x40000f7, 0x60, &(0x7f0000000200)={0x0, r4+10000000}) 2018/06/02 18:17:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x400000b, 0x6, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:16 executing program 3: r0 = socket$inet6(0xa, 0x20000000080802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tnepres-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2f7, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/53, 0x35}, {&(0x7f0000001440)=""/190, 0xbe}], 0x2, &(0x7f0000000000)=""/31, 0x1f}, 0x0) 2018/06/02 18:17:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/06/02 18:17:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200), &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) open$dir(&(0x7f00000001c0)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:17:16 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x1a, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 2018/06/02 18:17:17 executing program 4: r0 = socket$kcm(0x29, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000480)={@void, @val, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000003580)=@ax25, 0x80, &(0x7f0000003780), 0x0, &(0x7f00000037c0)=""/171, 0xab}}], 0x1, 0x0, &(0x7f0000003ac0)) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2018/06/02 18:17:17 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:17 executing program 3: r0 = socket$inet6(0xa, 0x20000000080802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tnepres-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2f7, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/53, 0x35}, {&(0x7f0000001440)=""/190, 0xbe}], 0x2, &(0x7f0000000000)=""/31, 0x1f}, 0x0) 2018/06/02 18:17:17 executing program 1: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @control}], 0x30) r5 = memfd_create(&(0x7f00008effff)='\t', 0x0) r6 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r6, r5) write$sndseq(r5, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 2018/06/02 18:17:17 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x1a, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 2018/06/02 18:17:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, "", [[], []]}, 0x220) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000002c0), 0x40000f7, 0x60, &(0x7f0000000200)={0x0, r4+10000000}) 2018/06/02 18:17:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200), &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) open$dir(&(0x7f00000001c0)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:17:17 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x1a, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 2018/06/02 18:17:17 executing program 3: r0 = socket$inet6(0xa, 0x20000000080802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tnepres-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2f7, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/53, 0x35}, {&(0x7f0000001440)=""/190, 0xbe}], 0x2, &(0x7f0000000000)=""/31, 0x1f}, 0x0) 2018/06/02 18:17:17 executing program 1: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @control}], 0x30) r5 = memfd_create(&(0x7f00008effff)='\t', 0x0) r6 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r6, r5) write$sndseq(r5, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 2018/06/02 18:17:17 executing program 4: r0 = socket$kcm(0x29, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000480)={@void, @val, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:17 executing program 2: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000640)={0x0, 0x7, 0x3, 0x2}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000006c0)={r2, 0x81}, &(0x7f0000000700)=0x8) r4 = socket$inet6(0xa, 0x2, 0x200000088) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}}, &(0x7f0000000040)=0x20) recvfrom$inet6(r4, &(0x7f00000003c0)=""/185, 0xb9, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x1000, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x300, @dev={0xfe, 0x80, [], 0x14}, 0x7}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x10000000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x100000001}, 0xf) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000740)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r5 = socket$inet6(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000300)=0xbe, &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r3, 0x3}, 0x8) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000480)={0x1, 0xfffffffffffeffff, 0x5, 0x50}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001900)={{{@in=@multicast2, @in=@remote}}, {{@in6=@local}}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000004c0)={r3, 0x4}, &(0x7f0000000500)=0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f00000000c0)={0x0, 0x3617}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e22, 0x8, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x9}, {0xa, 0x4e22, 0x800, @mcast1={0xff, 0x1, [], 0x1}, 0x5dfb}, 0x5, [0x400, 0x3, 0x3, 0x9, 0x8000, 0xdb4, 0x7, 0x3]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x2000005, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) 2018/06/02 18:17:17 executing program 3: r0 = socket$inet6(0xa, 0x20000000080802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tnepres-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2f7, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001340)=""/53, 0x35}, {&(0x7f0000001440)=""/190, 0xbe}], 0x2, &(0x7f0000000000)=""/31, 0x1f}, 0x0) 2018/06/02 18:17:17 executing program 1: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @tick, {}, {}, @control}], 0x30) r5 = memfd_create(&(0x7f00008effff)='\t', 0x0) r6 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r6, r5) write$sndseq(r5, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 2018/06/02 18:17:17 executing program 1: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/06/02 18:17:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae88, &(0x7f0000000040)) 2018/06/02 18:17:18 executing program 4: r0 = socket$kcm(0x29, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f0000000480)={@void, @val, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, "", [[], []]}, 0x220) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000002c0), 0x40000f7, 0x60, &(0x7f0000000200)={0x0, r4+10000000}) 2018/06/02 18:17:18 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f3266b9800000c00f326635000100000f3066b90008000066b83f00000066ba000000000f30dfc40ffbff0fc76a00baf80c66b831c06c8a66efbafc0cb01beebaa100ecba4200b00feedf32", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:17:18 executing program 1: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/06/02 18:17:18 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000003580)=@ax25, 0x80, &(0x7f0000003780), 0x0, &(0x7f00000037c0)=""/171, 0xab}}], 0x1, 0x0, &(0x7f0000003ac0)) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2018/06/02 18:17:18 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200), &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) open$dir(&(0x7f00000001c0)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:17:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae88, &(0x7f0000000040)) 2018/06/02 18:17:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae88, &(0x7f0000000040)) 2018/06/02 18:17:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f3266b9800000c00f326635000100000f3066b90008000066b83f00000066ba000000000f30dfc40ffbff0fc76a00baf80c66b831c06c8a66efbafc0cb01beebaa100ecba4200b00feedf32", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:17:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae88, &(0x7f0000000040)) 2018/06/02 18:17:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f3266b9800000c00f326635000100000f3066b90008000066b83f00000066ba000000000f30dfc40ffbff0fc76a00baf80c66b831c06c8a66efbafc0cb01beebaa100ecba4200b00feedf32", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:17:19 executing program 3: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/06/02 18:17:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f3266b9800000c00f326635000100000f3066b90008000066b83f00000066ba000000000f30dfc40ffbff0fc76a00baf80c66b831c06c8a66efbafc0cb01beebaa100ecba4200b00feedf32", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:17:19 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/06/02 18:17:19 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/06/02 18:17:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200), &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) open$dir(&(0x7f00000001c0)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:17:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000003700)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003840), 0x0, &(0x7f0000003880)=""/170, 0xaa}}], 0x1, 0x0, &(0x7f0000003bc0)) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000080)={0x2c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@typed={0x18, 0x0, @str=')(mime_typetrusted\x00'}]}, 0x2c}, 0x1}, 0x0) 2018/06/02 18:17:19 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:19 executing program 3: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/06/02 18:17:19 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket(0xa, 0x1, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) ioctl(r3, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/02 18:17:19 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/06/02 18:17:19 executing program 1: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/06/02 18:17:20 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 2018/06/02 18:17:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) bind$unix(r0, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0x2) 2018/06/02 18:17:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) bind$unix(r0, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0x2) 2018/06/02 18:17:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) bind$unix(r0, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0x2) 2018/06/02 18:17:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) bind$unix(r0, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0x2) 2018/06/02 18:17:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r0}) 2018/06/02 18:17:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r0}) 2018/06/02 18:17:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r0}) 2018/06/02 18:17:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r0}) 2018/06/02 18:17:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_HYPERV_EVENTFD(r2, 0x8010aebb, &(0x7f0000000080)) 2018/06/02 18:17:21 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:21 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_mcast\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/213, 0xd5}, {&(0x7f0000000500)=""/214, 0xd6}], 0x2, 0x0) 2018/06/02 18:17:21 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:21 executing program 1: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/06/02 18:17:21 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 2018/06/02 18:17:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3}, 0x2c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x8000000000009, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) 2018/06/02 18:17:21 executing program 3: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$addseals(r1, 0x409, 0x0) close(r0) 2018/06/02 18:17:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_HYPERV_EVENTFD(r2, 0x8010aebb, &(0x7f0000000080)) 2018/06/02 18:17:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3}, 0x2c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x8000000000009, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) 2018/06/02 18:17:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000280)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 2018/06/02 18:17:21 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 2018/06/02 18:17:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_HYPERV_EVENTFD(r2, 0x8010aebb, &(0x7f0000000080)) 2018/06/02 18:17:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3}, 0x2c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x8000000000009, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) 2018/06/02 18:17:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000280)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 2018/06/02 18:17:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x8000400) ioctl$KVM_HYPERV_EVENTFD(r2, 0x8010aebb, &(0x7f0000000080)) 2018/06/02 18:17:21 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') [ 261.450300] device bridge_slave_1 left promiscuous mode [ 261.455970] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.473624] IPVS: ftp: loaded support on port[0] = 21 [ 261.486659] device bridge_slave_0 left promiscuous mode [ 261.492313] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.537877] team0 (unregistering): Port device team_slave_1 removed [ 261.547596] team0 (unregistering): Port device team_slave_0 removed [ 261.559917] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 261.575460] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 261.603614] bond0 (unregistering): Released all slaves 2018/06/02 18:17:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, &(0x7f0000000140)) 2018/06/02 18:17:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3}, 0x2c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x8000000000009, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 262.334819] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.341234] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.348630] device bridge_slave_0 entered promiscuous mode [ 262.383611] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.390045] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.397417] device bridge_slave_1 entered promiscuous mode [ 262.432808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 262.466508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 262.568548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.606285] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.765118] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 262.772623] team0: Port device team_slave_0 added [ 262.807658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 262.814997] team0: Port device team_slave_1 added [ 262.849437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.886734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.915071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.922262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.936759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.986162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 262.993365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.006553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.237427] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.243801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.250429] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.256774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.979304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.050051] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 264.120725] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.126898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.134426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.202391] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:17:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x7, 0x800000000b, 0x3}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sigaltstack(&(0x7f0000141000/0x1000)=nil, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/02 18:17:24 executing program 4: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/06/02 18:17:24 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 2018/06/02 18:17:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, &(0x7f0000000140)) 2018/06/02 18:17:24 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10200000088) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0xff, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0x1cb, 0x0, 0x0, 0x364) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000002540)}, 0x0) 2018/06/02 18:17:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000280)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 2018/06/02 18:17:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d01, 0x44d564b]}) [ 264.868423] device bridge_slave_1 left promiscuous mode [ 264.874007] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.890600] device bridge_slave_0 left promiscuous mode [ 264.896162] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.926611] team0 (unregistering): Port device team_slave_1 removed [ 264.936655] team0 (unregistering): Port device team_slave_0 removed [ 264.948478] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 264.962394] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 264.987108] bond0 (unregistering): Released all slaves 2018/06/02 18:17:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x7, 0x800000000b, 0x3}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000280)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 2018/06/02 18:17:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sigaltstack(&(0x7f0000141000/0x1000)=nil, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/02 18:17:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, &(0x7f0000000140)) 2018/06/02 18:17:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d01, 0x44d564b]}) 2018/06/02 18:17:25 executing program 4: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="b234d1ddb716b124dd223418acbcd1dea8887973ad625d9ed2b31e6d97c5fb65bec3c17c71963d6bb1a131f1ec18564ba7135284b9fff200f6c91ddb82f43388708802a1c6f6920b15ad6e380b3820fb7f806ce4e3565228f7f3204cab551e82f31b6726fd601278d1dba8357b0e5e5922497a415fe0f6e9d031038444aba6778c6819448d7bf1673025168bd737ff60b70db5d56bff1f1e67d467022c62cac400c3b187e3b8458627e5f6788e6b85bac4acd164630de79d280d465f7886f1a0c8c3012c356d636e2b31d88b8ee6a67f01d9c2d8a9fe2e0d12336ea7d6375bcac4a8f16a179d232216dec8f3657a70ca69da8c8c66168bdf0ef6ec1926fb41add41a7106da5e2e5c60adb03e973afb9a625136f4076f51fd7d835dde482ea2cec3e04b08232fdb7093092118a17885b6e5f2734b3cc09246dc9d22f7acf81b4471740128e22759430b5855a724afeb2503f406df7157cad23b9547385253d9c6c8cbe04d31378d1158772e1bb1c9119855047a7698c3911532f6d34ebbc6b209bed4d0d63c21cddf8bbd48a05c110b5d25bbecb81ddcd5b7033502e91c5e18daa404e4789a363a0ad4bc68c237c389629c3a94370149b40a98b9d7009ebd1ca0075cc1440881e8448cd53e1416feb9aad8de7a8d8ce4394cb5e7f6d6f7aa802adaa615e31a612fec0cb8c17e83a37d39db46a911ae71f158c6d52c6e2e4bb421b861286a2a1d424557ec3d078615d718bd00d03b9e3d430e2ae97c44e0a8710d4549ba641e703031599a5ca132e29665df3caed2428058597fc47e70d3be1f0a3c86e462a0652f8bba54e36c4e1562c7ecd11c6ddf42da2a9cebcb3471a2249d5ad4d1bef5237ca7f470adf4f52432824f423e8eb08fd65fc577e5c6e0ac2fd05b1780ec0cd62f42b663e8bf6711115a1d105989d62f22c3a8a898ca9590997ce5285cb3afafe8ea64716e0d223d59975b11e9c7cfec5e31fef508131855457d7e0360919813c285e640ef520ffc163ee9819d2124fe6ab876905983c0bd754512f12207097e4b6972cb73cd0df60a3738907c80e23a8097c074baede04d677dfd8cce8dcaf4f8183dbc4ebad9b30679ce89c68b7712ba6a529d4bb58e77b69fdbbf2d05a902ab6e4003740b2a862773e6082264634d7e4365c84232d88dac5b0dd0a7c66f66a26e3747b7e4eb438889e4c8134b782b453e82a66d09678fc336e25ed8f6cc0e9f3bd84c2a626e6d3d87ef91c8d92d4721f92b524ef62297f2f6629a4b62be8bff6968e690873f666314c2cf62bdac9f1c0ce0d95b94b8835683cf1e393bb02f722e1cfe50bc7a80b59d70ec07ce0a7a812480abaac061fb0421633b5e1bff5cfeb7a92c10badd2aed9b81f979f9552929f47cb98fab19c106d512ba58da43f2ddf575be31b694cc1a9b01ffaa40e4df354e9f74b5902b26d1af3c1c0916b61c4555532837f1b169b004b891c4d0d77efe90d215bdec77f6540dd690cece0d6057474091b262b447218e7d564cb9eae24f605637d96bb5aab1021afbeb3cc692398afb2646c6d655c787a2b7e2553761be694463b5e6309f6541ea0d333d68bb719d2bbfaef41f3fa78037b29977340f1dc92454910b0be07a82d1aaf5e74a5e787a9487f381d8b9fdd132116d8de316e47e2de75663455f719f9ba7310222dc2ad760c346a9aa1b4a4255eb8c187e8b5a0f1ae733c25f9e1e107242abfdf2872276942d9fa0e4947e5363a2c90eaad5bbc32e8ef3f1670cfa49b202e586cf846ce0586479f7bd2b1c24e56b442e0a65b5859e0e89c6462e4800c35eb25aefcdca9ac00d82d7cd84bd2cc025e4d803154e434b5c3c4f47f6e72f0719225ce39904e5d1c168cce98e353e8f74b1f3cc7719cdd8991473202a8d3480a05e5638354bc22cc904e762bfe2e992967cce774629faffb61426143ed3c5147045ac493079fb26921d8f9a361933cbb199ab502325c43a77753c6bd5de823f64b84279df7e5ecc995fbc913253618bf30e5834c8a1de43d7bacc0f85150aa2d9d8ddf386851cc6e5cb41a7cee85668aef2aa2e681aac7ececdae386d512da12de258271dc6325c454aa12f9c260ea13b1bd84413814dc8e324c237d78ae1eeae05889aaa3f24aabf163358ca21bc1814bf9225eb904cb9b3f9327a13afeb421ea7f45e7c94d184eeca0347fcccb8eccb2dbdd571f14a466acde4d3d2a621671f40e33401ccf7705b161a7935916928801277850d8e819e616c818eef6347f8e84ef4e5a96d8e8b094fa93f3ac58e332ae043