f9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x7f, @broadcast=0xffffffff, 0x4e24, 0x3, 'sed\x00', 0x6, 0x1, 0x1b}, {@empty, 0x4e20, 0x1, 0x7, 0xffffffffffff10c4, 0x1}}, 0x44) fstatfs(r2, &(0x7f00000001c0)=""/103) r3 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) 2018/06/03 22:47:29 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000340)="03"}) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x4) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x48000) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2000, 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f00000001c0)) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0xc0f85403, &(0x7f0000000340)=""/4096) 2018/06/03 22:47:29 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x400000000000005, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000651ff8)={0x2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f000079efe0)={0x1}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="0731dbbaba1662730b56d3487b64862aee1bb9c52a47eef5b9dcaa35cedd9aeef1477a9e7f0f5c3d2f3e66b1820be34bfe62dd9a095428", 0x37, 0x8041, &(0x7f0000000080)={0xa, 0x4e22, 0x3fffc00, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) move_pages(0x0, 0x1d2d, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) 2018/06/03 22:47:29 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000001c0)={0x20000000000000, 0x4, 0xfffffffffffffff7, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x6, &(0x7f0000000240)={0x1c2, 0x0, 0x29, 0x2}, 0x10) 2018/06/03 22:47:29 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$int_in(r1, 0x80000080044d76, &(0x7f00000000c0)) getdents64(r1, &(0x7f0000000040)=""/103, 0x67) 2018/06/03 22:47:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x410340, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[{0x6, 0x4}, {0x2, 0xfffffffffffffff8}, {0x3, 0x2}, {0x6, 0x4}, {0x2, 0x6}], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = gettid() syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f00000001c0)="baf80c66b80629788266efbafc0cb8e482ef36379a000002000f01cb0fc71c66b93006000066b8f4e5000066ba000000000f30670f30dfe00f21bc0f00945932", 0x40}], 0x1, 0x0, &(0x7f0000001280), 0x0) tkill(r4, 0x1000000000016) tkill(r4, 0x32) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/23, 0x17) [ 120.589213] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 22:47:30 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000004c0)='./file0\x00') syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8413, 0x220000) 2018/06/03 22:47:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x3d) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x8000012}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=@hopopts={0x0, 0x0, [0x2]}, 0x8) 2018/06/03 22:47:30 executing program 2: mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x4001b072, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x282400, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x2, 0x1, 0x9, 0x2}) recvmmsg(r0, &(0x7f0000001f4c), 0x4000000000001b9, 0x0, 0x0) sendto(r1, &(0x7f0000018000)="f8", 0x1, 0x0, 0x0, 0x0) 2018/06/03 22:47:30 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}, [], {0x95}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/03 22:47:30 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0xc4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0247e22f05d02c99240970") r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) 2018/06/03 22:47:30 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/10, &(0x7f0000000040)=0xa) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x20000200200) 2018/06/03 22:47:30 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20001, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000140)=0x60, 0x80000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000100)="7dec938e", 0x4}], 0x1, 0x0) 2018/06/03 22:47:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1bd, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x2, 0x1, 0x3, 0x893a390da276daf, 0xfffffff8, 0xffffffffffffffff}, @generic={0x1, 0x3a, 0x9, 0x8}, @alu={0x4, 0x6, 0xd, 0x5, 0xa, 0x0, 0xfffffffffffffffd}], &(0x7f00000003c0)='syzkaller\x00', 0x20, 0xfffffffffffffd67, &(0x7f0000000300)=""/187, 0x41100}, 0x43) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 2018/06/03 22:47:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x10040000}, 0x8) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x5}, 0x8) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 2018/06/03 22:47:30 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x7, 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x208040) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/06/03 22:47:30 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000010207041dfffd946fa2830020200a0009000200001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) readahead(r0, 0x20, 0x2) 2018/06/03 22:47:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) dup(r2) mmap(&(0x7f0000001000/0x12000)=nil, 0x12000, 0x1, 0x40030, r0, 0x3) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xc8, "ead86ccc73e734f97c1586587e89347b30e794a2ac080ddb372f7e6cd1efa380e632a61d420ca175dc4606594c78d3574db25cfba3794afeda4bb885c1ada78e53e738e83422e50a35591ed0ce02a0785aeb1295c3f770a559c8d86770d8c7f7b3aa6b65b89f9a05b46e4e5f0acf468704a8f1ec19367fe828aad98481cc3cd562d94dfc779a65e9e2a10647c455fdd6f5fbbef2fd57aacb0f0f02f59054d05a5609d20ab6846c22eec470167a6a68ca87a2b139b0b11dfcaee7404dc764240592b585f0883291d3"}, &(0x7f00000000c0)=0xd0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, &(0x7f0000018000)={r3, @in6={{0xa}}}, &(0x7f0000000000)=0x84) 2018/06/03 22:47:30 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x4148, &(0x7f0000000240)) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) 2018/06/03 22:47:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x82082, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000100)=0xc4f) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000300)="de0b0f46072ee6e80fc72e0e000f090f2d26c3110f21e50f239566b8010000000f23d00f21f866350000000c0f23f8f010957e71", 0x34}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) [ 121.955109] netlink: 5 bytes leftover after parsing attributes in process `syz-executor6'. [ 122.014281] netlink: 5 bytes leftover after parsing attributes in process `syz-executor6'. 2018/06/03 22:47:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x4909c0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000006c0)={0x7, &(0x7f00000000c0)=""/128, &(0x7f0000000600)=[{0x3f, 0x95, 0xfff, &(0x7f0000000140)=""/149}, {0x4, 0xca, 0x6, &(0x7f0000000200)=""/202}, {0x2, 0x48, 0x9, &(0x7f0000000300)=""/72}, {0x7f, 0x45, 0x2, &(0x7f0000000380)=""/69}, {0x3, 0x79, 0x189, &(0x7f0000000400)=""/121}, {0x7fffffff, 0x82, 0xffffffffffff0000, &(0x7f0000000480)=""/130}, {0xfff, 0x8e, 0x9, &(0x7f0000000540)=""/142}]}) 2018/06/03 22:47:31 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 2018/06/03 22:47:31 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0047fc2f07d82c99240970") unshare(0x400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r1, 0x0) 2018/06/03 22:47:31 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x88000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="dd0000008d22601e1d13ce7f17e8bab6f3ad22d3caeba77ab0011b2e26b4c52da7aa8f21ff0ed0d60657ed31b36a53101873710f557b6881eb4d9733d9bc63641a172f82919e31187c37b23bbc2b348e90e04e2dcd816f83de154ac4d46bb552e0efbb9edadb8525569f3315b392774dfbe9f6d540796a462e24d6bf37b2c810339ae21ed26a1d64b4d82459f2523fb9daab7c40256de20907a84c30ebbe158d98ed83d95f94895e2d6189c91e3795a1d7bff0a786fc0642065525c94888f53ae350cea8f0631210be0836780ed66ae8c0e4de636444feca0d96c1b40000000000"], &(0x7f0000000040)=0xe5) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r1, 0xdfa1}, 0x8) 2018/06/03 22:47:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xffffffff8873e55b, 0x7, 0xf10b, 0xc20, 0x4, 0x5e}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0xffff, 0x6, 0xffffffff, 0x2, 0x1ff, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5410, &(0x7f0000000200)) 2018/06/03 22:47:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000500)="0f20e035000010000f22e0c401456bff67460ff883c224000066430fd5c5410f0966b830008ec8b96c0800000f3266b835008ed08f89289a6add410f2367", 0x3e}], 0x1, 0x0, &(0x7f0000000480), 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/180, 0xb4) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/03 22:47:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x1, 0x6800000000000000, &(0x7f00000003c0)="88"}) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000009, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@release={0x40046306}, @increfs_done={0x40106308, r1, 0x2}], 0x5b, 0x0, &(0x7f00000000c0)="48294b943355e0105a16135d7fd8dc8855cb98229161aa8d238125e014a828ed60825926aa972df9fea82d8c01d419a10931761b063dcb9a7536f2cd81c5422e4b4144ad935e2dddc18b20f0d8628bd31de843b2ad6edeb2d2c9a7"}) 2018/06/03 22:47:31 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2f) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setflags(r1, 0x2, 0x1) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x6, 0x0, [{0x0, 0x7fffffff, 0x6, 0x400, 0x2, 0x9, 0x7}, {0x80000019, 0x1, 0x4, 0x5, 0x3f, 0x100000000, 0x9}, {0xc0000007, 0x3, 0x4, 0xff, 0x800, 0x2}, {0x80000007, 0x7fff, 0x6, 0x6, 0x0, 0xed0, 0x1880000000}, {0x6, 0xffff, 0x1, 0x1000, 0x80000001, 0x4, 0x8}, {0x8000000f, 0x1f, 0x4, 0x5, 0x7, 0x1ff, 0xfffffffffffffffa}]}) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) mmap(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1000000, 0x10, r0, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) [ 123.015785] binder: 8844:8846 transaction failed 29189/-22, size 0-0 line 2856 [ 123.045207] binder: 8844:8846 ioctl c0306201 200004c0 returned -14 2018/06/03 22:47:31 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000080), 0x4) pause() [ 123.072538] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 22:47:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x422342) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/03 22:47:32 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in={0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x7}, &(0x7f0000000180)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mlock2(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4) 2018/06/03 22:47:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003b80)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000003b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010001100d2c789a0090000008700", @ANYRES32=r1, @ANYBLOB="00000000000000000800120004000200"], 0x28}, 0x1}, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) 2018/06/03 22:47:32 