356e84eb37e1592f0d336f1e059cad33eabc9b7c2236a8c590c4428b57d9401c2b48c04b11e47e9586ee44efc3997fa60ba76a6555edd929838d635cd98c1ea224c93fd495a604156643356e5d7730d4eb6d539d04899d9021d70cb7c2842f103eb2efc9807ccbfbe10c0fd3639bec5b659f05466c2cc2ecede0ee89df3aa4166844e6eb87ed505582aa1ff7b897226637bd8e15d4bc64fd7c34a9bcf35c3ce89e7f286c0b00235b92c969bc644a17e26e50c2f010005da34dc55604d7ce372580b88caeb9b7b12aa2650c3efa97c81f44f7e78677e60ab27852260ac3312eebb9f0c5fb86644d7d26747e446b0e07e1fcf1ede6e5185829adab1349b33c17585a9a2f0c9d15cf95d8873b89ede585d010ff0944f8bab927b4ca5f3044ea74b04839ffe6d95f86efbc78f449a47a3524b62f2d920d79b16724bb2cd464758d4b1e247442ff6a60f95310c1e3fd37e357d7708b6c9d998d67d5492cc805d945a71a1567535319b0b1cff49c212807317940b7ad165b9e0b6532fb40da84fc463c7e8b6340bde1682ec2cc622dee977d1ef5e6a2b384e6aae288d60baaebc6f0572fd99bd1ed8e887382923f4b96cb392f6e239bef51d642ca297a1fd26a56f4464b89fd41beddae96109ff2f732b9275e4247ebe8f30459e0c6c974ae7916700d32c545b0699ca94289023314b9c9b9c895f8146fba9d97a648483097592ba02ccd8c3ea79ade4bd33d5c9756675b3176d5ee6cb4fa68181692a44028551aa35a42024a4fafc69e8df95becc75085cda9b214317042ef79ff244ee11dcab6f2bb3144b0ccf37afb4057870325bcb36a72f58bb3004c4f14a034199ff40edd7a18c55c5bc24df7c99a9a44683264b20c2f64b6928a89fbdf40761180f4fa68235cc10103bffbda33925476eb047403a252e4e9f1b92d960aecbb25283cba0d39a1e735bb385989fc1025bd4468211b9bdbc48276a05a8a1fa94a8f4901d0c6db77e25eed1c6b1dd224d7394d836e56b259e650cf696d81ca9b76fe28d232d7d08fa2293372d64359db8ae6c12c459c7ca8cac1db1a6cce99257732bf2671f5b15847bd641f70ddf92970b10495e1700e0e7c907d4ea7f782989993616e259f80b22e629c266bac92bb7c9ee33bbf1d39e7522a88c236ba7917df1f65b0f87e7086997810b8d4906da073a3924d2bd198eead1e2b96e54ca4a8eb6bd1b761d30cc40d259750151be5ec286fa38cda94ae8a18cea1547c071e7e65fa75ac1cd8635469649d6bea0feb9bb86b5b246e308cd98cee931138ac41574d804a4f79014fc076592cf0238e905efd7d0926739d64111273a259d1e7f0d15a5286494266c3b6f12cd5cab90b3cee9ee7b07108013f1c2f8f7449ba7782041f1714d27fb59330e54a908c4ad6af8c67d92c176aaff5c67545ddb8598026e2b19690acf236f3ac816692c8a9f4411bb7b77e55f2aa251f7ce3adb6f6b3a822a490846fecd6b7599879d13c2c558d92378c8b93284cfdc3f9194a902ac58c5884f04d5c52302a6cad97daf25edffd021912341e79b246057fade7ca556b37b5e9a43aeb78ccfe667bebc6c575301fe10582c23812934ae1b27ad992b82e3277916898f8a77deef08d621e501b1b9417d951c1c531ea8115699ad4e05b640f10e99a8826db60ecbe1e3cbb878b34ec99df51a50602e474444c295a7840372fc5789c721804edb6296e6e35ef509b818b15c284eafc4e96276c83b75fc6994bb3ff1fdbabda2c5e001d334f6f23ed09d67a0a1b88d52107781ad603be2355c36bb29015e624a451ddfb317d374255914ba0f6ffb2c88e12b72ef807ed53c89e8caa01b84f1ccd22077e69ff18d3c8d77f5cf213f2c59e2f9daa67e33fbef7f10391605ebd6af8dba0ec2d8c21d484a0173e451d92f8cfd8f52e88b147c0f7057435d939a5142b0a8ec3e3cd58a84e95a767ed391c5c87db7bf6f93a6dbcf7c8b97566f0e7d7934578434fa0453e4aeaaf1574a45716e165401b1625540b943273373e01ba43a2711b8d7952a870c90483b37ce7b3f8744e99dd49d3a0d32fddd705b00807da0ea88269e47a7094252457351b294dacb278cff80fc2b2f76e19e6858a6ea1c35fa3008b0aeea16fb234041e5b4349dc6706eaefb144881c65455757c55a958a24e27ed147c7274db4b3c0e9bcb6888488b663509e8a4f1e3326eb9d263f41198c4403e404c2c1f890b63d735b73c1505bea5297f2b2b99056ccf69670c492a759cf15e73bf32e156d8358ddbd77c96c60be51e6cae5e5a2fa6652aecff210c9eb7b5a5cc1515a3b0213bc2cb42f2b50394b8672709ac30b50713a37ec5c25f213e173f5c73567c34a8a004501f91934d5563f928edfcb0acba36ea063d1f688414d12d8f509833408964c866c5d7b6c89a7f0c97544a714a77fed28ee68607ff6dac985a30e49d0f311e25ac7e91b9a24f05bfc4377329ec79cb5c0cd14d0ca9ba305321760ddcd8b86f338474fa08b45740d9a60ea49057ec21e9fa7811fa9c8252427aa38d0bc08ff24a9fccc5c79ff692fa72bbf075e7c792c5d5bd5ba763ab224d2868ddaeb9fbe3cae22103b90b0b3b0869c64895a4444b65c4e074eeeae5b0786e662d6a79a2d4701b2f89ab4afd1e9ebebf91683d8d936e9f2a49c6dbd3dba826401273a34460648ad82ba9edba3aa5263aea423da8ebebee5034bf97340c9f071896e8be3d0cd2c4bde22c422b18bdad807f45eb44e1c61a4be64111075436c1fb0b44fabe3e2b4bdf5c9c561377c9b893cca7b397dcc25bf1271a677186ad496ceecf6aa4fe7db610ac5e75a71d0c3c011cb4099ac86484bafc1aedf9d34aa9d88b67d8976b22a64252ab130dbbe1c576c6b7200ffbd323a019342fc600287ed085b120a01769b865b7a94f862026dfa4a0cff99e004d5b104a66b2281d313229b542c83d4af4786a9816dee09ab3395388548048644c61dc3d39b33b03fbb743ed33b8f496312a097e3b5f4994bb8ca6e7f3becf1840c5b4883bf972da230b21247cb3799c2f2a07b282423218e580db31f5a6020e32d88ee9c46e2df88ae1524a734da18021932a654a6e3c6d8bca32b19c458da663df1de867b933798c6ce061c61e20d2bd9d96d2bc4d0625b0d510453afb6fd91b1a6cdbfb540bb933dece478cc8ef6a98054eb62aaf1fe8adb6e59da3d67e487d33887fdd9c8ce6798f827d415cb99f1874264e396041f30c38a68938221f71615fb5aae6bff42b3b425daa073084c85298fb56e1ceaed2978cb951d0291f82a6403e6da706ec2e7a67c431b00117b3acbbecc9ecb5b7d7e168b553a1bc938947d5c57741c10f43bc293730511cef8be8b16bd4f1810414b9fa5be4352fdade90a94c041acda18c0f6f19a2b883b119a81d8b8c18228c6d4cef0ba71c34563f61ec75af163d748f414e6e79ebf189dce063dc47e4cfa936524139e7eec789174502180950202eb4cbf1e79d3b3f1a0db19368b92", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/06/02 18:17:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0xc, 0x1, [{}, {}]}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:25 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10200000088) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0xff, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0x1cb, 0x0, 0x0, 0x364) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000002540)}, 0x0) 2018/06/02 18:17:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x7, 0x800000000b, 0x3}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sigaltstack(&(0x7f0000141000/0x1000)=nil, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/02 18:17:25 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:17:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, &(0x7f0000000140)) 2018/06/02 18:17:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d01, 0x44d564b]}) [ 266.003000] IPVS: ftp: loaded support on port[0] = 21 [ 266.476387] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.483518] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.490755] device bridge_slave_0 entered promiscuous mode [ 266.526758] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.533179] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.540285] device bridge_slave_1 entered promiscuous mode [ 266.563686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.589064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 266.661752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.686571] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.783393] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 266.790471] team0: Port device team_slave_0 added [ 266.812280] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 266.819541] team0: Port device team_slave_1 added [ 266.841668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 266.848785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.857171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.875355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.898575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 266.905633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.914106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.932074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 266.939229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.947605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.148555] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.154933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.161567] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.167919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.175207] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 267.807122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.900727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.973052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 268.045354] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 268.051514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.058948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.127147] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:17:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x7, 0x800000000b, 0x3}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:17:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sigaltstack(&(0x7f0000141000/0x1000)=nil, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/02 18:17:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x13}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d01, 0x44d564b]}) 2018/06/02 18:17:28 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10200000088) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0xff, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0x1cb, 0x0, 0x0, 0x364) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000002540)}, 0x0) 2018/06/02 18:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0xc, 0x1, [{}, {}]}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:28 executing program 4: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="b234d1ddb716b124dd223418acbcd1dea8887973ad625d9ed2b31e6d97c5fb65bec3c17c71963d6bb1a131f1ec18564ba7135284b9fff200f6c91ddb82f43388708802a1c6f6920b15ad6e380b3820fb7f806ce4e3565228f7f3204cab551e82f31b6726fd601278d1dba8357b0e5e5922497a415fe0f6e9d031038444aba6778c6819448d7bf1673025168bd737ff60b70db5d56bff1f1e67d467022c62cac400c3b187e3b8458627e5f6788e6b85bac4acd164630de79d280d465f7886f1a0c8c3012c356d636e2b31d88b8ee6a67f01d9c2d8a9fe2e0d12336ea7d6375bcac4a8f16a179d232216dec8f3657a70ca69da8c8c66168bdf0ef6ec1926fb41add41a7106da5e2e5c60adb03e973afb9a625136f4076f51fd7d835dde482ea2cec3e04b08232fdb7093092118a17885b6e5f2734b3cc09246dc9d22f7acf81b4471740128e22759430b5855a724afeb2503f406df7157cad23b9547385253d9c6c8cbe04d31378d1158772e1bb1c9119855047a7698c3911532f6d34ebbc6b209bed4d0d63c21cddf8bbd48a05c110b5d25bbecb81ddcd5b7033502e91c5e18daa404e4789a363a0ad4bc68c237c389629c3a94370149b40a98b9d7009ebd1ca0075cc1440881e8448cd53e1416feb9aad8de7a8d8ce4394cb5e7f6d6f7aa802adaa615e31a612fec0cb8c17e83a37d39db46a911ae71f158c6d52c6e2e4bb421b861286a2a1d424557ec3d078615d718bd00d03b9e3d430e2ae97c44e0a8710d4549ba641e703031599a5ca132e29665df3caed2428058597fc47e70d3be1f0a3c86e462a0652f8bba54e36c4e1562c7ecd11c6ddf42da2a9cebcb3471a2249d5ad4d1bef5237ca7f470adf4f52432824f423e8eb08fd65fc577e5c6e0ac2fd05b1780ec0cd62f42b663e8bf6711115a1d105989d62f22c3a8a898ca9590997ce5285cb3afafe8ea64716e0d223d59975b11e9c7cfec5e31fef508131855457d7e0360919813c285e640ef520ffc163ee9819d2124fe6ab876905983c0bd754512f12207097e4b6972cb73cd0df60a3738907c80e23a8097c074baede04d677dfd8cce8dcaf4f8183dbc4ebad9b30679ce89c68b7712ba6a529d4bb58e77b69fdbbf2d05a902ab6e4003740b2a862773e6082264634d7e4365c84232d88dac5b0dd0a7c66f66a26e3747b7e4eb438889e4c8134b782b453e82a66d09678fc336e25ed8f6cc0e9f3bd84c2a626e6d3d87ef91c8d92d4721f92b524ef62297f2f6629a4b62be8bff6968e690873f666314c2cf62bdac9f1c0ce0d95b94b8835683cf1e393bb02f722e1cfe50bc7a80b59d70ec07ce0a7a812480abaac061fb0421633b5e1bff5cfeb7a92c10badd2aed9b81f979f9552929f47cb98fab19c106d512ba58da43f2ddf575be31b694cc1a9b01ffaa40e4df354e9f74b5902b26d1af3c1c0916b61c4555532837f1b169b004b891c4d0d77efe90d215bdec77f6540dd690cece0d6057474091b262b447218e7d564cb9eae24f605637d96bb5aab1021afbeb3cc692398afb2646c6d655c787a2b7e2553761be694463b5e6309f6541ea0d333d68bb719d2bbfaef41f3fa78037b29977340f1dc92454910b0be07a82d1aaf5e74a5e787a9487f381d8b9fdd132116d8de316e47e2de75663455f719f9ba7310222dc2ad760c346a9aa1b4a4255eb8c187e8b5a0f1ae733c25f9e1e107242abfdf2872276942d9fa0e4947e5363a2c90eaad5bbc32e8ef3f1670cfa49b202e586cf846ce0586479f7bd2b1c24e56b442e0a65b5859e0e89c6462e4800c35eb25aefcdca9ac00d82d7cd84bd2cc025e4d803154e434b5c3c4f47f6e72f0719225ce39904e5d1c168cce98e353e8f74b1f3cc7719cdd8991473202a8d3480a05e5638354bc22cc904e762bfe2e992967cce774629faffb61426143ed3c5147045ac493079fb26921d8f9a361933cbb199ab502325c43a77753c6bd5de823f64b84279df7e5ecc995fbc913253618bf30e5834c8a1de43d7bacc0f85150aa2d9d8ddf386851cc6e5cb41a7cee85668aef2aa2e681aac7ececdae386d512da12de258271dc6325c454aa12f9c260ea13b1bd84413814dc8e324c237d78ae1eeae05889aaa3f24aabf163358ca21bc1814bf9225eb904cb9b3f9327a13afeb421ea7f45e7c94d184eeca0347fcccb8eccb2dbdd571f14a466acde4d3d2a621671f40e33401ccf7705b161a7935916928801277850d8e819e616c818eef6347f8e84ef4e5a96d8e8b094fa93f3ac58e332ae043356e84eb37e1592f0d336f1e059cad33eabc9b7c2236a8c590c4428b57d9401c2b48c04b11e47e9586ee44efc3997fa60ba76a6555edd929838d635cd98c1ea224c93fd495a604156643356e5d7730d4eb6d539d04899d9021d70cb7c2842f103eb2efc9807ccbfbe10c0fd3639bec5b659f05466c2cc2ecede0ee89df3aa4166844e6eb87ed505582aa1ff7b897226637bd8e15d4bc64fd7c34a9bcf35c3ce89e7f286c0b00235b92c969bc644a17e26e50c2f010005da34dc55604d7ce372580b88caeb9b7b12aa2650c3efa97c81f44f7e78677e60ab27852260ac3312eebb9f0c5fb86644d7d26747e446b0e07e1fcf1ede6e5185829adab1349b33c17585a9a2f0c9d15cf95d8873b89ede585d010ff0944f8bab927b4ca5f3044ea74b04839ffe6d95f86efbc78f449a47a3524b62f2d920d79b16724bb2cd464758d4b1e247442ff6a60f95310c1e3fd37e357d7708b6c9d998d67d5492cc805d945a71a1567535319b0b1cff49c212807317940b7ad165b9e0b6532fb40da84fc463c7e8b6340bde1682ec2cc622dee977d1ef5e6a2b384e6aae288d60baaebc6f0572fd99bd1ed8e887382923f4b96cb392f6e239bef51d642ca297a1fd26a56f4464b89fd41beddae96109ff2f732b9275e4247ebe8f30459e0c6c974ae7916700d32c545b0699ca94289023314b9c9b9c895f8146fba9d97a648483097592ba02ccd8c3ea79ade4bd33d5c9756675b3176d5ee6cb4fa68181692a44028551aa35a42024a4fafc69e8df95becc75085cda9b214317042ef79ff244ee11dcab6f2bb3144b0ccf37afb4057870325bcb36a72f58bb3004c4f14a034199ff40edd7a18c55c5bc24df7c99a9a44683264b20c2f64b6928a89fbdf40761180f4fa68235cc10103bffbda33925476eb047403a252e4e9f1b92d960aecbb25283cba0d39a1e735bb385989fc1025bd4468211b9bdbc48276a05a8a1fa94a8f4901d0c6db77e25eed1c6b1dd224d7394d836e56b259e650cf696d81ca9b76fe28d232d7d08fa2293372d64359db8ae6c12c459c7ca8cac1db1a6cce99257732bf2671f5b15847bd641f70ddf92970b10495e1700e0e7c907d4ea7f782989993616e259f80b22e629c266bac92bb7c9ee33bbf1d39e7522a88c236ba7917df1f65b0f87e7086997810b8d4906da073a3924d2bd198eead1e2b96e54ca4a8eb6bd1b761d30cc40d259750151be5ec286fa38cda94ae8a18cea1547c071e7e65fa75ac1cd8635469649d6bea0feb9bb86b5b246e308cd98cee931138ac41574d804a4f79014fc076592cf0238e905efd7d0926739d64111273a259d1e7f0d15a5286494266c3b6f12cd5cab90b3cee9ee7b07108013f1c2f8f7449ba7782041f1714d27fb59330e54a908c4ad6af8c67d92c176aaff5c67545ddb8598026e2b19690acf236f3ac816692c8a9f4411bb7b77e55f2aa251f7ce3adb6f6b3a822a490846fecd6b7599879d13c2c558d92378c8b93284cfdc3f9194a902ac58c5884f04d5c52302a6cad97daf25edffd021912341e79b246057fade7ca556b37b5e9a43aeb78ccfe667bebc6c575301fe10582c23812934ae1b27ad992b82e3277916898f8a77deef08d621e501b1b9417d951c1c531ea8115699ad4e05b640f10e99a8826db60ecbe1e3cbb878b34ec99df51a50602e474444c295a7840372fc5789c721804edb6296e6e35ef509b818b15c284eafc4e96276c83b75fc6994bb3ff1fdbabda2c5e001d334f6f23ed09d67a0a1b88d52107781ad603be2355c36bb29015e624a451ddfb317d374255914ba0f6ffb2c88e12b72ef807ed53c89e8caa01b84f1ccd22077e69ff18d3c8d77f5cf213f2c59e2f9daa67e33fbef7f10391605ebd6af8dba0ec2d8c21d484a0173e451d92f8cfd8f52e88b147c0f7057435d939a5142b0a8ec3e3cd58a84e95a767ed391c5c87db7bf6f93a6dbcf7c8b97566f0e7d7934578434fa0453e4aeaaf1574a45716e165401b1625540b943273373e01ba43a2711b8d7952a870c90483b37ce7b3f8744e99dd49d3a0d32fddd705b00807da0ea88269e47a7094252457351b294dacb278cff80fc2b2f76e19e6858a6ea1c35fa3008b0aeea16fb234041e5b4349dc6706eaefb144881c65455757c55a958a24e27ed147c7274db4b3c0e9bcb6888488b663509e8a4f1e3326eb9d263f41198c4403e404c2c1f890b63d735b73c1505bea5297f2b2b99056ccf69670c492a759cf15e73bf32e156d8358ddbd77c96c60be51e6cae5e5a2fa6652aecff210c9eb7b5a5cc1515a3b0213bc2cb42f2b50394b8672709ac30b50713a37ec5c25f213e173f5c73567c34a8a004501f91934d5563f928edfcb0acba36ea063d1f688414d12d8f509833408964c866c5d7b6c89a7f0c97544a714a77fed28ee68607ff6dac985a30e49d0f311e25ac7e91b9a24f05bfc4377329ec79cb5c0cd14d0ca9ba305321760ddcd8b86f338474fa08b45740d9a60ea49057ec21e9fa7811fa9c8252427aa38d0bc08ff24a9fccc5c79ff692fa72bbf075e7c792c5d5bd5ba763ab224d2868ddaeb9fbe3cae22103b90b0b3b0869c64895a4444b65c4e074eeeae5b0786e662d6a79a2d4701b2f89ab4afd1e9ebebf91683d8d936e9f2a49c6dbd3dba826401273a34460648ad82ba9edba3aa5263aea423da8ebebee5034bf97340c9f071896e8be3d0cd2c4bde22c422b18bdad807f45eb44e1c61a4be64111075436c1fb0b44fabe3e2b4bdf5c9c561377c9b893cca7b397dcc25bf1271a677186ad496ceecf6aa4fe7db610ac5e75a71d0c3c011cb4099ac86484bafc1aedf9d34aa9d88b67d8976b22a64252ab130dbbe1c576c6b7200ffbd323a019342fc600287ed085b120a01769b865b7a94f862026dfa4a0cff99e004d5b104a66b2281d313229b542c83d4af4786a9816dee09ab3395388548048644c61dc3d39b33b03fbb743ed33b8f496312a097e3b5f4994bb8ca6e7f3becf1840c5b4883bf972da230b21247cb3799c2f2a07b282423218e580db31f5a6020e32d88ee9c46e2df88ae1524a734da18021932a654a6e3c6d8bca32b19c458da663df1de867b933798c6ce061c61e20d2bd9d96d2bc4d0625b0d510453afb6fd91b1a6cdbfb540bb933dece478cc8ef6a98054eb62aaf1fe8adb6e59da3d67e487d33887fdd9c8ce6798f827d415cb99f1874264e396041f30c38a68938221f71615fb5aae6bff42b3b425daa073084c85298fb56e1ceaed2978cb951d0291f82a6403e6da706ec2e7a67c431b00117b3acbbecc9ecb5b7d7e168b553a1bc938947d5c57741c10f43bc293730511cef8be8b16bd4f1810414b9fa5be4352fdade90a94c041acda18c0f6f19a2b883b119a81d8b8c18228c6d4cef0ba71c34563f61ec75af163d748f414e6e79ebf189dce063dc47e4cfa936524139e7eec789174502180950202eb4cbf1e79d3b3f1a0db19368b92", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) [ 268.534525] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/06/02 18:17:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:17:28 executing program 1: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getpgid(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) 2018/06/02 18:17:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@errors_continue='errors=continue', 0x2c}]}) [ 268.621386] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/06/02 18:17:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009080800410400000000fcff", 0x58}], 0x1) 2018/06/02 18:17:28 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) poll(&(0x7f0000000040)=[{r0}], 0x291, 0x0) 2018/06/02 18:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0xc, 0x1, [{}, {}]}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 268.773280] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 268.773280] [ 268.821339] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 268.900832] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 268.900832] 2018/06/02 18:17:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009080800410400000000fcff", 0x58}], 0x1) 2018/06/02 18:17:29 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x3, &(0x7f0000000c00)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) 2018/06/02 18:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0xc, 0x1, [{}, {}]}]}, 0x28}, 0x1}, 0x0) 2018/06/02 18:17:29 executing program 1: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getpgid(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) 2018/06/02 18:17:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@errors_continue='errors=continue', 0x2c}]}) 2018/06/02 18:17:29 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10200000088) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0xff, 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0x1cb, 0x0, 0x0, 0x364) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000002540)}, 0x0) 2018/06/02 18:17:29 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) poll(&(0x7f0000000040)=[{r0}], 0x291, 0x0) 2018/06/02 18:17:29 executing program 4: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x25, 0x6}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2b, 0x88100) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa}) getpid() pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = userfaultfd(0x0) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="92a266b4a240cfa7e88cd92f14e4872e3aefe33fc046189b1210f7f67809bfaf08b5a630da851cab97e78ab083448d5b91d461f9d27ecbcd547a94ca5b02f8c21a29293b2a403fbb05273508460a2b32d07d1562ee3d63f6b292d873a6c5894aa4f629cf5a038e08969d6b9a0d4151b3ed949060cdfff85e2969c02af9c060fb1ad99a0812f2f7d8ae6d41f4248f7355b2e4464ace3b865cb59d2fdc1cc348c20c2837dcb89e937a5c040a552f883d2093599f4629e8d50b6e56bad58cf0d55c0f0765549d27690dbfe2c659b11d956573ea53d9d0e07d00a3381d5696a5fad00c43eac8b9a2c000253d38a3dbdc55ea3825cc14c284ef", 0xf7}, {&(0x7f0000000540)="183c1658acb9b7b447a331d3c332906c06c28fe844dc7f859a566ba64ee00fe2c2a0713a40592f51787f96d6f8418800b882c8bdd4d5bcaa7a6a34e49f9f04c174a647ff2f4c68949c5c0d4f1e7df1d7f8d5aae07eebe5738362c1e4bf41b86aeeebd1770c1a903607ac1208afdc003653c634852aca9a612f271c3b7572f36a5c487eecda7408517660b9595539fd50cf51d7e0241c3f51103e4aded0edeb79f40dfb3f34f7d8b2420383c13e47a2cb0f2becccc146fff02ff167d2dcf23d42eadbdf8ef9c82c073e0aa410c43307ab68e6de139497c4aaaba604fa3c3ee0c0e8c5c4cb21be", 0xe6}, {&(0x7f0000000800)="6c152e49e7fd54ce81326b84b1ebecf1ff7fa3cc0b46510a02bf51056fcac717f141d004a55054128afdf407305ce5e0f24916e9c6ee60bac2f02cb6aec35506eb742836b69ffe78a1e0b1ea436a6ec9a733f378fcacdc575e255b321ced9f01222ab73b4b58a53ba93081e5fce437c28fb0817813f4376efa33e1c0ba8034af89c04efc0870eb81c6ba0c02ee26cdeed65d6e5a500a628c8a492df6f27a837edcd090d33f2f7f99ca1947a1a5cc4b5fe04d5436bf30803bfa641ebc79d3105f0e71c63003b925f7a6854ba4ab64b2875cfbc2ece8a1ec169cd8cc5fb7ae2e849fd94f", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, 0x8) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) socket(0xb, 0x0, 0x4) read(r4, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) dup2(r4, r6) creat(&(0x7f00000007c0)='./control\x00', 0xfffffffffffffffd) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) 2018/06/02 18:17:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009080800410400000000fcff", 0x58}], 0x1) [ 269.829070] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 269.864581] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 269.864581] 2018/06/02 18:17:29 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x3, &(0x7f0000000c00)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) 2018/06/02 18:17:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dbcff9)='ns/pid\x00') ioctl$VT_RELDISP(r0, 0xb701) 2018/06/02 18:17:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@errors_continue='errors=continue', 0x2c}]}) 2018/06/02 18:17:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009080800410400000000fcff", 0x58}], 0x1) 2018/06/02 18:17:30 executing program 1: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getpgid(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) [ 270.048378] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 270.048378] 2018/06/02 18:17:30 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x2, 0x0) 2018/06/02 18:17:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dbcff9)='ns/pid\x00') ioctl$VT_RELDISP(r0, 0xb701) 2018/06/02 18:17:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x3, &(0x7f0000000c00)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) 2018/06/02 18:17:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@errors_continue='errors=continue', 0x2c}]}) 2018/06/02 18:17:30 executing program 1: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getpgid(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) 2018/06/02 18:17:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000080)={0x2b8, &(0x7f0000000040)}) 2018/06/02 18:17:30 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) poll(&(0x7f0000000040)=[{r0}], 0x291, 0x0) 2018/06/02 18:17:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x3}, 0xc) 2018/06/02 18:17:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x3}, 0xc) [ 270.855156] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 270.855156] 2018/06/02 18:17:30 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 2018/06/02 18:17:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000080)={0x2b8, &(0x7f0000000040)}) 2018/06/02 18:17:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dbcff9)='ns/pid\x00') ioctl$VT_RELDISP(r0, 0xb701) 2018/06/02 18:17:30 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 2018/06/02 18:17:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x3, &(0x7f0000000c00)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) 2018/06/02 18:17:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x10}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)=""/84}, 0x18) 2018/06/02 18:17:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x3}, 0xc) 2018/06/02 18:17:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000dbcff9)='ns/pid\x00') ioctl$VT_RELDISP(r0, 0xb701) 2018/06/02 18:17:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000080)={0x2b8, &(0x7f0000000040)}) 2018/06/02 18:17:31 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 2018/06/02 18:17:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000071, 0x48501]}) 2018/06/02 18:17:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x10}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)=""/84}, 0x18) 2018/06/02 18:17:31 executing program 6: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000080)={0x2b8, &(0x7f0000000040)}) 2018/06/02 18:17:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x3}, 0xc) 2018/06/02 18:17:31 executing program 0: r0 = socket(0x10, 0x80002, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/234, 0xea, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2}, {0x0, @random="1574e012876f"}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth1\x00'}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 2018/06/02 18:17:31 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 2018/06/02 18:17:31 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) poll(&(0x7f0000000040)=[{r0}], 0x291, 0x0) 2018/06/02 18:17:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000071, 0x48501]}) 2018/06/02 18:17:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x10}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)=""/84}, 0x18) [ 271.769072] capability: warning: `syz-executor6' uses deprecated v2 capabilities in a way that may be insecure 2018/06/02 18:17:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xb05, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xc, 0x10, {0x2}}]}, 0xc4}, 0x1}, 0x0) 2018/06/02 18:17:31 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 2018/06/02 18:17:31 executing program 6: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000440)="a8", 0x1}], 0x1, 0x81003) fallocate(r0, 0x11, 0x20000, 0x200) 2018/06/02 18:17:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x10}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)=""/84}, 0x18) 2018/06/02 18:17:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000071, 0x48501]}) 2018/06/02 18:17:31 executing program 6: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:32 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mlockall(0x5) munlockall() syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000004580), 0x40000, &(0x7f0000005a40)='vmnet0GPLvmnet1\'@\x00') 2018/06/02 18:17:32 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xb05, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xc, 0x10, {0x2}}]}, 0xc4}, 0x1}, 0x0) 2018/06/02 18:17:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/06/02 18:17:32 executing program 6: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000071, 0x48501]}) 2018/06/02 18:17:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/234, 0xea, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2}, {0x0, @random="1574e012876f"}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth1\x00'}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 2018/06/02 18:17:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x400442c9, &(0x7f0000000000)={0x0, 0x1}) 2018/06/02 18:17:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 2018/06/02 18:17:32 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xb05, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xc, 0x10, {0x2}}]}, 0xc4}, 0x1}, 0x0) 2018/06/02 18:17:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/06/02 18:17:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x400442c9, &(0x7f0000000000)={0x0, 0x1}) 2018/06/02 18:17:32 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8000003, 0x8032, 0xffffffffffffffff, 0x0) 2018/06/02 18:17:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 2018/06/02 18:17:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x48, 0x0, &(0x7f0000000080)="e0e1b246b2f612eb593ea92a2c57e9cdf94ec505ca0825f60820bd918a6916d5a0831e99cf6c2d09f34bfd6fb56468722d5a3613bb75a56b1bfd43661c45524e60ceab3fa5451dd1"}) 2018/06/02 18:17:32 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000040)=@updpolicy={0xc4, 0x19, 0xb05, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xc, 0x10, {0x2}}]}, 0xc4}, 0x1}, 0x0) 2018/06/02 18:17:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) [ 273.018067] binder: BINDER_SET_CONTEXT_MGR already set [ 273.044344] binder: 16417:16418 ioctl 40046207 0 returned -16 2018/06/02 18:17:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x400442c9, &(0x7f0000000000)={0x0, 0x1}) 2018/06/02 18:17:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 2018/06/02 18:17:33 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8000003, 0x8032, 0xffffffffffffffff, 0x0) 2018/06/02 18:17:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13a9e058a0f9c773d668fe6afd6ae2470a417760376ff88272052872baf485c50023934860653afae3d24e721316", 0xc0}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0xe7e, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x2944}) 2018/06/02 18:17:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2018/06/02 18:17:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x48, 0x0, &(0x7f0000000080)="e0e1b246b2f612eb593ea92a2c57e9cdf94ec505ca0825f60820bd918a6916d5a0831e99cf6c2d09f34bfd6fb56468722d5a3613bb75a56b1bfd43661c45524e60ceab3fa5451dd1"}) 2018/06/02 18:17:33 executing program 0: r0 = socket(0x10, 0x80002, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/234, 0xea, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2}, {0x0, @random="1574e012876f"}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth1\x00'}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 2018/06/02 18:17:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mlockall(0x5) munlockall() syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000004580), 0x40000, &(0x7f0000005a40)='vmnet0GPLvmnet1\'@\x00') 2018/06/02 18:17:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 2018/06/02 18:17:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x400442c9, &(0x7f0000000000)={0x0, 0x1}) 2018/06/02 18:17:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x48, 0x0, &(0x7f0000000080)="e0e1b246b2f612eb593ea92a2c57e9cdf94ec505ca0825f60820bd918a6916d5a0831e99cf6c2d09f34bfd6fb56468722d5a3613bb75a56b1bfd43661c45524e60ceab3fa5451dd1"}) 2018/06/02 18:17:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13a9e058a0f9c773d668fe6afd6ae2470a417760376ff88272052872baf485c50023934860653afae3d24e721316", 0xc0}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0xe7e, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x2944}) 2018/06/02 18:17:33 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8000003, 0x8032, 0xffffffffffffffff, 0x0) 2018/06/02 18:17:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x48, 0x0, &(0x7f0000000080)="e0e1b246b2f612eb593ea92a2c57e9cdf94ec505ca0825f60820bd918a6916d5a0831e99cf6c2d09f34bfd6fb56468722d5a3613bb75a56b1bfd43661c45524e60ceab3fa5451dd1"}) 2018/06/02 18:17:33 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x0, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) recvfrom$llc(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="e3f102cc0109"}, 0x10) 2018/06/02 18:17:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13a9e058a0f9c773d668fe6afd6ae2470a417760376ff88272052872baf485c50023934860653afae3d24e721316", 0xc0}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0xe7e, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x2944}) 2018/06/02 18:17:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) [ 273.854746] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/02 18:17:33 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8000003, 0x8032, 0xffffffffffffffff, 0x0) [ 273.899988] binder: 16476:16477 ioctl 40046207 0 returned -16 2018/06/02 18:17:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x48, 0x0, &(0x7f0000000080)="e0e1b246b2f612eb593ea92a2c57e9cdf94ec505ca0825f60820bd918a6916d5a0831e99cf6c2d09f34bfd6fb56468722d5a3613bb75a56b1bfd43661c45524e60ceab3fa5451dd1"}) 2018/06/02 18:17:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x48, 0x0, &(0x7f0000000080)="e0e1b246b2f612eb593ea92a2c57e9cdf94ec505ca0825f60820bd918a6916d5a0831e99cf6c2d09f34bfd6fb56468722d5a3613bb75a56b1bfd43661c45524e60ceab3fa5451dd1"}) 2018/06/02 18:17:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13a9e058a0f9c773d668fe6afd6ae2470a417760376ff88272052872baf485c50023934860653afae3d24e721316", 0xc0}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0xe7e, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x2944}) 2018/06/02 18:17:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x3fd) sendfile(r1, r2, &(0x7f00007ed000), 0x2) 2018/06/02 18:17:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mlockall(0x5) munlockall() syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000004580), 0x40000, &(0x7f0000005a40)='vmnet0GPLvmnet1\'@\x00') 2018/06/02 18:17:34 executing program 0: r0 = socket(0x10, 0x80002, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/234, 0xea, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2}, {0x0, @random="1574e012876f"}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth1\x00'}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 2018/06/02 18:17:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 2018/06/02 18:17:34 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x0, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) recvfrom$llc(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="e3f102cc0109"}, 0x10) 2018/06/02 18:17:34 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x75, &(0x7f0000000180), 0x8) 2018/06/02 18:17:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x3fd) sendfile(r1, r2, &(0x7f00007ed000), 0x2) [ 274.807980] binder: BINDER_SET_CONTEXT_MGR already set [ 274.830272] binder: 16505:16507 ioctl 40046207 0 returned -16 2018/06/02 18:17:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x48, 0x0, &(0x7f0000000080)="e0e1b246b2f612eb593ea92a2c57e9cdf94ec505ca0825f60820bd918a6916d5a0831e99cf6c2d09f34bfd6fb56468722d5a3613bb75a56b1bfd43661c45524e60ceab3fa5451dd1"}) 2018/06/02 18:17:34 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x3fd) sendfile(r1, r2, &(0x7f00007ed000), 0x2) 2018/06/02 18:17:34 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x200009c0}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 2018/06/02 18:17:35 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x3fd) sendfile(r1, r2, &(0x7f00007ed000), 0x2) 2018/06/02 18:17:35 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x75, &(0x7f0000000180), 0x8) 2018/06/02 18:17:35 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000692ff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2) 2018/06/02 18:17:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 2018/06/02 18:17:35 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mlockall(0x5) munlockall() syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000004580), 0x40000, &(0x7f0000005a40)='vmnet0GPLvmnet1\'@\x00') 2018/06/02 18:17:35 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x0, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) recvfrom$llc(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="e3f102cc0109"}, 0x10) 2018/06/02 18:17:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000002e40)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 2018/06/02 18:17:35 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000002e40)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 2018/06/02 18:17:35 executing program 0: socket(0xa, 0x803, 0x6) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:17:35 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x75, &(0x7f0000000180), 0x8) 2018/06/02 18:17:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000002e40)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 2018/06/02 18:17:35 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:17:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10e400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)) 2018/06/02 18:17:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000002e40)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 2018/06/02 18:17:36 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 2018/06/02 18:17:36 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x75, &(0x7f0000000180), 0x8) 2018/06/02 18:17:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140), 0x2}, 0x20) 2018/06/02 18:17:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 2018/06/02 18:17:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x200009c0}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 2018/06/02 18:17:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x0, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) recvfrom$llc(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="e3f102cc0109"}, 0x10) 2018/06/02 18:17:36 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 2018/06/02 18:17:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140), 0x2}, 0x20) 2018/06/02 18:17:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10e400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)) 2018/06/02 18:17:36 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 2018/06/02 18:17:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x10000, 0x4) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/06/02 18:17:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140), 0x2}, 0x20) 2018/06/02 18:17:36 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 2018/06/02 18:17:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140), 0x2}, 0x20) [ 276.815177] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/02 18:17:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x10000, 0x4) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/06/02 18:17:37 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 2018/06/02 18:17:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae91, &(0x7f0000000140)) 2018/06/02 18:17:37 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10e400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)) 2018/06/02 18:17:37 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000006fa8)={{0x50f}}) 2018/06/02 18:17:37 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x1c, 0x0, @thr={&(0x7f00003b6000), &(0x7f00001a2fa8)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f000036b000)=""/100, 0x64}], 0x1, 0x0) 2018/06/02 18:17:37 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 2018/06/02 18:17:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x200009c0}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 2018/06/02 18:17:37 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000006fa8)={{0x50f}}) [ 277.804943] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/02 18:17:37 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x1c, 0x0, @thr={&(0x7f00003b6000), &(0x7f00001a2fa8)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f000036b000)=""/100, 0x64}], 0x1, 0x0) 2018/06/02 18:17:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) read(r1, &(0x7f0000001140)=""/20, 0x5) 2018/06/02 18:17:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x10000, 0x4) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/06/02 18:17:37 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000006fa8)={{0x50f}}) 2018/06/02 18:17:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000002c0)="f90799c4aec51e19dca6618f04c71a31b0921fb2e26f1bb52d156b5e6b43f28c5dfbb3f92308cf331b66a556a0dab3eb2b7078cf8fdb7ac95d3e9fba4e3777c770bc2506b74d794d3f5df2db245580ed1498809919a89e768df48d3849887074cf15c01b5f0d488eac68d635e8743242e471f694dce3b672f6059595e76c7847e63c48b157f1f747e5b6a5200cbd", 0x8e}], 0x1) [ 277.949057] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/02 18:17:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae91, &(0x7f0000000140)) 2018/06/02 18:17:38 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10e400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)) 2018/06/02 18:17:38 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x1c, 0x0, @thr={&(0x7f00003b6000), &(0x7f00001a2fa8)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f000036b000)=""/100, 0x64}], 0x1, 0x0) 2018/06/02 18:17:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x10000, 0x4) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/06/02 18:17:38 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x1c, 0x0, @thr={&(0x7f00003b6000), &(0x7f00001a2fa8)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f000036b000)=""/100, 0x64}], 0x1, 0x0) [ 278.105404] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/02 18:17:38 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000006fa8)={{0x50f}}) 2018/06/02 18:17:38 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") flistxattr(r1, &(0x7f0000000000)=""/37, 0x100000000000000) 2018/06/02 18:17:38 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000002c0)="f90799c4aec51e19dca6618f04c71a31b0921fb2e26f1bb52d156b5e6b43f28c5dfbb3f92308cf331b66a556a0dab3eb2b7078cf8fdb7ac95d3e9fba4e3777c770bc2506b74d794d3f5df2db245580ed1498809919a89e768df48d3849887074cf15c01b5f0d488eac68d635e8743242e471f694dce3b672f6059595e76c7847e63c48b157f1f747e5b6a5200cbd", 