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff1b207f5c5eeb86dd60634a7300146700fe800000000000000000000000000000ff02000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20c0000780000"], &(0x7f0000000000)={0x0, 0x2, [0x0, 0x0, 0xfffffffffffffffe, 0x80000000000000]}) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x34, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000080)={0x7, 0x3632, [{0x40, 0x0, 0x3}, {0x3, 0x0, 0x5}, {0x2abb, 0x0, 0xff}, {}, {0x3a9cb3fb}, {0x8, 0x0, 0x8}, {0x200, 0x0, 0x9}]}) [ 123.211165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/06/03 22:47:32 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x10, &(0x7f00000000c0)=r1, 0xffffffffffffff6b) [ 123.257972] *** Guest State *** [ 123.261387] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 123.270781] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 123.271968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 123.279725] CR3 = 0x0000000000000000 [ 123.279742] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 123.279753] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 123.279767] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 123.279781] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 123.279797] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 123.279813] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 123.279832] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 123.343060] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 2018/06/03 22:47:32 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)="9300", 0x2, 0x2) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x1, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r1, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) [ 123.351874] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 123.359903] GDTR: limit=0x00000000, base=0x0000000000000000 [ 123.367930] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 123.375966] IDTR: limit=0x00000000, base=0x0000000000000000 [ 123.384009] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 123.392063] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 123.399000] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 2018/06/03 22:47:32 executing program 7: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) renameat(r1, &(0x7f00000001c0)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) r2 = dup2(r0, r0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setflags(r0, 0x2, 0x1) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f00000000c0)) [ 123.399055] Interruptibility = 00000000 ActivityState = 00000000 [ 123.399059] *** Host State *** [ 123.399070] RIP = 0xffffffff811f744c RSP = 0xffff880180417390 [ 123.399090] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 123.399101] FSBase=00007fafcf69a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 123.399110] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 123.399123] CR0=0000000080050033 CR3=00000001b6504000 CR4=00000000001426f0 [ 123.399135] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 123.399146] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 123.399150] *** Control State *** [ 123.399158] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 123.399165] EntryControls=0000d1ff ExitControls=0023efff [ 123.399177] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 123.399185] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 123.399193] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 123.399201] reason=80000021 qualification=0000000000000000 [ 123.399214] IDTVectoring: info=00000000 errcode=00000000 [ 123.399220] TSC Offset = 0xffffffbb30257d76 [ 123.399225] TPR Threshold = 0x00 [ 123.399232] EPT pointer = 0x00000001b44a001e [ 123.475778] devpts: called with bogus options [ 123.819295] binder: 8844:8901 transaction failed 29189/-22, size 0-0 line 2856 [ 123.827770] binder: 8844:8901 ioctl c0306201 200004c0 returned -14 2018/06/03 22:47:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40800, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000000500)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="10000000000000002900000003000000"], 0x10}}], 0x2, 0x0) 2018/06/03 22:47:32 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x10000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") getpgid(0x0) fcntl$getown(r0, 0x9) gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)="de052befedf92309b184512ebe2b7527706bd778252683f239707c3ab6080000c17aea83a473636f00") ioctl$VT_RELDISP(r2, 0xb702) 2018/06/03 22:47:32 executing program 6: r0 = socket(0x10000000015, 0xe, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000180000fa000000005cba03a610b1e693c7f8bd3552ac3816c08776201caa36921bc89f7dfa90c793eb8d3da2b9f601adaea5cfa9cc7c6dc263190c83adb279e1076c712c2056ffa6ec72cc33874ada3be3f2d74e100d7989fd3b02622f488ad2f6b470f2e43b2211b72de539d022b420ce3e1eb81f82c32239858f7ba5825d819dec7dbe857a51bbb049aaef42cac1e63aa2a72930a96a91d958735047a88afbb0709b19073769f207759b27688f62d77cf4ba47db0d20c5fc5f5c7c2c79b9bcf9dc112c5b4d71c1", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0601000000000000"], 0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x2, ',>'}, &(0x7f00000000c0)=0xa) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r3, 0x2}, 0x8) write$rdma_cm(r1, &(0x7f0000000500)=@query_route={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r2, 0x2}}, 0x18) write$rdma_cm(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000001000100000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000004"], 0x3c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}}, &(0x7f0000000140)=0x84) 2018/06/03 22:47:32 executing program 7: r0 = socket$inet(0x15, 0x400000080005, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f000001a000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000083000014010000020000004c50c9d30400567b0c925c34b04997133261f7ec8f3df43b6492dca5da4525b73c6034"], 0x10}, 0x0) 2018/06/03 22:47:32 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff1b207f5c5eeb86dd60634a7300146700fe800000000000000000000000000000ff02000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20c0000780000"], &(0x7f0000000000)={0x0, 0x2, [0x0, 0x0, 0xfffffffffffffffe, 0x80000000000000]}) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x34, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000080)={0x7, 0x3632, [{0x40, 0x0, 0x3}, {0x3, 0x0, 0x5}, {0x2abb, 0x0, 0xff}, {}, {0x3a9cb3fb}, {0x8, 0x0, 0x8}, {0x200, 0x0, 0x9}]}) 2018/06/03 22:47:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1c, &(0x7f00000000c0)=0x9, 0x4) 2018/06/03 22:47:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000002c0)={'yam0\x00', 0x5}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x76}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, [0xffffffff, 0x4, 0xfffffffffffffffc, 0x1, 0x8001, 0xd22d, 0x0, 0x4, 0x2, 0x6, 0x9, 0x7f, 0x84, 0x0, 0xfffffffffffff800]}, &(0x7f00000000c0)=0x100) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0xc62}], 0x1000000000000205, 0x0) 2018/06/03 22:47:32 executing program 1: socketpair$inet6(0xa, 0x2, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x242c0000000, 0x8, 0x2, 0x100000001, 0xfffffffffffff000}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="ca000000c6db0879e7bd0d324cf369e76da17a5ec50567a7a9612b660f89f0a908c16e4a04a83f9b2b0de93a3932c15f89c52f28db4a2efeadbd15accec2a7cd9a44ff69d7bf702f3900a36fffe3b1c1fb758987b9ec7ed171c6d04409eade8c2ec5d65726798c844f84101725560c99ef812389bc139cd31563bccef4ef09abd08594381c06457cbd6e4c6eecfdc9c58d7164f26384f99774da1dfd838162aa7f1271634d22ede8219fd2940b428fefa5ec0b933c10e74db70900942eef030000000000000060fcaecb83a1c9dfab4ff4bb9fa138d69211a4b77f914876e12c98dde07f8754"], &(0x7f00000002c0)=0xd2) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r3 = socket(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/120) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x5411, &(0x7f0000000240)) 2018/06/03 22:47:32 executing program 2: link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = inotify_init() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'os2.', '!+em0^{wlan0\x00'}, &(0x7f00000005c0)=""/156, 0x9c) r2 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) inotify_rm_watch(r0, r2) recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000100)=@in={0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000440)=""/15, 0xf}], 0x5, 0x0, 0x0, 0xd0d}, 0x3) 2018/06/03 22:47:32 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2={0xff, 0x2, [], 0x1}, 0x3, 0x1, 0x2, 0x8, 0x80, 0xdf2, 0x7}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x0, 0x0) 2018/06/03 22:47:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) sendmsg$rds(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x7}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)=""/254, 0xfe}], 0x1, &(0x7f00000004c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/238, 0xee}, &(0x7f0000000480), 0x2}}], 0x30, 0x80}, 0x40) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x10, 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/249, &(0x7f0000000000)=0xf9) socket$inet(0x2, 0x80002, 0x9) 2018/06/03 22:47:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x900, &(0x7f0000000080)) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0xa000000, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x0) 2018/06/03 22:47:33 executing program 4: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200000101001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000002ffc)) 2018/06/03 22:47:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x65, 0xfffffffffffffe46) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/06/03 22:47:33 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xdad, 0x204000) ioctl(r0, 0x4, &(0x7f00000000c0)="b47dd206cfeceb5f3e64226ba6b7a53f3a18856d739b38db151fd0af70d2229d342d995977c7eacfff3b90595177353cc59436382cb47122548ccf045969e5a3e364c6c65d32316f2ef62ecbf4f8c4da7b76d7f11c3cda69c2adcc9a149223658bdcc62621939dbba7fcbac075e90f0f08c5dd7ccd2afef355788ff730a88c943b07071507c987bd1aed6bd0b90b2ae226a27c1b51b52ca638c1bc4c6287ec") r1 = socket$inet6(0xa, 0x3, 0x1) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x80000002) 2018/06/03 22:47:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) r1 = socket$kcm(0x29, 0x5, 0x0) syncfs(r1) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") listen(r0, 0x1000) socketpair(0x0, 0xe, 0xfffffffffffffffc, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$ax25(r2, &(0x7f0000000340)={0x3, {"c8cf8b220d7f70"}, 0x6}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001680)='/dev/full\x00', 0x400000, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000016c0)="40f4a4e58fcebe494281a5b7f2288a91197bf0265df5cf1cdd8b55b062950b86", 0xfffffffffffffd77) r4 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x5635}, {0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x3f}, 