0x8e}], 0x1) 2018/06/02 18:17:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae91, &(0x7f0000000140)) 2018/06/02 18:17:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140), 0xfffffffffffffd86, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000001c0), 0x0) 2018/06/02 18:17:38 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)) 2018/06/02 18:17:38 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 2018/06/02 18:17:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x200009c0}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 278.887148] binder: 16740:16748 ioctl c018620b 20000280 returned -14 [ 278.915189] binder_alloc: binder_alloc_mmap_handler: 16740 20000000-20002000 already mapped failed -16 2018/06/02 18:17:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") personality(0xfffffffffffffffd) uname(&(0x7f00000006c0)=""/176) 2018/06/02 18:17:38 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000002c0)="f90799c4aec51e19dca6618f04c71a31b0921fb2e26f1bb52d156b5e6b43f28c5dfbb3f92308cf331b66a556a0dab3eb2b7078cf8fdb7ac95d3e9fba4e3777c770bc2506b74d794d3f5df2db245580ed1498809919a89e768df48d3849887074cf15c01b5f0d488eac68d635e8743242e471f694dce3b672f6059595e76c7847e63c48b157f1f747e5b6a5200cbd", 0x8e}], 0x1) 2018/06/02 18:17:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) [ 278.945884] binder: 16740:16748 ioctl c018620b 20000280 returned -14 2018/06/02 18:17:39 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)) [ 279.069852] binder: 16768:16769 ioctl c018620b 20000280 returned -14 2018/06/02 18:17:39 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000002c0)="f90799c4aec51e19dca6618f04c71a31b0921fb2e26f1bb52d156b5e6b43f28c5dfbb3f92308cf331b66a556a0dab3eb2b7078cf8fdb7ac95d3e9fba4e3777c770bc2506b74d794d3f5df2db245580ed1498809919a89e768df48d3849887074cf15c01b5f0d488eac68d635e8743242e471f694dce3b672f6059595e76c7847e63c48b157f1f747e5b6a5200cbd", 0x8e}], 0x1) 2018/06/02 18:17:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") personality(0xfffffffffffffffd) uname(&(0x7f00000006c0)=""/176) 2018/06/02 18:17:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae91, &(0x7f0000000140)) 2018/06/02 18:17:39 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)) 2018/06/02 18:17:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)) 2018/06/02 18:17:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 2018/06/02 18:17:39 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 2018/06/02 18:17:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x1000000, 0x4) close(r2) close(r1) 2018/06/02 18:17:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x800010, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='#'], 0x1) ftruncate(r1, 0x8800000) 2018/06/02 18:17:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") personality(0xfffffffffffffffd) uname(&(0x7f00000006c0)=""/176) [ 280.003529] binder: 16798:16800 ioctl c018620b 20000280 returned -14 2018/06/02 18:17:40 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xfc, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/06/02 18:17:40 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)) 2018/06/02 18:17:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000100)=""/45, 0x2d) 2018/06/02 18:17:40 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xfc, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 280.128966] binder: 16814:16815 ioctl c018620b 20000280 returned -14 2018/06/02 18:17:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") personality(0xfffffffffffffffd) uname(&(0x7f00000006c0)=""/176) 2018/06/02 18:17:40 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) [ 280.207764] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 280.216091] FAT-fs (loop2): Filesystem has been set read-only 2018/06/02 18:17:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000100)=""/45, 0x2d) 2018/06/02 18:17:40 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @multicast1=0xe0000001}, 0x8) [ 280.302348] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) [ 280.354301] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) 2018/06/02 18:17:41 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xfc, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/06/02 18:17:41 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 2018/06/02 18:17:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000100)=""/45, 0x2d) 2018/06/02 18:17:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5410, &(0x7f0000000200)) 2018/06/02 18:17:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x800010, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='#'], 0x1) ftruncate(r1, 0x8800000) 2018/06/02 18:17:41 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @multicast1=0xe0000001}, 0x8) 2018/06/02 18:17:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x1000000, 0x4) close(r2) close(r1) 2018/06/02 18:17:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 2018/06/02 18:17:41 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xfc, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/06/02 18:17:41 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @multicast1=0xe0000001}, 0x8) 2018/06/02 18:17:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5410, &(0x7f0000000200)) 2018/06/02 18:17:41 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 2018/06/02 18:17:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000100)=""/45, 0x2d) 2018/06/02 18:17:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) 2018/06/02 18:17:41 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @multicast1=0xe0000001}, 0x8) 2018/06/02 18:17:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5410, &(0x7f0000000200)) [ 281.261529] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 281.269828] FAT-fs (loop2): Filesystem has been set read-only [ 281.325474] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) [ 281.353327] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) 2018/06/02 18:17:41 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 2018/06/02 18:17:41 executing program 1: capset(&(0x7f00000000c0)={0x4000019980330}, &(0x7f0000000080)) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/141}, 0x95, 0x0, 0x0) 2018/06/02 18:17:41 executing program 4: unshare(0x48000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/06/02 18:17:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5410, &(0x7f0000000200)) 2018/06/02 18:17:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x800010, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='#'], 0x1) ftruncate(r1, 0x8800000) 2018/06/02 18:17:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) 2018/06/02 18:17:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 2018/06/02 18:17:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x1000000, 0x4) close(r2) close(r1) 2018/06/02 18:17:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) [ 281.978949] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:17:42 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x70, &(0x7f0000000080)={r3}, &(0x7f0000000180)=0x10) 2018/06/02 18:17:42 executing program 1: capset(&(0x7f00000000c0)={0x4000019980330}, &(0x7f0000000080)) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/141}, 0x95, 0x0, 0x0) [ 282.082489] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 282.090663] FAT-fs (loop2): Filesystem has been set read-only 2018/06/02 18:17:42 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) [ 282.173453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) [ 282.200183] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:17:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) 2018/06/02 18:17:42 executing program 1: capset(&(0x7f00000000c0)={0x4000019980330}, &(0x7f0000000080)) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/141}, 0x95, 0x0, 0x0) [ 282.219498] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) 2018/06/02 18:17:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x800010, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='#'], 0x1) ftruncate(r1, 0x8800000) [ 282.483805] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 282.492038] FAT-fs (loop2): Filesystem has been set read-only [ 282.499591] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) [ 282.507468] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1041) 2018/06/02 18:17:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) 2018/06/02 18:17:43 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0x2}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:43 executing program 1: capset(&(0x7f00000000c0)={0x4000019980330}, &(0x7f0000000080)) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/141}, 0x95, 0x0, 0x0) 2018/06/02 18:17:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) 2018/06/02 18:17:43 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f0000006fb8)={0x5, 0x360, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c25e50766"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:17:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x1000000, 0x4) close(r2) close(r1) 2018/06/02 18:17:43 executing program 4: unshare(0x48000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/06/02 18:17:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x70, &(0x7f0000000080)={r3}, &(0x7f0000000180)=0x10) 2018/06/02 18:17:43 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = eventfd2(0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") dup2(r0, r1) [ 283.920358] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:17:43 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0x2}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:44 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffeed, &(0x7f00009ad000)=0x2) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') unlink(&(0x7f00000000c0)='./control/file0\x00') close(r1) 2018/06/02 18:17:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:17:44 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f0000006fb8)={0x5, 0x360, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c25e50766"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:17:44 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) [ 284.117396] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 284.124794] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 284.167215] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 284.174642] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/06/02 18:17:45 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f0000006fb8)={0x5, 0x360, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c25e50766"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:17:45 executing program 4: unshare(0x48000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/06/02 18:17:45 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0x2}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:17:45 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/06/02 18:17:45 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) 2018/06/02 18:17:45 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffeed, &(0x7f00009ad000)=0x2) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') unlink(&(0x7f00000000c0)='./control/file0\x00') close(r1) 2018/06/02 18:17:45 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x70, &(0x7f0000000080)={r3}, &(0x7f0000000180)=0x10) 2018/06/02 18:17:45 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/06/02 18:17:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9e70200000f3266b80500000066b94c8d71280f01c164f5b848000f00d0baa00066b87b00000066efb8bc000f00d80f01d1b8e8000f00d83ed952d73e0f08", 0x40}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 285.078650] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 285.086057] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/06/02 18:17:45 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0x2}, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/02 18:17:45 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/06/02 18:17:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:17:45 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$vcsa(&(0x7f0000002ff5)='/dev/vcsa#\x00', 0x1, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="8ecbbf33b8", 0x5}], 0x1, 0x0) [ 285.235967] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 285.243401] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/06/02 18:17:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) 2018/06/02 18:17:45 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000000100)=""/250) [ 285.366250] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:17:45 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x1000) 2018/06/02 18:17:45 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000000100)=""/250) 2018/06/02 18:17:45 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f0000006fb8)={0x5, 0x360, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c25e50766"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) 2018/06/02 18:17:45 executing program 4: unshare(0x48000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/06/02 18:17:45 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x70, &(0x7f0000000080)={r3}, &(0x7f0000000180)=0x10) 2018/06/02 18:17:45 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffeed, &(0x7f00009ad000)=0x2) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') unlink(&(0x7f00000000c0)='./control/file0\x00') close(r1) 2018/06/02 18:17:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x201, 0x0, 0x0, {0x2}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x34}, 0x1}, 0x0) 2018/06/02 18:17:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9e70200000f3266b80500000066b94c8d71280f01c164f5b848000f00d0baa00066b87b00000066efb8bc000f00d80f01d1b8e8000f00d83ed952d73e0f08", 0x40}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.008493] netlink: 'syz-executor1': attribute type 2 has an invalid length. [ 286.015870] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/06/02 18:17:46 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="b16bf393b577", [], {@ipv4={0x800, {{0x5, 0x4, 0xfeffffff, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x28, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x4305, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 2018/06/02 18:17:46 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000000100)=""/250) 2018/06/02 18:17:46 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1}, @sndinfo={0x20, 0x84, 0x2}], 0x50}], 0x1, 0x0) 2018/06/02 18:17:46 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') unshare(0x400) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(0xffffffffffffffff) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200)) sendfile(r0, r1, &(0x7f0000000280), 0x4) 2018/06/02 18:17:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9e70200000f3266b80500000066b94c8d71280f01c164f5b848000f00d0baa00066b87b00000066efb8bc000f00d80f01d1b8e8000f00d83ed952d73e0f08", 0x40}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:17:46 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000000100)=""/250) 2018/06/02 18:17:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000000100), 0x4) 2018/06/02 18:17:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sigaltstack(&(0x7f0000aaa000/0x3000)=nil, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x100, 0x7) [ 286.845483] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:17:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000000100), 0x4) 2018/06/02 18:17:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9e70200000f3266b80500000066b94c8d71280f01c164f5b848000f00d0baa00066b87b00000066efb8bc000f00d80f01d1b8e8000f00d83ed952d73e0f08", 0x40}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:17:47 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/06/02 18:17:47 executing program 7: r0 = socket$inet6_sctp(0xa, 0x400000001, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x100000001, 0x4) write$eventfd(r1, &(0x7f0000605ff8), 0x34000) 2018/06/02 18:17:47 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffeed, &(0x7f00009ad000)=0x2) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') unlink(&(0x7f00000000c0)='./control/file0\x00') close(r1) 2018/06/02 18:17:47 executing program 4: unshare(0x400) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") io_setup(0x6, &(0x7f0000000300)=0x0) read(r0, &(0x7f0000000100)=""/223, 0xdf) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_submit(r1, 0x0, &(0x7f00000002c0)) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}]) 2018/06/02 18:17:47 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000016c0)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000001700)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/06/02 18:17:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000000100), 0x4) 2018/06/02 18:17:47 executing program 6: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000040)=""/226) 2018/06/02 18:17:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x98, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x0, 0x0, &(0x7f0000000300)}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 2018/06/02 18:17:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000), 0x10) 2018/06/02 18:17:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="99d0ab7ce5f7d1ec0ca9d1b1c7a75bd525607bab0041b768bdef3e2968236ed698ac54897d9fab5cf1761be756a3cf72a085fdcd90f12288b4a5a397b9b9848bd894960be1", 0x45}], 0x1, &(0x7f0000000180)}, 0x0) 2018/06/02 18:17:47 executing program 6: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000040)=""/226) 2018/06/02 18:17:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000000100), 0x4) [ 287.403352] binder: 17170:17171 transaction failed 29189/-22, size 0-0 line 2856 2018/06/02 18:17:47 executing program 6: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000040)=""/226) 2018/06/02 18:17:47 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ifb0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b6cbf857897"}, 0x14) [ 287.458366] binder: 17170:17184 transaction failed 29189/-22, size 0-0 line 2856 [ 287.542129] binder: undelivered TRANSACTION_ERROR: 29189 [ 287.552764] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/02 18:17:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000016c0)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000001700)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/06/02 18:17:48 executing program 2: r0 = socket$kcm(0x29, 0x1401200400000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0042fc2f07d82c99240970") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x81, 0x0, "8f06c53f5a12158108281a0aaec892e416c7a7e0ac283f3afdb3953440dfc5e3a8624110c912da2d9869174411f72d949c699157048def3513b38d309eed8f7f48d81a3a67c883ab281872860e14ed5d4c1a809de7518150a4126e8cf0c3e09d65e641b854aad9185568c6b773e2c33dc5fa7c73dd7f960b64"}, 0x0) 2018/06/02 18:17:48 executing program 6: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000040)=""/226) 2018/06/02 18:17:48 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ifb0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b6cbf857897"}, 0x14) 2018/06/02 18:17:48 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)) 2018/06/02 18:17:48 executing program 4: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) pread64(r1, &(0x7f0000000080)=""/91, 0x5b, 0x0) 2018/06/02 18:17:48 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=0x20000005) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"643071300000000000000020001600", 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) 2018/06/02 18:17:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0xff, 0x0, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6) 2018/06/02 18:17:48 executing program 6: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x1000080000043f) 2018/06/02 18:17:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)=""/255, 0xff}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/104, 0x68}], 0x5, &(0x7f00000008c0)=""/106, 0x6a}, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 2018/06/02 18:17:48 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 2018/06/02 18:17:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) 2018/06/02 18:17:48 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0}) nanosleep(&(0x7f0000000180)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006d8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 2018/06/02 18:17:48 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ifb0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b6cbf857897"}, 0x14) 2018/06/02 18:17:48 executing program 