0x1, [0x0, 0x7b, 0x4, 0x3, 0x1ff, 0x5, 0x1, 0x4]}, 0x5c) recvmsg(r4, &(0x7f0000003700)={&(0x7f0000000100)=@ax25, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003640)=""/186, 0xba}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x513e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r5, 0x9}, &(0x7f00000001c0)=0x8) 2018/06/03 22:47:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000008f37)}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x400) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001500)={0x7, &(0x7f0000000080)=""/12, &(0x7f0000001440)=[{0x4, 0x19, 0x4, &(0x7f00000000c0)=""/25}, {0x2, 0x43, 0x9, &(0x7f0000000100)=""/67}, {0x3f, 0x6a, 0x8001, &(0x7f0000000180)=""/106}, {0x4, 0x4d, 0x9, &(0x7f0000000200)=""/77}, {0x101, 0xac, 0x0, &(0x7f0000000280)=""/172}, {0x2, 0x1000, 0x823b, &(0x7f0000000340)=""/4096}, {0x1, 0xdf, 0x18, &(0x7f0000001340)=""/223}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000bfd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x630b, 0x40106308}], 0x0, 0x0, &(0x7f0000011000)}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x1, r2) 2018/06/03 22:47:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) sched_getparam(r1, &(0x7f0000000040)) ioctl(r0, 0x440000000000127e, &(0x7f0000000140)) 2018/06/03 22:47:33 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='mime_type\x00', 0x3) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x4d, 0x8, 0x7f, 0x8}, 0x8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000640)=ANY=[@ANYBLOB="00400600000000000022ae65f450963203dd9cffffffad328e5bc37f574ef7932c16ffffdffffffff746c012e898d59afbab3288513943519db160ac6f1c64b26d49488e47f29ba2f8d6ce40d56e45adde4b7f2293c0dbd8441941a864c14e208261c6c53914a1de994ec8f31bcbb31f29cac117acdbb50667d2924f5b5a6a82a200334b4e2de3a270ae365261e269f266427bda3d38dadbf6038dbd756661c4c2bdc10774fd62c25a2d34401dd74f185007169385ea8ffe7d58259581308b580eaba6ecb3416921bf58412620d45e5f4dce6b1a676e88037b5226cc4d93080de5d410b06599bc0db32b7f0f1f"]) gettid() getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x3ff}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000005c0)={0xfffffffffffffff9, 0x9, 0x202, 0x7, 0x0, 0x4, 0x3ff, 0x2d11, r3}, &(0x7f0000000600)=0x20) r4 = getpgrp(r2) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000180)={{0x7c, 0x5, 0x0, 0x100000001, "0a291e07b0f919ece6e70e12ccc9a728305f1a0b36c2a106912d2a0881d443705deeea7cf309adaaf207256c", 0x1}, 0x0, 0x0, 0x3, r4, 0x3, 0x0, "9ac5c4a7a4a9e92910057f4debb37cd319e4001c24bbed1eb6872dbd982620e3833b4977c0648c568229c0fea4bf519d82e2ef852c43c884c52472f8b0538b32", &(0x7f0000000080)='*\x00', 0x2, [], [0xfff, 0x1f, 0xfffffffffffff801, 0x6]}) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'bcsf0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) accept$alg(r1, 0x0, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00') getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000480)={r7}, 0x8) lchown(&(0x7f0000000300)='./file0\x00', r5, r6) socket$vsock_dgram(0x28, 0x2, 0x0) [ 124.399778] binder: 8976:8981 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 124.407821] binder: 8976:8981 BC_INCREFS_DONE u0000000000000000 no match [ 124.473445] binder: 8976:8987 ERROR: BC_REGISTER_LOOPER called without request [ 124.481073] binder: 8976:8987 BC_INCREFS_DONE u0000000000000000 no match 2018/06/03 22:47:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(r0, 0x9) r2 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000003c0)={r3, 0x2, &(0x7f00000002c0)=[0x1f, 0x3], &(0x7f0000000300)=[0x7], 0x10, 0x1, 0xffffffffffff0001, &(0x7f0000000340)=[0x40], &(0x7f0000000380)=[0x9]}) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x3, 0x1, 0xfffffffffffffffa, 0xffffffff, r1}) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0x2c}, 0x1}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x40000, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e23, 0x5, @empty, 0x1000}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000140)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x20) sync_file_range(r2, 0x4, 0x1ff, 0x2) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, 0x84) 2018/06/03 22:47:33 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x7e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3c) 2018/06/03 22:47:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3a, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x11, &(0x7f0000000000)={0x0, 'syz_tun\x00'}, 0x18) getpgid(0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000300)={0x9}, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xfffffffffffffe3e) r3 = getpgrp(r2) move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000080)=[0x61f, 0x4f, 0x4, 0x6], &(0x7f00000000c0)=[0x0, 0x0], 0x2) 2018/06/03 22:47:33 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") set_robust_list(&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) sendfile(r0, r0, &(0x7f0000000000), 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) 2018/06/03 22:47:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x3, 0x8000000000004, 0x4, 0x3}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x5, 0x2, 0x1, 0xa8da}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1}, 0x8) 2018/06/03 22:47:33 executing program 6: capset(&(0x7f0000000140)={0x20071026}, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socketpair$inet(0x2, 0x7, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1000}, &(0x7f0000000080)=0x8) r3 = dup(r1) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000340)={0x6, 0x2, 0x8000, 0x401}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000003c0)={0x3, 0x0, 0x4, {r4, r5+30000000}, 0x80000001, 0x2}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x6}, &(0x7f0000000180)=0x8) listen(r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="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", 0x11c}], 0x1) 2018/06/03 22:47:33 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x7, 0x0, 0x80, 0x10001, "63856cfd26961c76ad6bce7efa90a2072dba26f91771fb2384146cfdc372f63abef399972053efb9e6c948b0", 0xff}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r2 = dup2(r0, r0) ioctl$UFFDIO_REGISTER(r2, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) readv(r0, &(0x7f00000016c0), 0xa) 2018/06/03 22:47:33 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x20, 0x80002) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x1, 0x401, 0x770, 0x9, 0x0, 0x10001, 0x12026, 0xd, 0x0, 0x8, 0xff, 0x2, 0x8, 0xffffffff, 0xcd4, 0x0, 0x6, 0x4, 0x9, 0x1, 0x1, 0x9ab, 0x80000001, 0x2, 0xad6, 0x4, 0x8000, 0x2, 0x41, 0xffffffff, 0x8, 0x80, 0x0, 0x800, 0x5, 0xe062, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x3}, 0x400, 0x7, 0x7fffffff, 0x6, 0x5, 0x7fffffff, 0x4}, r1, 0xa, r2, 0x8) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fcntl$setownex(r3, 0xf, &(0x7f00000003c0)={0x2, r1}) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0xfffffffffffffff9, 0x121000) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r5, r6) [ 125.083297] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 125.115343] capability: warning: `syz-executor6' uses deprecated v2 capabilities in a way that may be insecure 2018/06/03 22:47:34 executing program 2: r0 = socket(0x10, 0x803, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)}, 0x10) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000200)="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") ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) 2018/06/03 22:47:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa5, "c722ca7648c99ae002a7988d3db80a51ecb299ea6071cea27dec2c456c72c1a7f4bff06bf3cf2cfa5250056cad8a7b8ebdc027de2e3561a2fda501fef4de6b18b9e177ed96fe2e4d1e285d31ad1c598db434dfd5be010bcbdc741fc511693a1cada2a7a90e8394430e80ecae12745763b2c3c6b7ae9ed5a00c3d106a1e540d746bbe0bc94b0c49ef5a17c93cb710406f0d397336f35bf3e5314262adbfc95ccdae3fa68184"}, &(0x7f0000000140)=0xad) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x5}, &(0x7f00000001c0)=0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={0x3, {"8e158c694a17b9"}}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/06/03 22:47:34 executing program 3: r0 = socket(0x10, 0x803, 0x40000000000000) sendto(r0, &(0x7f0000cfefee)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 2018/06/03 22:47:34 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_emit_ethernet(0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60dcd50f000b2d00fe80000000000000c0000e00000000aafe8000000000000000000000000000aa81009078000000003a4a776ae7de0f7e6dae82ad36e6b7b487d6cb224294b74bcf6a961ee6d08d169fb8df54c8d71cb96e95f3b3ad60dff183130e47339a2d790b77ffdc2790e6adf5c9e999108a1936ed8e5cbd9a597f2bfeffbf28c515c0b6caaec9370f7278a066bc0931f7040152224682"], &(0x7f0000000000)) [ 125.130444] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/06/03 22:47:34 executing program 7: r0 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="380100001000130700000000000000000000000000000000000000800000000000000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001007f00000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}, 0x1}, 0x0) 2018/06/03 22:47:34 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x105100) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=0x20000005) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"643071300000000000000020001600", 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@dev}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) sendmsg$nl_route(r1, &(0x7f0000001400)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="86671c0000005e0015020000000000000000796ce2fa", @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00'], 0x1c}, 0x1}, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xf3a, 0x200000) 2018/06/03 22:47:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x2001f, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) mbind(&(0x7f0000263000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x3ff, 0x100000000, 0x4) 2018/06/03 22:47:34 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'%route\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200010c0], 0x0, &(0x7f0000000000), &(0x7f00000010c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x2a8, 0x2a8, 0x2f0, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) socket$inet_sctp(0x2, 0x0, 0x84) 2018/06/03 22:47:34 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='-5', 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x9, 0x4) sendfile(r0, r0, &(0x7f0000000040), 0x1) 2018/06/03 22:47:34 executing program 6: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x1, 0x0, 0x5, 0xc9e, 0x7deb, "b4928b48fd0584fd9691edfff8ae92f95a93c06d56792415418e7d6642a5fb62025fffd28088b6edcda124bd061b1af63f3f5813b59757292b602db8234a40", 0x3c}, 0x60) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) recvfrom$ax25(r1, &(0x7f0000000100)=""/175, 0xaf, 0x2102, &(0x7f0000000040)={0x3, {"7eabd46c905e56"}, 0x4}, 0x10) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x2, 0x0, 0x0, 0x2b7, 0x0, "f54be9454601fe8c9078712fc73636e95d8f8054d0a1d02ad2e85882d7c2611059ca1f003065afa7d54467dbc3679ca8fed304fcfe0e805db06e37b2666636"}, 0x60) 2018/06/03 22:47:34 executing program 7: socket$kcm(0x29, 0x200000000002, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x3, 'wrr\x00', 0x16, 0x0, 0x2d}, 0xfffffffffffffff6) 2018/06/03 22:47:34 executing program 5: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000280)=""/247, 0xf7, 0x2, &(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x900}, 0x80) r1 = socket(0x800000001b, 0x802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3018000000946f614e69befb9c0c238450e39167200af5f66ac8873ca60000e68c5db200000000d29a607bbf2d7733a1d4a2", @ANYRES32=r3, @ANYBLOB="0000000000000000100016760c000100080003004f96ef7e492842a0dac8afedc6be909a2682b6dee6516299ec430cc357c1bdbc", @ANYRES32=0x0], 0x30}, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x81, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000140)=""/9) socket$can_raw(0x1d, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4400) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f00000001c0)) 2018/06/03 22:47:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58) r1 = socket(0x2, 0x1, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0xa000, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x40, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000100)={0x5, 0x401}) close(r0) 2018/06/03 22:47:34 executing program 7: syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0x2000400) inotify_init1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000f33fc0)={0xbffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/06/03 22:47:34 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000000, 0x400000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/06/03 22:47:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0xfffffffffffffffd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x71) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x40}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={r3, 0x7, 0x3, 0x100000001, 0x40, 0x7, 0x6, 0x100000000, {r4, @in6={{0xa, 0x4e23, 0x7, @loopback={0x0, 0x1}, 0x1}}, 0x480, 0xffffffffffff8001, 0x7, 0x85, 0x6}}, &(0x7f0000000340)=0xb0) 2018/06/03 22:47:34 executing program 2: r0 = socket(0x10, 0x803, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)}, 0x10) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000200)="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") ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) 2018/06/03 22:47:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='gretap0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x5, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x40}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x5}, &(0x7f00000002c0)=0x8) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="0f20e035000001000f22e0c4e3ed7c2efd0f01d1360f236e0f01cb670f017a002e0f01d10f098fe808eed6079a30000000b200", 0x33}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/03 22:47:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) userfaultfd(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x802, 0x0) 2018/06/03 22:47:34 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000140)=""/170, &(0x7f0000000000)=0xaa) sendto$inet6(r1, &(0x7f0000001040), 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x8) 2018/06/03 22:47:34 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x200000, 0x0) r1 = socket$inet6(0xa, 0x1000000000006, 0x3) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x248004, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{0x1, 0x7fff}, 'port0\x00', 0x14, 0x1, 0x101, 0x4e, 0x9, 0x8, 0x6, 0x0, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') mmap(&(0x7f0000090000/0x3000)=nil, 0x3000, 0x2000005, 0x4d031, r1, 0x0) pread64(r3, &(0x7f0000e3e000)=""/8, 0x20e3e008, 0x100800) 2018/06/03 22:47:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) gettid() bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x22, &(0x7f0000000600)=ANY=[@ANYBLOB="8d0081b327201e183aa6196d1c9a3bfd000000af010000000000000026bc54ac8bbe9e46a4de2422a99db5d1e758e2960e91b54cf15a803b2c89c6bd4e6fd2ee96dd50c88369ca81df37682e1c7affb8581e67b3e5b6faffffff9012c78601ad0a34d82986584c677466d660585277faa1c83c774a5f98061ffb2ca1c2cdf2c511bd0d69fb8d2149a91ded37e783efdd244a1101d3f8f992fafe262036e501040000000000002cb27ebee797a4cdad354c415fb9c0727cc9dd6c7b308d8b9ac90dbcd71c8ef20ae0a973d4a33445824caec6f58399660fb270c3c88df63d5a85c3f7d3ddf48595f011932da5c08164d5be3b8be6c21a68cd46775beebdacd9a810ff66e91624335decd182f574955705e6"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0xf, 0x1, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timerfd_create(0x908953949293c7e1, 0x80000) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x9}, 0xfffffffffffffcb7) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0, 0x200}, 0xfffffffffffffd11) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) rt_sigprocmask(0x0, &(0x7f0000000000)={0x4}, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x20000005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x13}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0x7, 0x4) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) ioctl$void(r1, 0xc0045c77) r3 = socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2, 0x880000000000041}, 0x20) r4 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7, 0x80000) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000300)=""/71) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x3f}, &(0x7f0000000480)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r5, r5, &(0x7f00000000c0)=0x202, 0xdd) 2018/06/03 22:47:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0xfffffffffffffffd}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x71) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x40}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={r3, 0x7, 0x3, 0x100000001, 0x40, 0x7, 0x6, 0x100000000, {r4, @in6={{0xa, 0x4e23, 0x7, @loopback={0x0, 0x1}, 0x1}}, 0x480, 0xffffffffffff8001, 0x7, 0x85, 0x6}}, &(0x7f0000000340)=0xb0) 2018/06/03 22:47:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000004b40), 0x0, &(0x7f0000000000)}}], 0x1, 0x20004bc0) [ 125.860667] IPVS: length: 39 != 8 2018/06/03 22:47:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/06/03 22:47:34 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x30, 0x200400) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x0, r0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x9000, r1, 0x0, 0xbd, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4002, 0x0, r2, 0xffffffffffffe680, 0x80) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000380)=0x1, &(0x7f00000003c0)=0x4) umount2(&(0x7f0000000140)='./file0\x00', 0x9) execve(&(0x7f0000001280)='./file0\x00', &(0x7f0000001400), &(0x7f0000001680)) socket$inet6_sctp(0xa, 0x5, 0x84) 2018/06/03 22:47:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x404480, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) 2018/06/03 22:47:34 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/cuse\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000680)={0x81, 0xa3c7, 0x550, 0x6}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000006c0)={'IDLETIMER\x00'}, &(0x7f0000000700)=0x1e) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=""/65, &(0x7f0000000400)=""/64, &(0x7f0000000440)=""/199}) [ 125.993472] IPVS: length: 39 != 8 [ 126.018066] FAT-fs (loop5): bogus number of reserved sectors [ 126.023998] FAT-fs (loop5): Can't find a valid FAT filesystem 2018/06/03 22:47:35 executing program 7: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) write$cgroup_pid(r2, &(0x7f0000000100)={[0x0]}, 0x1) read(r1, &(0x7f0000000280)=""/126, 0x42) write$cgroup_pid(r2, &(0x7f0000000000)={[0x38, 0x35, 0x33, 0x30]}, 0x4) dup2(r1, r3) 2018/06/03 22:47:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xbbf5, 0x0, 0x0, 0x1}, 0xffffff45) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x1}, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbff, {0xa}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x470}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4) open_by_handle_at(r0, &(0x7f0000000000)={0xf, 0x2}, 0x0) 2018/06/03 22:47:35 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x103000) bind$llc(r1, &(0x7f0000000100)={0x1a, 0x4, 0xff, 0xfff, 0x8001, 0x800, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) pipe(&(0x7f0000000200)) ioctl$KVM_ENABLE_CAP(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000380)={0xad, "6dc05d586e19f2cb7e88f84ba86df6e54a3ff49be1efaf1e525b7c301ca0e3fc5cd95b49b27fa19d2b819a56eadfea38a072f51b5695bbaa6add8f998c58acae0493f9a79978547da1fdc066cfe7e574a674ebede05dda689d98683842c43cb599744a69e0ede645e19178d70f8af01a413320f9024dcde9c83007b36d58d98582478453911371612d70ac2ddb9a57125b68ae5a5b7be72ab9d55651745bcad2ab294d991807ba9d608d9f4ba8"}) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x9, 0xec, &(0x7f0000000180)="c9dcc24946e382a861", &(0x7f0000000280)=""/236, 0x3}, 0x28) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000440)=0x100000000, 0x4) 2018/06/03 22:47:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000769f0f)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000497ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) recvmsg(r0, &(0x7f00001fcfe4)={&(0x7f00005bfff0)=@can, 0x10, &(0x7f0000e48fd0)=[{&(0x7f00009b4f9f)=""/97, 0x61}], 0x1, &(0x7f0000c29000)=""/4096, 0x1000}, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) accept$alg(r2, 0x0, 0x0) sendmmsg(r0, &(0x7f00009b2ed4)=[{{&(0x7f0000a5bfda)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000ee1fd0)=[{&(0x7f0000652000)="5aa0", 0x2}], 0x1, &(0x7f0000b645c7)}}], 0x1, 0x3) [ 126.147591] FAT-fs (loop5): Unrecognized mount option "fusectl" or missing value [ 126.491297] device bridge_slave_1 left promiscuous mode [ 126.497639] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.514497] device bridge_slave_0 left promiscuous mode [ 126.520147] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.564000] team0 (unregistering): Port device team_slave_1 removed [ 126.575260] team0 (unregistering): Port device team_slave_0 removed [ 126.588914] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 126.609839] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 126.642199] bond0 (unregistering): Released all slaves 2018/06/03 22:47:35 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xec, r1, 0x10, 0x70bd26, 