4: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f000000500e000a000060af04ca0108060000000000000000000014bbff0200000000000000000000000000010420880b0000000000000800f01786dd080088be00000000100000000100000000000000080022eb0000000020000000eaffffffffffffff0000000008006558000000000000000000"], 0x1) 2018/06/02 18:17:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x10a]}) [ 289.343402] mmap: syz-executor7 (17265) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/06/02 18:17:49 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ifb0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3b6cbf857897"}, 0x14) 2018/06/02 18:17:49 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0}) nanosleep(&(0x7f0000000180)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006d8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 2018/06/02 18:17:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000016c0)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000001700)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/06/02 18:17:49 executing program 1: setitimer(0x0, &(0x7f0000000fe0)={{0x100000000000}, {0x0, 0x2710}}, &(0x7f0000000440)) 2018/06/02 18:17:49 executing program 6: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x1000080000043f) 2018/06/02 18:17:49 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000000006a00000060af04ca00043a0000000000000000000000ffffac1414bbff0200000000000000000000000000010420880b0000000000000800000086dd08008abe00000000100000000100000000000000080022eb00000001200000000200000000000000000000000800655800000000"], 0x1) 2018/06/02 18:17:49 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000000c0)="55ec6850179bbbb7076d05c73032128c8e5e25f93a3bb62c846eb7e1b85092469a6110cfcdf6058174c52b12c52c763399d2b4e2ac4a807cd03a1c48", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2018/06/02 18:17:49 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000bc0)=@sco, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000dc0)=""/118, 0x76}}], 0x1, 0x0, &(0x7f0000000f80)) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp\x00') preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/245, 0xf5}], 0x10000000000000c0, 0x0) 2018/06/02 18:17:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="b55a3f72918ef67450a719edcec0afad463ad3e8f928d6b00bcadc752f811a8d3f163672e9c84531acb659005120be1e04a839d709b70a4eeb24a3556a05790788a9e0cd4daab4eb9f5a640f1d656ff2b6e682fc8d0b6c7c6a3558ae1576fba7f6c60c1bf86b5e9b521a161b69cefe1a1645fdc0d96aed2ca4669ea195bf45be4041dda5a4a074aff20f3331be12b7150543870e9fa57304980fe92f305129f4fe905462b25ab5f73a2f0a5e3aaf7cec30fe62fcdd929b63", 0xb8}], 0x1, &(0x7f0000000200)}, 0x0) 2018/06/02 18:17:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x1, 0x208, [0x0, 0x20000880, 0x200008b0, 0x20000a58], 0x0, &(0x7f0000000480), &(0x7f0000000880)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, "6966623000000400", 'bcsf0\x00', 'gre0\x00', 'rose0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x100, 0x178, [@m802_3={'802_3\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bde61f96ad140bf31c52adfce88ba14aaa5708b1e3b94b8fe5821cafe5683d4cae815faf77d30635b4d7e26ce8a6a975654dcf2bc4aaada7a86664db3dbde2bf"}}}}]}, {0x0, '\x00', 0x1}]}, 0x280) 2018/06/02 18:17:49 executing program 6: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x1000080000043f) 2018/06/02 18:17:49 executing program 6: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x1000080000043f) 2018/06/02 18:17:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x18, &(0x7f0000c86000), &(0x7f0000000040)=0x74) 2018/06/02 18:17:49 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0xffffffffffffff7f) dup2(r0, r1) [ 289.746174] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/06/02 18:17:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) waitid(0x0, 0x0, &(0x7f0000000000), 0xa100000c, &(0x7f0000000080)) 2018/06/02 18:17:49 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/06/02 18:17:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)) ioctl$TIOCSBRK(r2, 0x40044590) 2018/06/02 18:17:50 executing program 3: memfd_create(&(0x7f00000000c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41eccfcf6b65f5fcaef1b9d0e50771b4e5b81921550c50e061708af0a75d844397a9e52086a68cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x800000000016, @time={0x0, 0x989680}}) 2018/06/02 18:17:50 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='nfs4\x00', 0x0, 0x0) 2018/06/02 18:17:50 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:50 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000040)="1a0345", 0x3}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 2018/06/02 18:17:50 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) mkdir(&(0x7f0000000680)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x0, 0x0) 2018/06/02 18:17:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00000001c0)='./file0\x00') unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000016c0)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000001700)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/06/02 18:17:50 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0}) nanosleep(&(0x7f0000000180)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006d8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 2018/06/02 18:17:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x0) 2018/06/02 18:17:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='s'], 0x1) sendto$inet6(r0, &(0x7f0000e2a000)="8c", 0x1, 0x0, &(0x7f000042f000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000d79000)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00007daff4)={0x0, 0x0, 0x80000000020}, 0xc) writev(r0, &(0x7f0000f08000)=[{&(0x7f0000f28f15)="bc", 0x1}], 0x1) 2018/06/02 18:17:50 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r1, 0x8004587d, &(0x7f0000000080)={0x20000000000000ee}) 2018/06/02 18:17:50 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x800000000004e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa}}, 0x0, 0x5ee}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x98) 2018/06/02 18:17:50 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) fchmod(r0, 0x0) 2018/06/02 18:17:50 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:50 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') sendfile(r1, r2, &(0x7f00004db000)=0x48000000, 0xff) 2018/06/02 18:17:51 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) fchmod(r0, 0x0) 2018/06/02 18:17:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCFLSH(r2, 0x540b, 0x210000) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 2018/06/02 18:17:51 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f66696c65300af5261e68096d5c0229a3b790564806b2d199ab63bb15d0f456464f127c21013006efa6"], 0x2e) poll(&(0x7f0000000000)=[{r1}, {r1}, {r1}], 0x3, 0x0) 2018/06/02 18:17:51 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) read(r0, &(0x7f000083b000)=""/1, 0x1) sendmsg$alg(r0, &(0x7f0000159fc8)={0x0, 0x0, &(0x7f0000fc8000), 0x0, &(0x7f0000000e8e)}, 0x0) 2018/06/02 18:17:51 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) 2018/06/02 18:17:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x227e, &(0x7f0000000080)) 2018/06/02 18:17:51 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0}) nanosleep(&(0x7f0000000180)={r0}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006d8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 2018/06/02 18:17:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fallocate(r1, 0x0, 0x0, 0x8000) lseek(r1, 0x0, 0x3) 2018/06/02 18:17:51 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x709000) 2018/06/02 18:17:51 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) 2018/06/02 18:17:51 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) fchmod(r0, 0x0) 2018/06/02 18:17:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x227e, &(0x7f0000000080)) 2018/06/02 18:17:51 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$getflags(r0, 0x408) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0x0, @random="3d08fbde7dc1"}) 2018/06/02 18:17:52 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x709000) 2018/06/02 18:17:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x227e, &(0x7f0000000080)) 2018/06/02 18:17:52 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) fchmod(r0, 0x0) 2018/06/02 18:17:52 executing program 5: clock_adjtime(0x0, &(0x7f0000476000)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}) 2018/06/02 18:17:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x227e, &(0x7f0000000080)) 2018/06/02 18:17:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) 2018/06/02 18:17:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) 2018/06/02 18:17:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x2, 0x320, [0x20000840, 0x0, 0x0, 0x20000870, 0x200008a0], 0x0, &(0x7f0000000040), &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00', 'gretap0\x00', 'bond_slave_0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xe0, 0x150, 0x180, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @random="7521bb9710eb"}, 0x93d658aef352c6e2}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}, {{{0x11, 0x0, 0x0, 'team_slave_1\x00', 'yam0\x00', 'bond0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="aada10b12759"}}}}]}]}, 0x398) 2018/06/02 18:17:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r0) 2018/06/02 18:17:52 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x709000) 2018/06/02 18:17:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000080)=""/59, 0x3b) 2018/06/02 18:17:52 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2289, 0x709000) 2018/06/02 18:17:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7d, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) [ 292.928519] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 293.004561] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/02 18:17:53 executing program 5: mkdir(&(0x7f0000001ff8)='./file0\x00', 0x0) mount(&(0x7f0000005000)='./file0/file0\x00', &(0x7f0000009ff8)='./file0\x00', &(0x7f0000008ffb)='fuse.', 0x0, &(0x7f0000009000)) 2018/06/02 18:17:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00006ee000)='net/rt_acct\x00') sendfile(r0, r0, &(0x7f0000422000)=0x10000000, 0x6138) 2018/06/02 18:17:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000016000)=@nl=@kern={0x10}, 0x80, &(0x7f0000014000)=[{&(0x7f0000018000)="5500000018007fb1b72d1cb2a4a280a80a06050000a84302a7052369250009002100001c010000000600050002000000000000dc1338d544000a9b84226eb75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) [ 293.078404] sctp: [Deprecated]: syz-executor2 (pid 17491) Use of int in maxseg socket option. [ 293.078404] Use struct sctp_assoc_value instead [ 293.095845] sctp: [Deprecated]: syz-executor2 (pid 17492) Use of int in maxseg socket option. [ 293.095845] Use struct sctp_assoc_value instead 2018/06/02 18:17:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/06/02 18:17:53 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x9dc) 2018/06/02 18:17:53 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047033007d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000532000)=0x1b) ioctl$TCSETS(r1, 0x5423, &(0x7f0000000000)) 2018/06/02 18:17:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0x801c581f, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) [ 293.207589] nla_parse: 3 callbacks suppressed [ 293.207599] netlink: 17 bytes leftover after parsing attributes in process `syz-executor7'. 2018/06/02 18:17:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) 2018/06/02 18:17:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) [ 293.313728] netlink: 17 bytes leftover after parsing attributes in process `syz-executor7'. 2018/06/02 18:17:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) 2018/06/02 18:17:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/06/02 18:17:53 executing program 1: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000080)="075b5ed7cbd264c1", 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 2018/06/02 18:17:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0x801c581f, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/06/02 18:17:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001f80], 0x0, &(0x7f0000000340), &(0x7f0000001f80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0xb, 0x0, 0x0, 'bcsh0\x00', 'bcsf0\x00', 'erspan0\x00', 'eql\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xf8, 0xf8, 0x148, [@limit={'limit\x00', 0x20, {{0x0, 0x30}}}, @statistic={'statistic\x00', 0x18}]}}, @common=@log={'log\x00', 0x28, {{0x0, "4ee0160200e00df3b12d605204883cdf87561568edc3d0247e3d8f68f8b1"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x250) [ 293.470682] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 293.635733] kernel msg: ebtables bug: please report to author: Total nentries is wrong 2018/06/02 18:17:53 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002640)}, 0x0) dup3(r1, r0, 0x0) 2018/06/02 18:17:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4020aea5, 0x0) 2018/06/02 18:17:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0x801c581f, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/06/02 18:17:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) 2018/06/02 18:17:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/06/02 18:17:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TIOCSSOFTCAR(r2, 0x5435, &(0x7f0000000100)) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 2018/06/02 18:17:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) 2018/06/02 18:17:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10}, 0x0) 2018/06/02 18:17:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1) 2018/06/02 18:17:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/06/02 18:17:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0x801c581f, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/06/02 18:17:54 executing program 3: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3ff}, &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) 2018/06/02 18:17:54 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) lseek(0xffffffffffffffff, 0x0, 0x3) sendto$llc(r0, &(0x7f0000001240), 0x380, 0x0, &(0x7f00000012c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) socket$alg(0x26, 0x5, 0x0) 2018/06/02 18:17:54 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fchmod(r0, 0x0) 2018/06/02 18:17:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TIOCSSOFTCAR(r2, 0x5435, &(0x7f0000000100)) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 2018/06/02 18:17:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="e794bf52c081552bd866c9d36a9c400000ffce9443cb"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:17:54 executing program 4: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000240)=@buf={0x5c, &(0x7f00000002c0)="040babcb035e6fc949cb9503026c134eb9da704b0e38f27c699cf66a585b3273a710f5a7b5c5e5eb7cc30abd72b61ea156c4d79d2685cc03310c0a75a2b0d6eaa2ae3e489028bba28bf8851c96718b65f30153bf70d3a2dcc5cbb983"}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') writev(r1, &(0x7f00000011c0)=[{&(0x7f0000001140)="08a2511e1c4b2dcb", 0x8}], 0x1) getuid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) sendmsg$nl_route(r0, &(0x7f0000490000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x4, 0x4) getsockname$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_delroute={0x30, 0x19, 0x53d, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0x14, 0x9}]}, 0x30}, 0x1}, 0x0) 2018/06/02 18:17:54 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/06/02 18:17:54 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fchmod(r0, 0x0) 2018/06/02 18:17:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) close(r1) 2018/06/02 18:17:54 executing program 2: getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f00000001c0)=0x2) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x12}}, 0x14}, 0x1}, 0x0) 2018/06/02 18:17:54 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="b2"]}]}, 0x1c}, 0x1}, 0x0) 2018/06/02 18:17:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddr={0x17, 0x16, 0x403, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/06/02 18:17:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x1a060100) 2018/06/02 18:17:54 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fchmod(r0, 0x0) [ 294.977566] netlink: 'syz-executor6': attribute type 18 has an invalid length. 2018/06/02 18:17:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/06/02 18:17:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x11) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/06/02 18:17:55 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r1, r0) 2018/06/02 18:17:55 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/196, 0xc4}, 0x0) read(r1, &(0x7f00000002c0)=""/233, 0xe9) read(r1, &(0x7f0000000100)=""/94, 0x5e) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000005200030f07fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/06/02 18:17:55 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/06/02 18:17:55 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") unshare(0x400) ioctl$int_out(r0, 0x4147, &(0x7f0000000040)) 2018/06/02 18:17:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000014}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) 2018/06/02 18:17:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TIOCSSOFTCAR(r2, 0x5435, &(0x7f0000000100)) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 2018/06/02 18:17:55 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fchmod(r0, 0x0) 2018/06/02 18:17:55 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000244000)) keyctl$clear(0x7, 0x0) 2018/06/02 18:17:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x3}) 2018/06/02 18:17:55 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xe, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/06/02 18:17:55 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r1, 0x402c542c, &(0x7f0000000040)) 2018/06/02 18:17:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 2018/06/02 18:17:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x11) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/06/02 18:17:56 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) 2018/06/02 18:17:56 executing program 5: geteuid() sysfs$2(0x2, 0xe72c, &(0x7f0000000340)=""/175) setreuid(0x0, 0x0) clone(0x50800000, &(0x7f00000002c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000012c0)) socketpair(0x3, 0x0, 0xffffffffffff5f43, &(0x7f00000001c0)) [ 296.240413] IPVS: ftp: loaded support on port[0] = 21 [ 296.586152] IPVS: ftp: loaded support on port[0] = 21 2018/06/02 18:17:56 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(des3_ede-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) 2018/06/02 18:17:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000180), 0x0) 2018/06/02 18:17:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r1, 0x0) futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000000040), 0x0) 2018/06/02 18:17:56 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x38, &(0x7f0000000080)=0x2, 0x4) 2018/06/02 18:17:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x11) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/06/02 18:17:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000008000020000e2000000000800000000000000930f78941279034c4db33faf736aba25d6ae060a3e3b17ecad7313c2a7b558e2235d20bcec831b535a0d65ae38f3aa87f2f118238dd266c3caeaef5169c4f2dcc077ba24c729003914eb63c78b55e89d8d06291ff1a62d27d81652db51618fbbf505aa47f139b8ec844aaf8626d985a9ae3555b7653686d9397c80629189bcdfcf0fd807c4ac6216dfbeba62c484653f5642418531b0f05a610fbfa2afe46bf9b6296a64b7ff7fb8a36c7b299a363f0850f60d8ef7a93f6a9ceae2e0a442f7e5c5e0428c6219357374e4530862aca1406041459b8b0d1d"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/02 18:17:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TIOCSSOFTCAR(r2, 0x5435, &(0x7f0000000100)) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 2018/06/02 18:17:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$ax25(r0, &(0x7f0000000000)={0x2, {"c1170850f4b385"}}, 0xf) 2018/06/02 18:17:56 executing program 4: perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/06/02 18:17:56 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r2) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000580)="b3", 0x1, r2) keyctl$update(0x2, r4, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crc32-pclmul\x00'}}) 2018/06/02 18:17:56 executing program 0: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="000100000008000081000000c9030000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2018/06/02 18:17:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="2024a8a5016ec94673092d07906777ab4ecdd8c8bc9345c22e04a250437e5fe215d30a9c1bb84f8afba0427aa9cc7166497a4f74584cfdec2244fb0b79fef675b70b942452b84ce3c77405f52eb3e79166fe7938353dc2f181a28e4328373661710377a99d694d59bddc9334551b4297e50e439339c25808cc4cde38026b0f92038510e5a688518cad9f3f3c82a3d4b9489f299dae539f3fbf190d1b11995c72f266826a149a344044cce91501d24ea278b1dc46a3dadbd0072459187336a1de01a6fbea3525eb0ec8", 0xc9}], 0x1}, 0x20004001) shutdown(r0, 0x2) recvfrom$inet(r0, &(0x7f0000000040)=""/75, 0x4b, 0x40000001, &(0x7f00000000c0)={0x2}, 0x10) 2018/06/02 18:17:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x11) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/06/02 18:17:57 executing program 6: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0xbd1) 2018/06/02 18:17:57 executing program 5: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0xdd6f, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)) 2018/06/02 18:17:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/06/02 18:17:57 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002880)={0x0, @dev={0xac, 0x14, 0x14}, @rand_addr}, 0xc) [ 297.248070] EXT4-fs error (device loop0): ext4_iget:4756: inode #2: comm syz-executor0: root inode unallocated 2018/06/02 18:17:57 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='z'], 0x1) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000000)) 2018/06/02 18:17:57 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETPID(r0, 0x4aba7d9c88074f97, 0xb, &(0x7f00000000c0)=""/6) [ 297.377121] EXT4-fs (loop0): Remounting filesystem read-only [ 297.383090] EXT4-fs (loop0): get root inode failed [ 297.388074] EXT4-fs (loop0): mount failed 2018/06/02 18:17:57 executing program 5: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0xdd6f, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)) 2018/06/02 18:17:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f0000000400)={r1}, &(0x7f0000000440), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)) 2018/06/02 18:17:57 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x15) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) [ 297.610108] EXT4-fs error (device loop0): ext4_iget:4756: inode #2: comm syz-executor0: root inode unallocated [ 297.743826] EXT4-fs (loop0): Remounting filesystem read-only [ 297.749789] EXT4-fs (loop0): get root inode failed [ 297.754769] EXT4-fs (loop0): mount failed [ 298.583428] device bridge_slave_1 left promiscuous mode [ 298.589060] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.601594] device bridge_slave_0 left promiscuous mode [ 298.607154] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.634614] team0 (unregistering): Port device team_slave_1 removed [ 298.644415] team0 (unregistering): Port device team_slave_0 removed [ 298.654895] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 298.670337] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 298.699344] bond0 (unregistering): Released all slaves 2018/06/02 18:17:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/06/02 18:17:58 executing program 5: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0xdd6f, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)) 2018/06/02 18:17:58 executing program 0: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="000100000008000081000000c9030000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2018/06/02 18:17:58 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 2018/06/02 18:17:58 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 2018/06/02 18:17:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x30) 2018/06/02 18:17:58 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c1c240970") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x3f9, 0x2, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/06/02 18:17:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) process_vm_readv(r1, &(0x7f0000000640)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000480)=""/237, 0xed}], 0x2, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/3, 0x3}, {&(0x7f0000000ac0)=""/131, 0x83}, {&(0x7f0000000b80)=""/163, 0xa3}], 0x9, 0x0) socket$packet(0x11, 0x0, 0x300) 2018/06/02 18:17:58 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x3c, &(0x7f0000000080), 0x4) 2018/06/02 18:17:58 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="1b207f5c5eeb", [], {@mpls_uc={0x8864, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @igmp={0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}}, &(0x7f0000000080)) 2018/06/02 18:17:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) msync(&(0x7f0000127000/0x2000)=nil, 0x2000, 0x4) 2018/06/02 18:17:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) process_vm_readv(r1, &(0x7f0000000640)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000480)=""/237, 0xed}], 0x2, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/3, 0x3}, {&(0x7f0000000ac0)=""/131, 0x83}, {&(0x7f0000000b80)=""/163, 0xa3}], 0x9, 0x0) socket$packet(0x11, 0x0, 0x300) [ 298.990661] EXT4-fs error (device loop0): ext4_iget:4756: inode #2: comm syz-executor0: root inode unallocated [ 299.074425] EXT4-fs (loop0): Remounting filesystem read-only [ 299.080454] EXT4-fs (loop0): get root inode failed [ 299.085543] EXT4-fs (loop0): mount failed [ 299.260779] IPVS: ftp: loaded support on port[0] = 21 [ 299.894635] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.901083] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.908439] device bridge_slave_0 entered promiscuous mode [ 299.944152] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.950621] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.959208] device bridge_slave_1 entered promiscuous mode [ 299.994198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 300.030704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 300.127742] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 300.165525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 300.322948] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 300.330412] team0: Port device team_slave_0 added [ 300.365078] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 300.372518] team0: Port device team_slave_1 added [ 300.406705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.433700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.457655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.482283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.687486] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.693893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.700531] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.706913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.438049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.509238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 301.579744] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 301.585922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.593245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.663195] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:18:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) close(r1) 2018/06/02 18:18:02 executing program 6: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "8a87c823d5a62d85372deb5a0b555fa76d884b1b6f8db73292f888cd8226e3078d2ccb44bb9361b62e5462ad592bbc035bce6ecfd25ebe88c7493f52c5c7cb7c9ac41b95d6356c710e35c4b974c26610fdaa75bdb0e9ec65dd43a1d5adbd17897e0bc187e59e84280233d9f5604d07ed0b591663d8a56ada3655ac7ae009"}, 0x80) 2018/06/02 18:18:02 executing program 0: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="000100000008000081000000c9030000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2018/06/02 18:18:02 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x1}) 2018/06/02 18:18:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000000040)=""/1, &(0x7f0000000000)=0xfffffffffffffd40) 2018/06/02 18:18:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) process_vm_readv(r1, &(0x7f0000000640)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000480)=""/237, 0xed}], 0x2, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/3, 0x3}, {&(0x7f0000000ac0)=""/131, 0x83}, {&(0x7f0000000b80)=""/163, 0xa3}], 0x9, 0x0) socket$packet(0x11, 0x0, 0x300) 2018/06/02 18:18:02 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x5c3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000180)=""/163, &(0x7f0000000240)=0xa3) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000280)={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000400)="6e667300ee39defa2bf37b8be8c7b14c8654d5bbd1d5e47f84551e319a84fe047d8efda22b2ef5734a869e5dcd1fc9b2ef3a9d491a5706fa7e0c795a512ed7ed6cb8d48f110d887ddd6aaa", 0x0, &(0x7f000000a000)) 2018/06/02 18:18:02 executing program 5: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0xdd6f, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)) 2018/06/02 18:18:02 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000040), 0x0, 0xffff) r1 = fanotify_init(0x0, 0x0) read(r1, &(0x7f0000000100)=""/237, 0xed) fanotify_mark(r1, 0x11, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='/\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/06/02 18:18:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, &(0x7f0000000300)=0x3) 2018/06/02 18:18:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002bc0)=[{{&(0x7f00000026c0)=@alg, 0x80, &(0x7f0000002ac0), 0x0, &(0x7f0000002b40)=""/74, 0x4a}}], 0x1, 0x0, &(0x7f0000002c80)={0x0, 0x989680}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 302.197941] EXT4-fs error (device loop0): ext4_iget:4756: inode #2: comm syz-executor0: root inode unallocated [ 302.209953] EXT4-fs (loop0): Remounting filesystem read-only [ 302.215987] EXT4-fs (loop0): get root inode failed [ 302.221049] EXT4-fs (loop0): mount failed 2018/06/02 18:18:02 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x5c3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000180)=""/163, &(0x7f0000000240)=0xa3) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000280)={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000400)="6e667300ee39defa2bf37b8be8c7b14c8654d5bbd1d5e47f84551e319a84fe047d8efda22b2ef5734a869e5dcd1fc9b2ef3a9d491a5706fa7e0c795a512ed7ed6cb8d48f110d887ddd6aaa", 0x0, &(0x7f000000a000)) 2018/06/02 18:18:02 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x6, 0xfe78) 2018/06/02 18:18:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) process_vm_readv(r1, &(0x7f0000000640)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000480)=""/237, 0xed}], 0x2, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/3, 0x3}, {&(0x7f0000000ac0)=""/131, 0x83}, {&(0x7f0000000b80)=""/163, 0xa3}], 0x9, 0x0) socket$packet(0x11, 0x0, 0x300) 2018/06/02 18:18:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, &(0x7f0000001d40)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:18:02 executing program 0: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="000100000008000081000000c9030000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2018/06/02 18:18:02 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) 2018/06/02 18:18:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0xfea4) 2018/06/02 18:18:02 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x5c3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000180)=""/163, &(0x7f0000000240)=0xa3) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000280)={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000400)="6e667300ee39defa2bf37b8be8c7b14c8654d5bbd1d5e47f84551e319a84fe047d8efda22b2ef5734a869e5dcd1fc9b2ef3a9d491a5706fa7e0c795a512ed7ed6cb8d48f110d887ddd6aaa", 0x0, &(0x7f000000a000)) 2018/06/02 18:18:02 executing program 3: perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 302.529309] device bridge_slave_1 left promiscuous mode [ 302.534959] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.558953] binder: 18221:18223 ERROR: BC_REGISTER_LOOPER called without request [ 302.607107] device bridge_slave_0 left promiscuous mode [ 302.612771] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.620900] binder_alloc: binder_alloc_mmap_handler: 18221 20001000-20004000 already mapped failed -16 2018/06/02 18:18:02 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x5c3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f0000000180)=""/163, &(0x7f0000000240)=0xa3) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000280)={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000400)="6e667300ee39defa2bf37b8be8c7b14c8654d5bbd1d5e47f84551e319a84fe047d8efda22b2ef5734a869e5dcd1fc9b2ef3a9d491a5706fa7e0c795a512ed7ed6cb8d48f110d887ddd6aaa", 0x0, &(0x7f000000a000)) [ 302.649997] binder: BINDER_SET_CONTEXT_MGR already set [ 302.656123] EXT4-fs error (device loop0): ext4_iget:4756: inode #2: comm syz-executor0: root inode unallocated [ 302.681117] binder: 18221:18223 ioctl 40046207 0 returned -16 2018/06/02 18:18:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002284, &(0x7f0000000000)) 2018/06/02 18:18:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)) [ 302.706376] EXT4-fs (loop0): Remounting filesystem read-only [ 302.712428] EXT4-fs (loop0): get root inode failed [ 302.717484] EXT4-fs (loop0): mount failed [ 302.770813] binder_alloc: 18221: binder_alloc_buf, no vma [ 302.776575] binder: 18221:18245 transaction failed 29189/-3, size 0-0 line 2971 [ 302.799667] binder: 18221:18223 ERROR: BC_REGISTER_LOOPER called without request 2018/06/02 18:18:02 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x6, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/56, 0x100000335) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000869000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/248) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8000, 0x0) socket(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000001c0)={r2}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x20000600}) [ 302.844556] team0 (unregistering): Port device team_slave_1 removed [ 302.882880] binder: 18221:18233 got reply transaction with no transaction stack [ 302.890554] binder: 18221:18233 transaction failed 29201/-71, size 0-0 line 2763 [ 302.894408] IPVS: ftp: loaded support on port[0] = 21 [ 302.908288] team0 (unregistering): Port device team_slave_0 removed [ 302.945640] binder: 18221:18245 BC_FREE_BUFFER u0000000020001000 no match [ 302.953664] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 302.985640] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 303.035289] bond0 (unregistering): Released all slaves [ 303.096450] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.102980] binder: undelivered TRANSACTION_COMPLETE [ 303.108200] binder: undelivered transaction 62, process died. [ 303.144343] binder: undelivered TRANSACTION_COMPLETE [ 303.165214] binder: undelivered TRANSACTION_ERROR: 29189 [ 303.982303] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.988741] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.996067] device bridge_slave_0 entered promiscuous mode [ 304.033041] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.039460] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.046800] device bridge_slave_1 entered promiscuous mode [ 304.084795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 304.125493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 304.232840] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 304.274752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 304.311834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 304.318762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.356665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 304.363583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.460676] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 304.468362] team0: Port device team_slave_0 added [ 304.503709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 304.511106] team0: Port device team_slave_1 added [ 304.546831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.571602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.606007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 304.613523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.629157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.660837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 304.667919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.675809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.879323] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.885701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.892336] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.898704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.905868] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 305.311118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.656992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.732594] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 305.807609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 305.813804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.821294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.890711] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/02 18:18:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 2018/06/02 18:18:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) 2018/06/02 18:18:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) 2018/06/02 18:18:06 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x6, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/56, 0x100000335) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000869000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/248) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8000, 0x0) socket(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000001c0)={r2}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x20000600}) 2018/06/02 18:18:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000380)=""/216, 0xd8}], 0x1) 2018/06/02 18:18:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) readv(r2, &(0x7f0000001700)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) recvmmsg(r2, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/06/02 18:18:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)) 2018/06/02 18:18:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) [ 306.357409] binder: 18535:18536 ERROR: BC_REGISTER_LOOPER called without request [ 306.366830] binder: BINDER_SET_CONTEXT_MGR already set [ 306.390138] binder: 18540:18543 ioctl 40046207 0 returned -16 [ 306.406166] binder: BINDER_SET_CONTEXT_MGR already set [ 306.423452] binder: 18553:18554 ioctl 40046207 0 returned -16 [ 306.439651] binder_alloc: 18535: binder_alloc_buf, no vma [ 306.445337] binder: 18540:18543 transaction failed 29189/-3, size 0-0 line 2971 [ 306.453763] binder_alloc: 18535: binder_alloc_buf, no vma [ 306.459627] binder: 18553:18554 transaction failed 29189/-3, size 0-0 line 2971 [ 306.489263] binder: 18540:18543 ERROR: BC_REGISTER_LOOPER called without request [ 306.516734] binder: undelivered TRANSACTION_COMPLETE [ 306.522451] binder: undelivered TRANSACTION_COMPLETE [ 306.527775] binder: undelivered transaction 67, process died. [ 306.550915] binder: 18553:18554 ERROR: BC_REGISTER_LOOPER called without request [ 307.146967] binder: 18540:18570 got reply transaction with no transaction stack [ 307.154492] binder: 18540:18570 transaction failed 29201/-71, size 0-0 line 2763 [ 307.189474] binder: 18553:18571 got reply transaction with no transaction stack [ 307.197011] binder: 18553:18571 transaction failed 29201/-71, size 0-0 line 2763 [ 307.276951] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.282564] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/02 18:18:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x6d, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/06/02 18:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clock_nanosleep(0x9, 0x1, &(0x7f0000000040), &(0x7f0000000200)) 2018/06/02 18:18:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)) 2018/06/02 18:18:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) 2018/06/02 18:18:07 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 2018/06/02 18:18:07 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x6, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/56, 0x100000335) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000869000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/248) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8000, 0x0) socket(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000001c0)={r2}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x20000600}) 2018/06/02 18:18:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) 2018/06/02 18:18:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) [ 307.318234] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.323809] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.348502] binder: 18577:18579 