0x25dfdbfe, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x30}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000003c0)=0x4) 2018/06/03 22:47:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/06/03 22:47:35 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x5, 0x4) r2 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x40002) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000300)={0x7, 0x2, 0x80000000, 0x4, 0x4f3, 0x1}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x4e20, 0x3c5, @loopback={0x0, 0x1}, 0x5}}}, 0x88) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r1, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x101a00, 0x0) recvfrom$unix(r3, &(0x7f0000000200)=""/46, 0x1d, 0x101, 0x0, 0xfffffffffffffe03) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000280)=0x68) 2018/06/03 22:47:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/06/03 22:47:35 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b300000000000000e6000000000000000000000000000000", 0x20) ioctl$sock_ifreq(r0, 0x897f, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@ethernet={0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000640)=0xe8) setreuid(r2, r3) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000047c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000018c0)="f9999c1192ad6e81630a3237b66ddcfea3263c332ffa500f4dfbec09357fcd89676176f26cdf47b46265999180448838", 0x30}], 0x1, &(0x7f0000000140)}], 0x1, 0x0) r5 = memfd_create(&(0x7f0000000080)='bridge_slave_0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000280)={r6, 0x78, "a896843dc5902be0729af47d9c2a4300f931e5b4c5b9125d602037a7c6b53e129e19b9aa317239e2d9c409f62190c340af4f8326715b612f87495a8a8d8b507616592db1fd87feef8787185f27c95259e2871ef7b0a827f069fa4ce58110bb6852701db0ee1ac7328e29406a0dadf9124491a99e1494472a"}, &(0x7f0000000380)=0x80) accept$alg(r1, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/105, 0x200001e9}], 0x1, &(0x7f0000002940)=""/4096, 0x1000}, 0x0) r7 = fcntl$dupfd(r4, 0x406, r1) ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f00000003c0)={r0, 0x3}) 2018/06/03 22:47:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x40000) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8936, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x002\x005\x00', @ifru_settings}) 2018/06/03 22:47:35 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x400005, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffff00, 0x400082) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$int_out(r0, 0x5460, &(0x7f0000000100)) 2018/06/03 22:47:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) fcntl$setstatus(r0, 0x4, 0x42800) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000000140)="782bcb3b0f8aa2b0b566a4653ab17b5cf7177acfb6912b367b532b78efc84b4894f41ef204dc09b086905071b51a5d96a0b8e7fa7aba6da655a4d122d26d042de906d89b3b50faa19918ec32304e9d9512976a8e660b5871c1a03be4a8630dd07e2e217e377c86fa6b5462dee322c0e6485cb7a7c61d27e7310087b44ea0b478e94b0e85b42a826f76bd6204bf", 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x0, 0x5}) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000240)=0x20000ec14) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000200)={0x4, [0x1, 0x0, 0x10001, 0x10792000000000]}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x200101) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000280)={0x0, 0x4, 0x6, {}, 0xce, 0xc85}) [ 127.136618] FAT-fs (loop6): bogus number of reserved sectors [ 127.142781] FAT-fs (loop6): Can't find a valid FAT filesystem [ 128.303505] device bridge_slave_1 left promiscuous mode [ 128.309181] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.321183] device bridge_slave_0 left promiscuous mode [ 128.326791] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.348202] device bridge_slave_1 left promiscuous mode [ 128.353740] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.364702] device bridge_slave_0 left promiscuous mode [ 128.370291] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.423820] team0 (unregistering): Port device team_slave_1 removed [ 128.435574] team0 (unregistering): Port device team_slave_0 removed [ 128.445987] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 128.461439] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 128.488616] bond0 (unregistering): Released all slaves [ 128.508522] team0 (unregistering): Port device team_slave_1 removed [ 128.518761] team0 (unregistering): Port device team_slave_0 removed [ 128.529376] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 128.546417] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 128.575984] bond0 (unregistering): Released all slaves [ 129.116564] IPVS: ftp: loaded support on port[0] = 21 [ 129.691609] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.698087] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.705320] device bridge_slave_0 entered promiscuous mode [ 129.732351] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.738970] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.746953] device bridge_slave_1 entered promiscuous mode [ 129.772048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.798439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.871743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 129.901487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.014756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 130.021955] team0: Port device team_slave_0 added [ 130.049106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 130.058754] team0: Port device team_slave_1 added [ 130.086290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.114359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.142907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.172733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.421830] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.428255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.434919] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.441340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.374948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.463844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 131.553626] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.559876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.567555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.653515] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/03 22:47:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xd03, 0x400) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='M']}) close(r2) close(r1) 2018/06/03 22:47:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @quote={{}, 0x0, &(0x7f0000000040)={0x66d3, 0x0, 0x0, 0x0, @tick, {}, {}, @control}}}], 0x30) [ 132.190433] FAT-fs (loop5): bogus number of reserved sectors [ 132.196427] FAT-fs (loop5): Can't find a valid FAT filesystem 2018/06/03 22:47:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20000, 0x0) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000180)=@ax25={0x3, {"5ef33cd650ff30"}, 0x8a18}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)="cff47041ea3c14e50746a24bd82bd51f2642a3390e2ee0c30c705b6194a3003f27ac10e5083b262e7c9a3c18496405093ece29ebe4b879a99f50325e3e475e83d9643b3e010a4b5783ec590c546da3e9e1db8458728f5d85eedff890607b590b0d59daec90f4e34587bef6ed1a88480d27ae11246ea51faac605103ce1d07851b0e5b883d685ffb95a1ba66d08dcde7e198050add4d05d9207b6fcca001d3838f7c240670b23dcee5c89324ba19175a01bfbf094defd8a5003e4a38ce08538fac95555808c8139c4d08927919439a0e88a5fe633c40daf09fe", 0xd9}, {&(0x7f0000000600)="1168cf5aa7f1d51429958085a3042cf65923caef6b10fe8dbe32afe9012604f75f9747c0c5af4608470332d15ad89ccb12e479cac06bb18c18f87ecb5bd709600f27913f0c1ef0008e2d35de98200ef5e5b90303cdea7ca82850cc56bcb4df52af9c879a7486abaf4cc80d50a7b85a24c2043474e144e4fc17707e1f2bb753ea46a999b8ee898c2c3ed2d3d70b238e6c27933de0abeebe21f83b6f582d798974d50893c899deecfd486d8ceb61327d58a359fb871d34adc0a2fad0a99d44fb55aca168b93eb0", 0xc6}], 0x2, &(0x7f0000000700)=[{0x58, 0x117, 0x28d, "160eb46189a09cc56e148b2563d6bacb41c48c7a951b1b3fe9754563a1c6e75e62bb857bb2560f714df34153c6986ef849b641fdc2adb86ede529e8cc07d7003278717"}, {0x50, 0x113, 0x400, "4648d3feb3483786cc14f081f25836c667fb6cc7596e67cebdd026c14af01a5f6bdc6c4ef705f645c0e149bdd8b82b8837fc66dde4abaed1e0"}, {0x58, 0xe6d82327256c53fb, 0xffffffff, "917b040321cffa7ad74ad6aae0cb00a06a78c84a44a0d90d44d5b526e653846426715a9ec3717fb8de312dc63b6cb396e37b7fef00cb947d0858ffa42934629ed4c8b5a1"}, {0xf8, 0x116, 0x0, "00e6358ab264db96ebb77e618170ebc2ad46282c8a9d08aa1945529a1934a49820d5d7a136af19c68de55a2b38c151d40bf2f9e9479689dff65d994c12e7de3ae6e336409b2b5821b9ed9713867e6a35e8ba3fd6cdfc7c7929d1c06c47e81ccc1913d40579a9836efb8ad78382bed70f4a64058b165a638a6190dd2a1a29db26d188034c1b2a58f576b9ec218c1be887ee001d3ef1f64e645f61327b7a469fa17afe0104210bd24918177fa9019c6092e66287b0dbc839fa0997922441c1a1cb4745886b9573649a698fbf2a1e531eae139d5a790743db2fbd6a9979f561cd1e651f"}, {0x88, 0x11f, 0x1, "4b4bb7f17164a903ce6267840128f4f68b1e52b31a653d45d58223b21754a0ef508eeee5d726e0cb5f98c3457e885b41cc72df7f74e4b243d234dc274672776bf7e1fa2fa2d7ad046d9149ea5ab98c44631f7372bc6c9273bff677390f2f4cc7d24568bef3cfb11d410bccc04721650591"}, {0xa0, 0x13b, 0x5000000000000000, "8de0bb0ebe1969bee8c6d5e6c3aceda528dcc9781586f3b3e5e66b9fb34b1d1e675b13ce3ad95bb308eb7ea30d69b3744e634341a6b328cae9728f55e378c1aebd8fea24e8a5d7fd1a05c3e8a915efb0c8c399543719b7cc6b89959f7f907c0e37aa63e58cc1c685911abfe50881042936d76a9c79ae84f9e4d2ce1c166b1626fc101c269e0edc140ecc"}], 0x320}, 0x68}, {{&(0x7f0000000a40)=@generic={0x16, "9957b73b3438bfadcdfa5df720a090bb07b72f1bc7b9d8a46d786b64dce0a5f3e4391e385632fcb1650aed81df2a02db5d7a1ea3a2428176ea488e83edefe237e729137ba7a010c65e7e11f23033fd5cf8cd9a8aba689ca28c3cac0aceab2dbee221dacdc263357d29a55d059b6af56da03aa7a649f41945a280399ae0d8"}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000002c0)="3cb1bcc0d5afd2059ac3215183e98cb94ac07dccbbd2ede2327320665e4d3f8071cadc6c1266206fb3053fa968b77d3b5840fee6af", 0x35}, {&(0x7f00000004c0)="5abcf2140e4cafa0050a2c4dfae41444d1f646b0662882dc9839909fda9f79e252a179a2ade625c0f5", 0x29}, {&(0x7f0000000ac0)="3ccafeab2afe3f8373491b176f3731ce5a343e1eb7ddb16f5e7ffb60ccd5e5d1c4baa4633d5256ebe9e0c905a5b20dbc51a4c3f8eacb20180b0bbdfb09c34b925ed93153519acf468acafcc0e122b6a3e48d07bed38097c6e2f22a76bacccedec7a671a4e8faeb718379780d35eb028e51c07c23347975d3b1e281c1ec42cff47b551a01", 0x84}, {&(0x7f0000000b80)="0bc5074b9b1e0d3d57058c11959711a46f18d471934bf09c431154aab685622ffc3ac6de44f73008f2a944307fcb260b15c90fe923c8524aac1a719a0dc69eae2a53d825f7b6d111a41ae8bf4f22d7d8dd2d9a5d75d3420b1b144fbc00187f112091d8d8bb3a55c9e2d4a46381d8c829b861e563b145a144f44c5edab3fa2deb3d1f1db017999a0e5863c5e27d27761371ced956c1dcc62cc71cf343da161cd2e274580794eb1095997e26fbd35b2fa8dceb8a68704613dd5c70a1de668a7d7ce6e0fd138cc1253f9bb52fd888b64c366c9e63a13512e6dd33d2ca829ce3d3e14c2f5fba0f2493", 