ERROR: BC_REGISTER_LOOPER called without request [ 307.361535] binder: BINDER_SET_CONTEXT_MGR already set [ 307.373839] binder: 18573:18574 ioctl 40046207 0 returned -16 [ 307.382244] loop3: p1 p2 p3 p4 < > [ 307.385967] loop3: partition table partially beyond EOD, truncated [ 307.396883] binder_alloc: 18577: binder_alloc_buf, no vma [ 307.402527] binder: 18573:18574 transaction failed 29189/-3, size 0-0 line 2971 [ 307.411605] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/02 18:18:07 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/06/02 18:18:07 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x10000001, 0xb2, &(0x7f0000000200)=""/178}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r0}, 0x10) [ 307.428690] binder: 18591:18593 ioctl 40046207 0 returned -16 [ 307.435921] loop3: p1 start 1 is beyond EOD, truncated [ 307.441298] loop3: p2 start 101 is beyond EOD, truncated [ 307.446813] loop3: p3 start 201 is beyond EOD, truncated [ 307.452314] loop3: p4 start 301 is beyond EOD, truncated [ 307.468638] binder: 18573:18574 ERROR: BC_REGISTER_LOOPER called without request 2018/06/02 18:18:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)) 2018/06/02 18:18:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) [ 307.487541] binder_alloc: 18577: binder_alloc_buf, no vma [ 307.493167] binder: 18591:18593 transaction failed 29189/-3, size 0-0 line 2971 [ 307.503632] binder: undelivered TRANSACTION_COMPLETE [ 307.509408] binder: undelivered TRANSACTION_COMPLETE [ 307.514585] binder: undelivered transaction 74, process died. [ 307.546622] loop3: p1 p2 p3 p4 < > [ 307.550331] loop3: partition table partially beyond EOD, truncated [ 307.576934] binder: 18591:18593 ERROR: BC_REGISTER_LOOPER called without request [ 307.589092] loop3: p1 start 1 is beyond EOD, truncated 2018/06/02 18:18:07 executing program 2: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b4f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bf1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c187c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343075bdb3a95708c24cb880e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec6e49151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887c81cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5f9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163421d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e812c48e", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f01"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:18:07 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 307.593565] binder: 18607:18608 ERROR: BC_REGISTER_LOOPER called without request [ 307.594661] loop3: p2 start 101 is beyond EOD, truncated [ 307.607541] loop3: p3 start 201 is beyond EOD, truncated [ 307.613067] loop3: p4 start 301 is beyond EOD, truncated [ 307.717583] binder: undelivered TRANSACTION_COMPLETE [ 307.723180] binder: undelivered TRANSACTION_COMPLETE [ 307.728379] binder: undelivered transaction 79, process died. [ 307.808650] kvm: pic: level sensitive irq not supported [ 307.808969] kvm: pic: single mode not supported [ 307.820370] kvm: pic: single mode not supported [ 307.825170] kvm: pic: level sensitive irq not supported [ 307.840673] kvm: pic: level sensitive irq not supported [ 307.849718] kvm: pic: single mode not supported [ 307.855193] kvm: pic: level sensitive irq not supported [ 307.866971] kvm: pic: level sensitive irq not supported [ 307.882315] kvm: pic: level sensitive irq not supported [ 307.890547] kvm: pic: level sensitive irq not supported [ 307.906458] kvm: pic: level sensitive irq not supported [ 307.912836] kvm: pic: single mode not supported [ 307.918421] kvm: pic: level sensitive irq not supported [ 307.923452] kvm: pic: level sensitive irq not supported [ 307.930921] kvm: pic: single mode not supported [ 307.939135] kvm: pic: single mode not supported [ 307.945644] kvm: pic: single mode not supported [ 307.951560] kvm: pic: single mode not supported [ 308.003491] kvm: pic: single mode not supported [ 308.008539] kvm: pic: single mode not supported [ 308.143782] binder: 18573:18627 got reply transaction with no transaction stack [ 308.156053] binder: 18573:18627 transaction failed 29201/-71, size 0-0 line 2763 [ 308.179585] binder: 18591:18628 got reply transaction with no transaction stack [ 308.187126] binder: 18591:18628 transaction failed 29201/-71, size 0-0 line 2763 2018/06/02 18:18:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x100000009) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000530407031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:18:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x19) 2018/06/02 18:18:08 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0xffffff94, 0x3}]}}, @tcp={{0xc0ffffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/06/02 18:18:08 executing program 2: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f01"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:18:08 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x6, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/56, 0x100000335) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000869000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/248) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8000, 0x0) socket(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000001c0)={r2}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x20000600}) 2018/06/02 18:18:08 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:18:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) 2018/06/02 18:18:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) [ 308.278237] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.283852] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.309142] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.323781] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.356890] audit: type=1107 audit(1527963488.330:249): pid=18642 uid=0 auid=4294967295 ses=4294967295 msg=' [ 308.356890] ' [ 308.363798] binder: 18638:18646 ERROR: BC_REGISTER_LOOPER called without request [ 308.368720] audit: type=1107 audit(1527963488.330:250): pid=18642 uid=0 auid=4294967295 ses=4294967295 msg=' [ 308.368720] ' 2018/06/02 18:18:08 executing program 3: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 308.415793] XFS (loop0): Mounting V4 Filesystem [ 308.446089] binder: BINDER_SET_CONTEXT_MGR already set [ 308.467223] XFS (loop0): totally zeroed log [ 308.481226] XFS (loop0): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 308.490887] XFS (loop0): Unmount and run xfs_repair [ 308.495949] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 308.502645] 00000000031b2a2a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.504122] binder: 18652:18655 ioctl 40046207 0 returned -16 [ 308.511511] 000000006553c91f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.511524] 0000000025a5cbc4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.511536] 00000000480b22dc: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.511546] 0000000051fd7241: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.511558] 000000000041954d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.511573] 000000000fa44aa3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.522551] binder: undelivered TRANSACTION_COMPLETE [ 308.526348] 000000001480369d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.580624] binder: 18652:18655 transaction failed 29189/-22, size 0-0 line 2856 [ 308.584873] XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 308.601819] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 308.610422] XFS (loop0): failed to read root inode 2018/06/02 18:18:08 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000004600)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x26f, 0x0, 0x30}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000000340)={&(0x7f00005dafe4)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x2f0}], 0x1}, 0x0) 2018/06/02 18:18:08 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/06/02 18:18:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x100000009) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000530407031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:18:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x26, 0x1, 0x0, 0x0, {0x2}, [@nested={0x8, 0x8, [@generic='$']}]}, 0x1c}, 0x1}, 0x0) [ 308.625557] binder: 18652:18655 ERROR: BC_REGISTER_LOOPER called without request [ 308.659947] binder: undelivered TRANSACTION_COMPLETE [ 308.665198] binder: undelivered transaction 84, process died. 2018/06/02 18:18:08 executing program 2: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b4f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bf1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c187c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343075bdb3a95708c24cb880e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec6e49151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887c81cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5f9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163421d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e812c48e", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f01"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 308.714895] audit: type=1107 audit(1527963488.688:251): pid=18671 uid=0 auid=4294967295 ses=4294967295 msg=' [ 308.714895] ' [ 308.757473] netlink: 'syz-executor3': attribute type 8 has an invalid length. [ 309.204155] binder: 18652:18690 got reply transaction with no transaction stack [ 309.211702] binder: 18652:18690 transaction failed 29201/-71, size 0-0 line 2763 [ 309.334768] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.340793] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/02 18:18:09 executing program 4: socket(0x1e, 0x805, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') unshare(0x2000400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/06/02 18:18:09 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:18:09 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x100000009) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000530407031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:18:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$cifs(&(0x7f00000024c0)='cifs\x00', &(0x7f0000002500)='./bus\x00', 0x0, 0x0, &(0x7f0000002400), 0x11000, &(0x7f0000000140)='user(}t\x00') unlink(&(0x7f0000000040)='./bus\x00') 2018/06/02 18:18:09 executing program 2: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b4f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bf1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c187c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343075bdb3a95708c24cb880e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec6e49151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887c81cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5f9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163421d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e812c48e", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f01"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/02 18:18:09 executing program 7: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='keyring\x00', 0xfffffffffffffffb) 2018/06/02 18:18:09 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x30d, 0x0) setxattr(&(0x7f00000008c0)='./file0\x00', &(0x7f0000002280)=@known='trusted.syz\x00', &(0x7f0000002240)='sm4-generic\x00', 0xc, 0x1) 2018/06/02 18:18:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) [ 309.512264] audit: type=1107 audit(1527963489.486:252): pid=18695 uid=0 auid=4294967295 ses=4294967295 msg=' [ 309.512264] ' 2018/06/02 18:18:09 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/06/02 18:18:09 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x100000009) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000530407031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/02 18:18:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$cifs(&(0x7f00000024c0)='cifs\x00', &(0x7f0000002500)='./bus\x00', 0x0, 0x0, &(0x7f0000002400), 0x11000, &(0x7f0000000140)='user(}t\x00') unlink(&(0x7f0000000040)='./bus\x00') 2018/06/02 18:18:09 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/06/02 18:18:09 executing program 6: clock_adjtime(0x0, &(0x7f0000000200)={0x7ff, 0x0, 0xffffffffa50f64dd}) 2018/06/02 18:18:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=@updsa={0x138, 0x1a, 0x421, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@broadcast=0xffffffff}, {@in=@broadcast=0xffffffff, 0x0, 0x3c}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'rmd256\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 309.648216] XFS (loop0): Mounting V4 Filesystem [ 309.682435] XFS (loop0): totally zeroed log [ 309.722400] audit: type=1107 audit(1527963489.696:253): pid=18739 uid=0 auid=4294967295 ses=4294967295 msg=' [ 309.722400] ' [ 309.731393] XFS (loop0): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 309.744276] XFS (loop0): Unmount and run xfs_repair [ 309.749344] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 309.756048] 00000000949da51a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.764938] 000000002fdcf9a6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.773820] 00000000fe8d5185: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.782705] 00000000d8f4dbb9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.791608] 00000000808d659b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.800511] 00000000d7836722: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.809386] 00000000e38468d4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2018/06/02 18:18:09 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0042fc2f07d82c99240970") r1 = socket(0x18, 0x0, 0x1) unshare(0x400) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x111, 0x11, &(0x7f0000000680), &(0x7f0000000600)=0x7970e41e) 2018/06/02 18:18:09 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) [ 309.818282] 000000003312df71: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.827776] XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 309.837289] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 309.845919] XFS (loop0): failed to read root inode 2018/06/02 18:18:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f00000000c0)=@migrate_id={0x12, 0x0, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0xfdba) 2018/06/02 18:18:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50, 0xffffffc3}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188, 0x276}, {&(0x7f00000015c0)=""/4096, 0x122}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0xa4, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 2018/06/02 18:18:10 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") move_pages(0x0, 0x1d2d, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) 2018/06/02 18:18:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380), 0x217, &(0x7f0000000180)}, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, &(0x7f0000000240)=""/253, 0xfd}, 0x0) r2 = socket(0xa, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r1) 2018/06/02 18:18:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x19, 0x4) 2018/06/02 18:18:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$cifs(&(0x7f00000024c0)='cifs\x00', &(0x7f0000002500)='./bus\x00', 0x0, 0x0, &(0x7f0000002400), 0x11000, &(0x7f0000000140)='user(}t\x00') unlink(&(0x7f0000000040)='./bus\x00') 2018/06/02 18:18:10 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x35) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x101) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/02 18:18:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:18:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) [ 310.200945] XFS (loop0): Mounting V4 Filesystem [ 310.218756] XFS (loop0): totally zeroed log [ 310.241890] XFS (loop0): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 310.251589] XFS (loop0): Unmount and run xfs_repair [ 310.256682] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 310.263417] 000000003bc4bb70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.272319] 000000001c7117a5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.281196] 000000004ab9146e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2018/06/02 18:18:10 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") move_pages(0x0, 0x1d2d, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) 2018/06/02 18:18:10 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000080), 0x80000000) 2018/06/02 18:18:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$cifs(&(0x7f00000024c0)='cifs\x00', &(0x7f0000002500)='./bus\x00', 0x0, 0x0, &(0x7f0000002400), 0x11000, &(0x7f0000000140)='user(}t\x00') unlink(&(0x7f0000000040)='./bus\x00') 2018/06/02 18:18:10 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x9) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000840)=ANY=[@ANYPTR64]) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000140)) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000240)='./file0\x00', 0xe0ff) [ 310.290078] 00000000b90f823d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.298950] 00000000788c66f4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.307838] 000000002f5c3629: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.316707] 00000000fe6eab8c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.325581] 000000004e42e4b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2018/06/02 18:18:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f00000000c0)=@migrate_id={0x12, 0x0, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0xfdba) [ 310.336649] XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 310.346120] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 310.354688] XFS (loop0): failed to read root inode 2018/06/02 18:18:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 2018/06/02 18:18:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) close(r0) 2018/06/02 18:18:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)) 2018/06/02 18:18:10 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") move_pages(0x0, 0x1d2d, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) [ 310.676119] XFS (loop0): Mounting V4 Filesystem [ 310.695560] XFS (loop0): totally zeroed log [ 310.702099] XFS (loop0): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 310.711772] XFS (loop0): Unmount and run xfs_repair [ 310.716858] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 310.723564] 00000000c69d6990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.732468] 000000000c1f7fbe: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.741342] 000000007c75b2a1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.750214] 0000000033bc752c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.759261] 000000008c5129af: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.768121] 00000000b047cba1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.777006] 000000005053610f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.785862] 0000000078cb5a85: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.794779] XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 310.804353] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 310.812912] XFS (loop0): failed to read root inode 2018/06/02 18:18:10 executing program 4: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0042fc2f07d82c99240970") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x40096102, &(0x7f0000000080)={{0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0xfe]}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @loopback=0x7f000001}}) 2018/06/02 18:18:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f00000000c0)=@migrate_id={0x12, 0x0, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0xfdba) 2018/06/02 18:18:10 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)="6e65742f69636d703600b34555a399dba342d83b9a2814a302a901a9cab918e0e592bd28e5e0c7cfef3f9e72d4a1600f5381340044348ab90f894da561e72ad57322a60c4445c3bfcaa2bac9f438e52cba5dd46a7338a6534717637d3667e3bcaa639fb5f3f989bf1192ff7aa8aac18e46655008d00dc41fff7f157caa80704d68e5cc0c049c0d66ca50ae7be66f") ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000440), 0x8) 2018/06/02 18:18:10 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") move_pages(0x0, 0x1d2d, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) 2018/06/02 18:18:10 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000001080)=[{r2}], 0x1, 0xffff) vmsplice(r2, &(0x7f00004e8000)=[{&(0x7f0000004980)=';', 0x1}], 0x1, 0x0) write(r2, &(0x7f0000335000), 0xfc94) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000140)="2cc8", 