0xe7}], 0x4, &(0x7f0000000cc0)=[{0x10, 0x139, 0xeaa9b81}, {0x108, 0x103, 0x2, "52723dc9a372ebbb352dbe6fd85370a1e7f08e02475c8f5cbe0d46fd1b92f1f7ff746ea96abae6b4962b2d70abbd8028b5c17cdf591b6d50e4414629a51d08fa42e680c020e536d4da37af53db5a34228453b699f2ec72dd4cf4cc4b7c36e2c80553e2747cb2c25d43d545baff4abb71b095516f927a9e957a1254de62edd9b2684d3effeb04711819aca1dd605f5e857bfd571a0bd835cfd8499d972919b177420e3f171e6dc502a2030370d8c4f783a5b735f01bc2e7790a10172d25ee8c52b2eb4ddf4c6dfc4b415849dc1ff5898ee3394cb744c3d77f2e83b2b58cbadfe77eb9a54a18ac8e0709a153c18451abae5b1bdc"}, {0x78, 0x10f, 0x20, "be045a47b449f4e286826af51147e278b04d7b001436d1c4ec887f583e1ede3a9da8d1b1b9eb401d637de0c694e275e422752e3b7748828d253b14275b1c40f9a1c2f667e1e76d2ecc0775bf9f78ceea7b04d2c29014608befdb96975ea0627fbda260f3"}, {0x70, 0x0, 0x5964, "51437eb78e076d14c93874b7391099b6a8c559613bbece14463960f42cfdc2d631a088ab06760c26e04a5007b338837d32cf69be25c1f51ffa20767456b40eec15504b3232bc8203ba821490699ccf3fdf0cfed3f0674bfbe3d841"}, {0x50, 0x116, 0xfffffffffffffffd, "86351a3e1339a67dd35b10a889bafc55f9c6265a9336a95b7fd212349fd1e21fbd26a4f9aab242462c7293f849550deb2aa5b27ca86bd5051837a425"}], 0x250, 0x20000040}, 0x9}, {{&(0x7f0000000f40)=@nfc={0x27, 0x0, 0x2, 0x6}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000fc0)="8bb6c3b94751c213c3422ff3470981d1f6341a4ca8754640df1240ae3669830a1faaf7aef6f8a4960c6b215cb8ce76347bd095b9ae4a6febce41496f4ca5a84f80543791b8e12204ac8d0ac9c9faae399d429d994139e3313761c55b32871e75ce8ca30f5b6fde7dfc2740a956f1c06de2da5043d53425ab3bd6bcd733cbc15530020ee9ec469dac571fb962ce89cdfdf59000574875815e4bdb4d64904e9f797185e15d50c13b2ebf393c3d41f7789645b1e583a019e69478c48e37fd97de34467862039aec23e0d7d1d544e8729d3fd73742d4e59096ea9c7d4f6a783747347a72546625", 0xe5}, {&(0x7f00000010c0)="933ece5a5622e465a4a0702c2c92ed1fdc6480282f522ab77e734a942dff586170a5c4003814faa75b7393bf650d09d614be729d4bd04182a42b30c415497e06634243d045087e1eccfe02307919eb09", 0x50}, {&(0x7f0000001140)="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", 0x1000}], 0x3, &(0x7f0000002180)=[{0x88, 0x115, 0xe2d0, "3a55fb19a52f135ed132e0362674b937f64f1a9e103cfad48be3ef1bb28e443044d3104b6e129d11b22f555c762e57261bd9b140efb70a9eb82472345915cbb88c9826eb831c91a5b63c5b7607b5018201cca4a1e8fa8201b05752e4543359b61406e87d3142f45aa2b413c8984ddc5b4b89da11343c2c"}, {0xe0, 0x13f, 0x7e90ed68, "e977be8aeea2389f8741d9524f41e57ee4844c8c001ac22f1764dab3022bac403364d6de870436a0e144f880b720fcdc08bb6dae8768710d1aa029e13bbc53adb7a0324381960be8d8c685bc05e1a7de50af3bd013c49917bb335206a1203c517c9f9846d69c3ccd79f1ee7672bead35838b6d2770d04cb349c8c444f8ecab07e315762dd3a8ffe3e8ccd16060ffaef7cced2cfe366a6601cea20de80a8f576aaa8f0aa9adeb72e01f6bcb59071ffa54d07ea44cfb9f878a35f7b8729c8fe9c11184619b5f0d1a2a3d"}, {0xd0, 0x10d, 0x8, "11591e64c352d523bdc10567f81b7484a699308b3771c0436358e0267264785b7ac60d0400c333af79d430de968f98cfb8e3311d76cccdd201c35c935d38c19f9c9dad64b35775d5bc25b7732bfaa8025be330bf1826db14508d793541ebceeadb14125ee51fdae0506ead3783cfa3debe28fdbd0cc0660a36c987c04614e2038152abc34c79bf8c4eecc13a05cf064468d0d36c7d10125935b44d71df20b707ca0e0d25f0f1de9b8960027c7679edf46ad70fe9140c3cd78a4db22a98bd2a5d"}], 0x238, 0x20040000}, 0x7fff}], 0x3, 0x20008001) 2018/06/03 22:47:41 executing program 7: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10, &(0x7f0000000240)=""/225, &(0x7f0000000340)=0xe1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x0) getsockopt(r0, 0x81, 0x7fffffff, &(0x7f00000001c0)=""/51, &(0x7f0000000200)=0x33) bind(r1, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000040)={0x2, 0xfffffffffffffff7, 0x3, 0x4}) 2018/06/03 22:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x9, 0x0, "c66adaae4c53e299239146627363e4ec5146d2ea8d793785367a80bfcd27eef1cfe2049330d9855612e3ddb9", 0x8}) eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3}) dup2(r1, r2) 2018/06/03 22:47:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/06/03 22:47:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x9, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x40) name_to_handle_at(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="7300000001f0ffffafecd90d91d953749b411d101065089b420d9f96fbdb28c7971385dc99b9f0d175b70eb9c2f1ba404da353bd7755b26c529125300e77e7d668c46c6eb98f96601eb3a740c400b70889c3caf9d58466562ccc4a834e90bab1f3392cb689de78a1f4134278b0eb4b3106fc3a7a6a432253"], &(0x7f0000000200), 0x1000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) recvfrom$packet(r2, &(0x7f0000000500)=""/26, 0x1a, 0xc1cbf6ce37aefc7e, &(0x7f0000000800)={0x11, 0xf8, r3, 0x1, 0x2, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) r4 = socket$inet6(0xa, 0x1000000000002, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000540)={0xff, @multicast2=0xe0000002, 0x4e23, 0x4, 'none\x00', 0x0, 0x90, 0x3e}, 0x2c) r5 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e20, 0x7fa, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c) sched_setaffinity(r6, 0x8, &(0x7f0000000300)) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x7530}}, &(0x7f00000004c0)) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shutdown(r0, 0x0) dup2(r5, r0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x78) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000180)) 2018/06/03 22:47:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xb75, @empty, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000000)=[{r2}, {r2}, {r2, 0x20b}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) 2018/06/03 22:47:41 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0x0]) getgroups(0x6, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x6000, r1, r2, 0x4, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x1, 0x401) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000280)=""/131) 2018/06/03 22:47:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$void(0x3f) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="66ba4100b800000000ef0f150366b811018ed866ba200066edc4c17d519e070000000f01b90a000000f39bc7442400835c0000c744240285105082c7442406000000000f011424f083a508000000a50f01c8", 0x52}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/03 22:47:41 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"00000000000000002300f8a102bc0e00", 0x4032}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) 2018/06/03 22:47:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x4004743b, &(0x7f0000d1df52)=""/174) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$TCSBRKP(r0, 0x5425, 0x9) 2018/06/03 22:47:41 executing program 5: r0 = socket$kcm(0x29, 0x100007, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x40042409, &(0x7f0000000040)) close(r1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockname$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) migrate_pages(r4, 0x2, &(0x7f0000000140)=0xfffffffffffffffe, &(0x7f0000000180)=0x10000) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 132.574668] IPVS: ftp: loaded support on port[0] = 21 [ 132.587637] device bridge_slave_1 left promiscuous mode [ 132.593296] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.651969] device bridge_slave_0 left promiscuous mode [ 132.657633] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.784737] team0 (unregistering): Port device team_slave_1 removed [ 132.813262] team0 (unregistering): Port device team_slave_0 removed [ 132.850043] IPVS: ftp: loaded support on port[0] = 21 [ 132.855502] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 132.881488] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 132.950696] bond0 (unregistering): Released all slaves [ 134.113227] IPVS: ftp: loaded support on port[0] = 21 [ 134.230444] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.236894] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.244648] device bridge_slave_0 entered promiscuous mode [ 134.309069] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.315527] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.323453] device bridge_slave_0 entered promiscuous mode [ 134.331163] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.337623] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.360954] device bridge_slave_1 entered promiscuous mode [ 134.370451] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.376920] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.385882] device bridge_slave_1 entered promiscuous mode [ 134.427169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 134.459104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 134.514755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 134.528670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 134.716708] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.746736] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.792549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.832502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.037447] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.048791] team0: Port device team_slave_0 added [ 135.107135] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.114978] team0: Port device team_slave_1 added [ 135.122654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.135812] team0: Port device team_slave_0 added [ 135.150339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.166321] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.172801] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.186436] device bridge_slave_0 entered promiscuous mode [ 135.197540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.213313] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.221568] team0: Port device team_slave_1 added [ 135.240499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.248474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.261679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.272790] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.279263] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.287129] device bridge_slave_1 entered promiscuous mode [ 135.298943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.314311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.321562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.334658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.350877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.367332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.398566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.406192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.414997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.432749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.486426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.493687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.502321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.577265] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.615458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.879489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.887089] team0: Port device team_slave_0 added [ 135.936406] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.944828] team0: Port device team_slave_1 added [ 135.983770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.998726] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.005188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.011944] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.018354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.026811] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.035095] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.041518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.048214] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.054643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.062468] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.073323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.131185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.138485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.147492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.188523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.195809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.215178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.407647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.415768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.769790] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.776238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.782950] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.789367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.796758] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.439152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.073847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.126569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.247740] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.324653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.446225] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.452538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.465385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.530112] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.536447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.544342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.655851] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.728970] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.860564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.023209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.185185] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.191549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.200188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.392636] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.201414] FAT-fs (loop6): bogus number of reserved sectors [ 140.207389] FAT-fs (loop6): Can't find a valid FAT filesystem [ 140.403318] device bridge_slave_1 left promiscuous mode [ 140.408928] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.420675] device bridge_slave_0 left promiscuous mode [ 140.426266] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.461412] team0 (unregistering): Port device team_slave_1 removed [ 140.471610] team0 (unregistering): Port device team_slave_0 removed [ 140.483426] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 140.500116] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 140.529276] bond0 (unregistering): Released all slaves 2018/06/03 22:47:49 executing program 1: r0 = memfd_create(&(0x7f0000000300)="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", 0x2) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getresgid(&(0x7f0000000100)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) fchown(r0, 0x0, r2) fremovexattr(r0, &(0x7f0000000180)=@known='security.ima\x00') clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/06/03 22:47:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200008914, &(0x7f0000000040)="000000000000000000000001b870ea183d4969d06ff3418cfeda38aa45279dec6f1a5b062f43466881894cd0ffc4d208b5a77715448d29428930") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x3c}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000200)=""/195, 0x41100}, 0x48) 2018/06/03 22:47:49 executing program 7: r0 = socket$kcm(0x29, 0x8802, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000280)=0x2) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x83}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r2, 0x526}, &(0x7f00000004c0)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x8000000000, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x12, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000002c0)) 2018/06/03 22:47:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x12, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}}, &(0x7f0000000400)=0x84) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) faccessat(r1, &(0x7f0000000440)='./file0\x00', 0x80, 0x800) sendto$inet6(r0, &(0x7f0000000300)="040300000309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406", 0x36, 0x0, &(0x7f0000000040)={0xa, 0x800, 0x5, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r3 = accept(r0, &(0x7f0000000080)=@pppol2tpv3, &(0x7f0000000280)=0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x2}, @in6={0xa, 0x4e22, 0x7820, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x13, 0x9, 0xa, 0x83, 0x206, 0x1000, 0x8f5, 0xffffffff00000000, r4}, &(0x7f0000000200)=0x20) 2018/06/03 22:47:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab8010000802435344c7898cd994672", 0x11, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x0) 2018/06/03 22:47:49 executing program 5: r0 = socket$inet(0x2, 0x1, 0x8) getsockopt(r0, 0x0, 0xce, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0xcb) 2018/06/03 22:47:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/06/03 22:47:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000004, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0xffffff8000000000, 0x9, 0x643, 0x8}) ioctl$BLKROGET(r1, 0x80081272, &(0x7f00000000c0)) 2018/06/03 22:47:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r1, 0x0) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x0, 0x0, 0xeb96) 2018/06/03 22:47:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x440800, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4) sendto$inet(r0, &(0x7f0000000180)="01", 0x1, 0x0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xeffdffff00000000, 0x0, 0x0, 0x0) 2018/06/03 22:47:49 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4d6002, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) socket$key(0xf, 0x3, 0x2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/06/03 22:47:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x80) 2018/06/03 22:47:49 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1000003e4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, r1, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x3, 0x7, 0x1}) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000240)) 2018/06/03 22:47:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f00000011c0)) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000000)="dbb7095046320e50c623767c3145cc04451c1df6884298a285b2e6cd79e24146721e3eec9c034f111c6e703d836c53093979fd68ade3840f3f7d8886889dbf70d5d595651bc51c4fe3176488702543a260c2e804720a206f77e0dba17a4921a861797a56620f5f6a339ae258e85272721a98feaafa0909a862ed23ef2ba97a66537041449037712fdeb95b17aa342a773752fc539e295105a2174d5c0bb61dc1003a632915b52c88b2e84f3e118d0e488a21ebbf40ba3399e8924a26231ccca19d9964389698dbc7dba3d5e3b9126a51a5535865dd93e869eb9c521a6b42aeca1ea34eb396bb23f2469d86570606ef66edcca91add4d05bb") 2018/06/03 22:47:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f000000a000)=0x4, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000080)) [ 142.602879] IPVS: ftp: loaded support on port[0] = 21 [ 142.976527] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.982960] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.990191] device bridge_slave_0 entered promiscuous mode [ 143.016452] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.023088] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.030293] device bridge_slave_1 entered promiscuous mode [ 143.056296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.082385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.154194] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.182892] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.294337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.302139] team0: Port device team_slave_0 added [ 143.326173] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.333759] team0: Port device team_slave_1 added [ 143.359137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.386254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.413486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.441617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.692114] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.698554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.705290] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.711702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.595967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.682371] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.768466] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.774700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.782671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.862699] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/03 22:47:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000100), &(0x7f0000000080)=0x3c5) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x404880, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) 2018/06/03 22:47:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000140)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 2018/06/03 22:47:54 executing program 7: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xdf5f1ed70b2a0bc1, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x80) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)='U', 0x1}], 0x1) close(r0) 2018/06/03 22:47:54 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000001000000000000009cb702d8fc5f2d3ab56262d6df21f61150b75c3582895368371c7d3427487be733b0eac0e264247407fee752968246a98d03f07382d65226ff1c40032da4dbbf0eb8dcd57526cc04d49be8fb218afd8dcd284f1ab4f17635b271522c9eafa3c9d4db6022dcf7195905b430e249d5837a78d8a121867a4bcf283e3bd4a83ad8a976be961159a261ebb035012702bc77a9c57a866d21e5"]}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0) getsockname$netrom(r2, &(0x7f00000000c0)=@full, &(0x7f0000000140)=0x48) 