0x2}, {&(0x7f0000000340)="5339a1953496b53f8f2bbb273615d7ecd6ab45855b699ffe81d2516ce4267d777cdabf433440b32ff176ad61b5f2a0de5379b4250e275eed8c13f02ab326df52a2699527b0840cb4172fafe8b28fe71bc661b60336ac6bd4063f00ebb0a3317a687053f6f9e83f84b9d8225b2edcdedaf3801ffeb16a7eda21c5c3db95c617736d2eb39ac74df1a546a9488236a54e668e4d7fb3f07beab151caf2f87fde3c6021a320c708fc97a867", 0xa9}], 0x2, 0x8) 2018/06/02 18:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0), 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000080)=0x8000000, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000000c0)=""/177, &(0x7f0000000180)=0x19f) close(r2) close(r1) 2018/06/02 18:18:10 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000340)=0x8, 0x20) 2018/06/02 18:18:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="f1adeb1af82ebaacf3297c7422f1bd4355db6251ba98a1e2907b45d18f94a487d352e5fc3064bfe27e0dfe1aec6106fa2a0038bdf11a27dec359de1cd7168756278c52dea94eee1cfbb42887d37ef802ac13636a678791c1882b9b3f8f350b8b2300", 0x62, 0xfffffffffffffffb) 2018/06/02 18:18:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) 2018/06/02 18:18:11 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x2, &(0x7f0000000000)=""/59, &(0x7f0000000080)=0x3b) [ 310.955867] Invalid option length (0) for dns_resolver key [ 310.989318] Invalid option length (0) for dns_resolver key 2018/06/02 18:18:11 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f00000000c0)=@migrate_id={0x12, 0x0, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0xfdba) 2018/06/02 18:18:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d}, 0x2c) 2018/06/02 18:18:11 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x2001) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl(r1, 0x40044103, &(0x7f0000001f64)) 2018/06/02 18:18:11 executing program 7: munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0xff, &(0x7f0000009000/0x4000)=nil, 0x2) 2018/06/02 18:18:11 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x2, &(0x7f0000000000)=""/59, &(0x7f0000000080)=0x3b) 2018/06/02 18:18:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)="2e2f66696c65302f66692e652bb5", 0x0) stat(&(0x7f00000005c0)="2e2f66696c65302f66692e652bb52f66696c653000", &(0x7f0000000600)) syz_fuse_mount(&(0x7f0000000180)="2e2f66696c65302f66692e652bb52f66696c653000", 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/02 18:18:11 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8) 2018/06/02 18:18:11 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x2, &(0x7f0000000000)=""/59, &(0x7f0000000080)=0x3b) 2018/06/02 18:18:11 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x2, &(0x7f0000000000)=""/59, &(0x7f0000000080)=0x3b) 2018/06/02 18:18:11 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) 2018/06/02 18:18:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)="2e2f66696c65302f66692e652bb5", 0x0) stat(&(0x7f00000005c0)="2e2f66696c65302f66692e652bb52f66696c653000", &(0x7f0000000600)) syz_fuse_mount(&(0x7f0000000180)="2e2f66696c65302f66692e652bb52f66696c653000", 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/02 18:18:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:18:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d}, 0x2c) 2018/06/02 18:18:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x3a000000}) 2018/06/02 18:18:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 2018/06/02 18:18:11 executing program 6: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) clone(0x0, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140)) 2018/06/02 18:18:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x66d3eab81876fa59) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 2018/06/02 18:18:12 executing program 2: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) move_pages(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x4) 2018/06/02 18:18:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT(r1, 0xae78, &(0x7f0000000140)) 2018/06/02 18:18:12 executing program 0: capset(&(0x7f00005cf000)={0x19980330}, &(0x7f0000f03fe8)) linkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1000) 2018/06/02 18:18:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)="2e2f66696c65302f66692e652bb5", 0x0) stat(&(0x7f00000005c0)="2e2f66696c65302f66692e652bb52f66696c653000", &(0x7f0000000600)) syz_fuse_mount(&(0x7f0000000180)="2e2f66696c65302f66692e652bb52f66696c653000", 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/02 18:18:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000032, &(0x7f0000000040)=0x1000000, 0x4) 2018/06/02 18:18:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/06/02 18:18:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200), 0x4) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/06/02 18:18:12 executing program 0: r0 = syz_open_dev$random(&(0x7f0000000540)='/dev/random\x00', 0x0, 0x0) poll(&(0x7f0000000980)=[{r0}], 0x1, 0x1f) 2018/06/02 18:18:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d}, 0x2c) 2018/06/02 18:18:12 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, &(0x7f00000001c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2018/06/02 18:18:12 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) 2018/06/02 18:18:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)="2e2f66696c65302f66692e652bb5", 0x0) stat(&(0x7f00000005c0)="2e2f66696c65302f66692e652bb52f66696c653000", &(0x7f0000000600)) syz_fuse_mount(&(0x7f0000000180)="2e2f66696c65302f66692e652bb52f66696c653000", 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/02 18:18:13 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000040)}, 0x10) 2018/06/02 18:18:13 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000040)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/06/02 18:18:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/06/02 18:18:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) 2018/06/02 18:18:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x2, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}, 0x1}, 0x0) 2018/06/02 18:18:13 executing program 3: r0 = semget(0xffffffffffffffff, 0x2, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) r1 = semget$private(0x0, 0x1, 0x0) semtimedop(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000280)) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000100)={0x0, 0x989680}) 2018/06/02 18:18:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0x11, 0xa, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'ifb0\x00', 0x3082}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000000)={'ifb0\x00', 0xa201}) [ 313.222358] netlink: 'syz-executor6': attribute type 2 has an invalid length. 2018/06/02 18:18:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/233}, 0x18) 2018/06/02 18:18:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d}, 0x2c) 2018/06/02 18:18:13 executing program 3: set_mempolicy(0xc003, &(0x7f0000000c40), 0x0) [ 313.275012] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 313.296195] ¢: renamed from ifb0 2018/06/02 18:18:13 executing program 1: r0 = epoll_create(0x4) fsetxattr(r0, &(0x7f0000000000)=@known='security.evm\x00', &(0x7f0000000080)="cc3e9c439b2a88aa07b0640520d64a67da", 0xffffffffffffff18, 0x4000000) [ 313.376280] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 313.425588] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 2018/06/02 18:18:13 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 2018/06/02 18:18:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x2c) 2018/06/02 18:18:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000002e80001040000040d000300ea1100000005000000", 0x29}], 0x1) 2018/06/02 18:18:13 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) read(r0, &(0x7f0000000140)=""/117, 0x75) 2018/06/02 18:18:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x12, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/02 18:18:13 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x4, 0x4) read(r0, &(0x7f0000000040)=""/249, 0xf9) 2018/06/02 18:18:13 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) 2018/06/02 18:18:13 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'}) close(r2) close(r1) 2018/06/02 18:18:14 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x0, 0xc, &(0x7f0000999000)=""/4, &(0x7f0000000000)=0x4) 2018/06/02 18:18:14 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2}}}, 0x88) 2018/06/02 18:18:14 executing program 0: clone(0x200, &(0x7f0000000140), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000f40)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000088c0)) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x4040) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) inotify_init1(0x800) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x5, 0xffffffffffffffff, &(0x7f0000000100)) execveat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000680), 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:18:14 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a", 0x2}, 0x60) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 2018/06/02 18:18:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040005031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) 2018/06/02 18:18:14 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x65) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) 2018/06/02 18:18:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') pread64(r1, &(0x7f0000003c00)=""/4096, 0x1000, 0x0) 2018/06/02 18:18:14 executing program 4: ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="41d00842a10000000004"]]) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)={0x8, 0x1}, 0x0) 2018/06/02 18:18:15 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 2018/06/02 18:18:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000006000)='syzkaller\x00', 0x6, 0x1000, &(0x7f000000d000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000000f000)={0xffffffffffffffff, 0x0, 0x0, 0x9d, &(0x7f0000011f5e), &(0x7f000000ff63)=""/157}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000012ff0)={r1, 0x50, &(0x7f000000f000)}, 0x10) 2018/06/02 18:18:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0xa, 0xffffff85}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/06/02 18:18:15 executing program 5: r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x2, &(0x7f0000001000), 0xc5) 2018/06/02 18:18:15 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) 2018/06/02 18:18:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x32}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/06/02 18:18:15 executing program 0: clone(0x200, &(0x7f0000000140), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000f40)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000088c0)) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x4040) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) inotify_init1(0x800) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x5, 0xffffffffffffffff, &(0x7f0000000100)) execveat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000680), 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/06/02 18:18:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x65) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) 2018/06/02 18:18:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x0, 0x2, 0x100000001}) bind$alg(r0, &(0x7f00001e3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4309(authenc(michael_mic-generic,chacha20-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x397) 2018/06/02 18:18:15 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) 2018/06/02 18:18:15 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000002, 0x0) select(0x40, &(0x7f0000002000), &(0x7f0000000040), &(0x7f0000000fc0)={0x20007fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x3900000000000300) 2018/06/02 18:18:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0xe800, 0x1, &(0x7f0000000280)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000400010a0200027400f8", 0x16}], 0x0, &(0x7f0000000240)) 2018/06/02 18:18:15 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000200)=""/187, 0xbb) 2018/06/02 18:18:15 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) 2018/06/02 18:18:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f91"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 315.288933] FAT-fs (loop1): bogus sectors per cluster 0 [ 315.294683] FAT-fs (loop1): Can't find a valid FAT filesystem 2018/06/02 18:18:15 executing program 4: symlink(&(0x7f0000000280)='/\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x10a032, &(0x7f0000000000)={[{@i_version='i_version', 0x2c}]}) [ 315.383604] FAT-fs (loop1): Unrecognized mount option "è" or missing value [ 440.471370] INFO: rcu_sched self-detected stall on CPU [ 440.476981] 0-...!: (124991 ticks this GP) idle=932/1/4611686018427387906 softirq=84653/84653 fqs=1 [ 440.486588] (t=125000 jiffies g=46554 c=46553 q=59) [ 440.491790] rcu_sched kthread starved for 124996 jiffies! g46554 c46553 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 [ 440.502352] RCU grace-period kthread stack dump: [ 440.507096] rcu_sched R running task 23592 9 2 0x80000000 [ 440.514293] Call Trace: [ 440.516887] __schedule+0x801/0x1e30 [ 440.520597] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 440.525615] ? __sched_text_start+0x8/0x8 [ 440.529767] ? add_timer_on+0xa50/0xa50 [ 440.533734] ? find_held_lock+0x36/0x1c0 [ 440.537798] ? lock_downgrade+0x8e0/0x8e0 [ 440.541952] schedule+0xef/0x430 [ 440.545367] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 440.549947] ? __schedule+0x1e30/0x1e30 [ 440.553916] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 440.558928] ? trace_hardirqs_on+0xd/0x10 [ 440.563073] ? prepare_to_swait+0x19b/0x500 [ 440.567386] ? __lockdep_init_map+0x105/0x590 [ 440.571876] ? lockdep_init_map+0x9/0x10 [ 440.575931] ? init_timer_on_stack_key+0xb7/0xe0 [ 440.580685] schedule_timeout+0x138/0x240 [ 440.584831] ? usleep_range+0x180/0x180 [ 440.588802] ? __next_timer_interrupt+0x1a0/0x1a0 [ 440.593648] rcu_gp_kthread+0x6b5/0x1940 [ 440.597718] ? rcu_batches_completed_sched+0x10/0x10 [ 440.602816] ? perf_trace_lock+0x3a1/0x900 [ 440.607048] ? pick_next_task_fair+0x97c/0x1780 [ 440.611715] ? graph_lock+0x170/0x170 [ 440.615514] ? resched_curr+0x122/0x190 [ 440.619489] ? perf_trace_lock+0x3a0/0x900 [ 440.623727] ? lock_downgrade+0x8e0/0x8e0 [ 440.627870] ? finish_task_switch+0x182/0x840 [ 440.632366] ? kasan_check_read+0x11/0x20 [ 440.636513] ? do_raw_spin_unlock+0x9e/0x2e0 [ 440.640914] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 440.645494] ? compat_start_thread+0x80/0x80 [ 440.649894] ? _raw_spin_unlock_irq+0x27/0x70 [ 440.654384] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 440.659399] ? kasan_check_write+0x14/0x20 [ 440.663628] ? finish_task_switch+0x28b/0x840 [ 440.668120] ? preempt_notifier_register+0x1e0/0x1e0 [ 440.673217] ? lock_repin_lock+0x410/0x410 [ 440.677457] ? __schedule+0x809/0x1e30 [ 440.681346] ? graph_lock+0x170/0x170 [ 440.685142] ? find_held_lock+0x36/0x1c0 [ 440.689206] ? find_held_lock+0x36/0x1c0 [ 440.693279] ? __schedule+0x1e30/0x1e30 [ 440.697248] ? do_raw_spin_unlock+0x9e/0x2e0 [ 440.701652] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 440.706248] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.711784] ? parse_args.cold.15+0x1b3/0x1b3 [ 440.716276] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 440.721286] ? trace_hardirqs_on+0xd/0x10 [ 440.725432] kthread+0x345/0x410 [ 440.728799] ? rcu_batches_completed_sched+0x10/0x10 [ 440.733896] ? kthread_bind+0x40/0x40 [ 440.737696] ret_from_fork+0x3a/0x50 [ 440.741414] NMI backtrace for cpu 0 [ 440.745039] CPU: 0 PID: 13400 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #79 [ 440.752299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.761637] Call Trace: [ 440.764206] [ 440.766354] dump_stack+0x1b9/0x294 [ 440.769984] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.775166] ? lock_release+0xa10/0xa10 [ 440.779142] nmi_cpu_backtrace.cold.4+0x19/0xce [ 440.783818] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 440.789002] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 440.794275] arch_trigger_cpumask_backtrace+0x14/0x20 [ 440.799460] rcu_dump_cpu_stacks+0x175/0x1c2 [ 440.803863] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 440.808882] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 440.814334] ? print_other_cpu_stall+0x4a0/0x4a0 [ 440.819093] ? debug_check_no_locks_freed+0x310/0x310 [ 440.824278] ? find_held_lock+0x36/0x1c0 [ 440.828341] ? lock_downgrade+0x8e0/0x8e0 [ 440.832486] ? lock_release+0xa10/0xa10 [ 440.836458] ? graph_lock+0x170/0x170 [ 440.840254] ? graph_lock+0x170/0x170 [ 440.844050] ? graph_lock+0x170/0x170 [ 440.847850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.853385] ? pvclock_gtod_notify+0x2db/0x3c0 [ 440.857959] ? graph_lock+0x170/0x170 [ 440.861752] ? graph_lock+0x170/0x170 [ 440.865559] ? __lock_is_held+0xb5/0x140 [ 440.869632] rcu_check_callbacks+0x21b/0xad0 [ 440.874042] ? rcu_cpu_stall_reset+0x210/0x210 [ 440.878619] ? trace_hardirqs_off+0xd/0x10 [ 440.882851] ? raise_softirq+0x1b2/0x450 [ 440.886908] ? raise_softirq_irqoff+0x310/0x310 [ 440.891576] ? account_guest_time+0x3d0/0x3d0 [ 440.896067] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 440.901597] ? hrtimer_run_queues+0x70/0x390 [ 440.906004] ? run_local_timers+0x168/0x1d0 [ 440.910320] ? timer_clear_idle+0x50/0x50 [ 440.914466] ? account_system_time+0x7f/0xb0 [ 440.918869] ? account_process_tick+0x76/0x240 [ 440.923455] update_process_times+0x2d/0x70 [ 440.927771] tick_sched_handle+0x9f/0x180 [ 440.931912] tick_sched_timer+0x45/0x130 [ 440.935968] __hrtimer_run_queues+0x3e3/0x10a0 [ 440.940549] ? tick_sched_do_timer+0x1a0/0x1a0 [ 440.945130] ? hrtimer_start_range_ns+0xd10/0xd10 [ 440.949972] ? pvclock_read_flags+0x160/0x160 [ 440.954463] ? kvm_clock_read+0x25/0x30 [ 440.958437] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.963454] ? kvm_clock_read+0x25/0x30 [ 440.967426] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.972445] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 440.977811] ? do_timer+0x50/0x50 [ 440.981259] ? rcu_nmi_exit+0xd7/0x2b0 [ 440.985145] ? do_raw_spin_lock+0xc1/0x200 [ 440.989381] hrtimer_interrupt+0x2f3/0x750 [ 440.993623] smp_apic_timer_interrupt+0x15d/0x710 [ 440.998461] ? smp_call_function_single_interrupt+0x650/0x650 [ 441.004336] ? _raw_spin_lock+0x32/0x40 [ 441.008310] ? _raw_spin_unlock+0x22/0x30 [ 441.012456] ? handle_edge_irq+0x330/0x870 [ 441.016684] ? task_prio+0x50/0x50 [ 441.020231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.025074] apic_timer_interrupt+0xf/0x20 [ 441.029294] [ 441.031525] RIP: 0010:shrink_dentry_list+0xa/0x7c0 [ 441.036443] RSP: 0018:ffff8801b111fb80 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 441.044147] RAX: ffff8801b0c94040 RBX: dffffc0000000000 RCX: ffffffff81c67179 [ 441.051411] RDX: dffffc0000000000 RSI: ffffffff81c67091 RDI: ffff8801b111fc18 [ 441.058675] RBP: ffff8801b111fc78 R08: ffff8801b0c94040 R09: ffffed0039cb77d8 [ 441.065938] R10: ffffed0039cb77d8 R11: ffff8801ce5bbec3 R12: ffff8801b111fc50 [ 441.073200] R13: ffff8801b111fc10 R14: 1ffff10036223f82 R15: ffffed0036223f85 [ 441.080482] ? shrink_dcache_parent+0x199/0x230 [ 441.085147] ? shrink_dcache_parent+0xb1/0x230 [ 441.089728] ? shrink_dcache_parent+0xba/0x230 [ 441.094306] ? path_has_submounts+0x1a0/0x1a0 [ 441.098798] ? down_write+0x87/0x120 [ 441.102508] ? vfs_rmdir+0xe0/0x470 [ 441.106130] ? down_read+0x1b0/0x1b0 [ 441.109842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.115373] ? security_inode_rmdir+0xf4/0x130 [ 441.119955] vfs_rmdir+0x202/0x470 [ 441.123495] do_rmdir+0x523/0x610 [ 441.126949] ? __ia32_sys_mkdir+0x80/0x80 [ 441.131091] ? exit_to_usermode_loop+0x87/0x310 [ 441.135760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.141292] ? exit_to_usermode_loop+0x1ef/0x310 [ 441.146068] ? do_syscall_64+0x92/0x800 [ 441.150039] __x64_sys_rmdir+0x36/0x40 [ 441.153923] do_syscall_64+0x1b1/0x800 [ 441.157804] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 441.162642] ? syscall_return_slowpath+0x5c0/0x5c0 [ 441.167567] ? syscall_return_slowpath+0x30f/0x5c0 [ 441.172495] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 441.177857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.182704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.187882] RIP: 0033:0x455777 [ 441.191063] RSP: 002b:00007ffc595e2da8 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 [ 441.198767] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 [ 441.206032] RDX: 0000000000000000 RSI: 00007ffc595e4b50 RDI: 00007ffc595e4b50 [ 441.213293] RBP: 00007ffc595e4b50 R08: 0000000000000000 R09: 0000000000000001 [ 441.220556] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000000e2c940 [ 441.227815] R13: 0000000000000000 R14: 000000000000028d R15: 000000000004cf52