2018/06/03 22:47:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000780)={0x2, 0x8, 0x81, 0xfffffffffffffffb, 0x1000, 0xc1d8}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='../file0\x00', 0x8, 0x6, &(0x7f0000000640)=[{&(0x7f0000000340)="b4d5e400a990c2a7c30cc42b29a9348dc821488fcb5fbdfcd178660f04385ed28c7eeaaca507104d8a0499b0e3539a3864dba1691b389b03c45754271d3dfe74a691d551b85be55fecaf9110f2f2c24a7bffb1d27e3e98c3c21a3615274aad7eb920fed9ae7f82ca4b6437c7eb41b5f201bb76b9748d1f3c4f083a8e95b84959e912fd6a935bf9e8f861f9fd060bcdb40cd1eca9333b42a814cbae7aed65ca3431c90681a5a9395dc95fe7f369dc8e6e0bf8bbfb0314f78e6eb2de9b8445f093626dbc", 0xc3, 0x4}, {&(0x7f00000001c0)="9f2642bf0d669c7558deadaa97e0966552fa7cd524b32cbb7b202b4e43d18ef0792c76ba375b131259c95ed968ca57c05ceebeb2a9aa882c286d7b6dd53ac3a98002307e033dbd547367cb96cffc6e9463b5b46f2c2776e9f13347f020201a8588ce82694ba6720b1fb334b7a832108ec5332db25edd37b5b10aaf06e6", 0x7d, 0xff}, {&(0x7f0000000440)="d7bcd99e6c8c5b08a1186e3c75b5876e2407178045cef074c7da5c65a0e9fcf4c48fbfff931c189b1b861a5d81a63729c422460af5f0b7dd3b02c15e48b8171b40e71959e8d200f976be05484411618f7cf2f7af32af9138ae4cc884438f568fe01356da2a80fbfc0c49bd339281d6c1c5e0e17d1354f9ad0e00971715ccbe73709a0ec9c12c2d7ceeb5b8ac7edf9ed6b89bc6ed9031aafd360ae86af411ca323069497c7b5a8e785887ba782b14c5f848e9215ae4ea4998a9848a59448008d9ccc655cdc607e0a66cd39f715ca50562bc5027a618ba23fcac8f57fe4e52078a986925b310d696", 0xe7, 0x100000000}, {&(0x7f0000000100)="c152ad62720d80ddd2", 0x9, 0x2}, {&(0x7f0000000280)="284a00922281cc534c8b5d8898ff1decf57daa8c92be9f151c1eb0642533689f5fbcfcec29600f102dad719853c274a521", 0x31, 0xcdcb}, {&(0x7f0000000540)="a68bb30d64f9d26229fde774102852e1ff5a168666f51590e778eeaba02de659636e9758370323daf7f2a982b0ed2afb7167ff9a6ad9040e993454b4d9ff7ec758adf4fb7ec38bb4c69c573787e218ea5d09d2a6aa8408cd5aac0b3355872665e616b1a985eb6c8ac46cb396c36deca64bd697e5e2779466613250fd2104c7d522e7a16c94f1546654e1dd56e7ff4126173769f4c9c6f96c2f3411b8ff665eece973c5b41bb36cff32a90653c351049312e1517a2476bab653e545de5e196733a7546aee89a264d464062bd0e6e8a72a46dc040826dbd3d32cbb90fc3a29864f07099a2f9cef333a", 0xe8, 0xffff}], 0x80000, &(0x7f0000000700)={[{@umask={'umask', 0x3d, [0x34, 0x30, 0x37]}, 0x2c}, {@decompose='decompose', 0x2c}]}) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat(0xffffffffffffff9c, &(0x7f0000000000)='../file0\x00', 0x0, 0x0) 2018/06/03 22:47:54 executing program 2: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/146, 0x92}], 0x1) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$getreaper(0x80000000, &(0x7f0000000600)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x29c, 0x19, 0x300, 0x70bd25, 0x25dfdbfb, {0xe}, [@typed={0x94, 0x4f, @binary="8db6c05fff9d2dd74129ad6d9b4d09eb65a295d234db218db545bb2faa53d24fdddb9053e48925acc32e71383524d7d237f32bb921f720c638447eb180b103ed5609a71deda22cb4bfa06ca60385c59af9d7a1dec73b47eb32386c65a361fd77676e6f5b02e3e9294af2bcfa109a0d29c3edaf28908bb468b65e94e3fe8932a166fd551cb76eaa5ae7a92f6b1fd28529"}, @nested={0x28, 0x5c, [@typed={0x8, 0x30, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @typed={0x14, 0x7d, @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @typed={0x8, 0x21, @u32=0x3bac}]}, @nested={0x1cc, 0x9, [@generic="ca74da845dfc3508db3b6ff8f8374b9d935745bbf0152a6e4cfe645e98898dc66c0b181bfd414cea822c3458bddeee6a91096b0c4a990e4c2bee6a9cec42f96220208f7952a367a8015bf25e73", @typed={0x8, 0x5a, @fd=r0}, @generic="38aa017dedbc84473e6d6600417b7e6ec3cc559b50462bb387134b6895533c24468bc2a7b5d2588b491db4bcd788198468b43f7133ea3d3862482891ef45591b212a3c8fd1b4d51fe9d206a6be8ec7666c40c08b2a61e13af7665e94597b32f0519d2927bab16a1d2f5bd9ec00d2e98c9d6fa7d34b8ef6b9ec13f9efbab2f46043603183c40ab97157dbdebe380b7ccc87f1474ab20b088fa6e73ae775", @typed={0x8, 0x7e, @pid=r2}, @generic="f4e8cd3dbe78ca2d92b41f5998005214863a2b3800661efdc21d5cfe46d89f593215e20a1f5fe505041f72640b85dd2a072f45091f1bb14c3deb374404196a9314fc2d905f", @typed={0x88, 0x38, @binary="6cdfcaf4edaeb1b13918f62bce990dabff259d6853adfd551fecaebac918361e33466f9f18a00129f553d9521ecdec55236ea69534825651aabcf4a5f56a852c6294900bb22503224229e341cdee6a0109e9f9f6bb0af9d277b0bf8632790509dbe1933ee4bc673c7768d41d055dca9460b5efe2ca54b18dde9924d388a2df40b03257b7"}]}]}, 0x29c}, 0x1}, 0x4000804) getpeername$inet6(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000005c0)=0x1c) 2018/06/03 22:47:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') 2018/06/03 22:47:54 executing program 1: syz_emit_ethernet(0x8e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x58, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3f, {0x0, 0x6, "0a07ec", 0xae3, 0x29, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}, [], "a82f7ae1cd16d2e2fe800000000000005dd0d40c29be46586985ea5d7b12d99989c2ad53524ba53f"}}}}}}}, &(0x7f0000000000)={0x1, 0x6, [0x0, 0xffffffffffffffff, 0x377, 0x4]}) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x80, 0x202000) fcntl$setstatus(r0, 0x4, 0x2000) fstat(r0, &(0x7f0000000140)) [ 145.356415] FAT-fs (loop6): bogus number of reserved sectors [ 145.362363] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:47:54 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x7, 0x1, 0xdd, &(0x7f0000000000)=[0x0], 0x1}, 0x20) ioctl$TCSBRKP(r0, 0x5425, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x3a5, &(0x7f0000000080)=ANY=[@ANYBLOB="854a02000000000000c186e7000040000000000000000000"], &(0x7f0000003ff6)='8s$\x00', 0xfe24, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x9}, 0x48) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x8001, 0x101900) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x16, "06d30235cc9d7de14a3088eb43bee2f22fd8592bec68"}, &(0x7f0000000140)=0x3a) socket$kcm(0x29, 0x7, 0x0) 2018/06/03 22:47:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001480)={0x5, &(0x7f0000000400)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000024c0)={r2, &(0x7f00000014c0)=""/4096}) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f2ec0638d7899e891dcd824fc9e4e54cadcff7244bc8f5f213d715ab26e0a4e2deef87f05dfd5fba2f8b113d06e2fb0d2e85130a3d5450e22558f21c9ef7d6afe9e74beb926e195a74406c5b5c8a6d092f3f337ad31dd7e5a141ee7c3cdae1a59be404d27c6189bcc43fa286a96bdee4cba8bb8c8c5cccdfdefd35f6bbf157ea12b32cae78745c125988f0af5e5ef481", 0x90}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000002500)={'bond0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f0000000240)=[{&(0x7f0000000480)="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", 0x1000, 0x8}, {&(0x7f00000001c0)="fdd8b4efa385595becb3818eef0cbf", 0xf, 0x4}, {&(0x7f0000000200)="fa19", 0x2, 0x5}], 0x140000, &(0x7f00000002c0)={[{@type={'type', 0x3d, "6a76a87c"}, 0x2c}, {@session={'session', 0x3d, [0x30, 0x33, 0x7f, 0x7f]}, 0x2c}, {@gid={'gid', 0x3d, [0x7d, 0x0]}, 0x2c}, {@creator={'creator', 0x3d, "3181856e"}, 0x2c}, {@creator={'creator', 0x3d, "43cb9d46"}, 0x2c}]}) recvmmsg(r3, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007a80)=""/57, 0x39}, {&(0x7f0000007ac0)=""/222, 0xde}], 0x2, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 2018/06/03 22:47:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff, 0x800) write$sndseq(r1, &(0x7f00000000c0)=[{0xfffffffffffffff8, 0x7, 0x8, 0xfffffffffffffff9, @time={0x0, 0x1c9c380}, {0x7, 0x2}, {0x0, 0x8}, @quote={{0x9, 0x80000001}, 0x2, &(0x7f0000000080)={0xc9a, 0x3e0, 0x4, 0x81, @tick=0x9, {0x80000001}, {0x9, 0x9}, @control={0x6, 0x7bfc, 0xce4}}}}, {0x7b6, 0x4, 0xff, 0x9, @tick=0x2, {0x6, 0x3}, {0x6, 0x2}, @raw32={[0x0, 0x9, 0x5]}}], 0x60) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e354ee21a0e461d4074b3fe6860227fcd663b2149358c2a2c9bfb41", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 2018/06/03 22:47:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0)={0x9, 0x0, 0x0, 0x20000000000}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000003000)={0x77359400}) 2018/06/03 22:47:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') 2018/06/03 22:47:54 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x800, 0x70bd25, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f0000002980)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="06010000002752d5"], 0x18) write$rdma_cm(r2, &(0x7f00000029c0)=@bind={0x14, 0x88, 0xfa00, {0xffffffff, 0x10, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x90) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400202, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, {0x882a, 0xfffffffffffffff7, 0x0, 0x1ff, 0x100000001, 0x4}}, 0x8) [ 145.663768] sd 0:0:1:0: [sg0] tag#4025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 145.672864] sd 0:0:1:0: [sg0] tag#4025 CDB: opcode=0xab, sa=0x0 [ 145.679136] sd 0:0:1:0: [sg0] tag#4025 CDB[00]: ab c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 145.688244] sd 0:0:1:0: [sg0] tag#4025 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 145.697486] sd 0:0:1:0: [sg0] tag#4025 CDB[20]: 41 2018/06/03 22:47:54 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000040)='./control\x00', 0x0) r1 = open(&(0x7f0000000200)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./control\x00', 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r2, &(0x7f0000012ff6)='./control\x00') renameat2(r2, &(0x7f0000bee000)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) 2018/06/03 22:47:54 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x5000) ioctl(r0, 0x80000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x236, &(0x7f0000000440), 0x375}, 0x10008000) sendto$inet6(r2, &(0x7f0000000080)="188b", 0x2, 0x0, &(0x7f0000000040)={0xa}, 0x1c) [ 145.797296] device bridge_slave_1 left promiscuous mode [ 145.803100] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/03 22:47:54 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x228802, 0x80) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)="d8", 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) sendfile(r1, r0, &(0x7f0000000140), 0x12000) [ 145.839459] device bridge_slave_0 left promiscuous mode [ 145.845235] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.918107] IPVS: ftp: loaded support on port[0] = 21 [ 145.964986] team0 (unregistering): Port device team_slave_1 removed [ 145.980356] team0 (unregistering): Port device team_slave_0 removed [ 145.993337] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 146.011763] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 146.063284] bond0 (unregistering): Released all slaves 2018/06/03 22:47:55 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) fcntl$getown(r1, 0x9) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x20, 0x400) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)) 2018/06/03 22:47:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100172dee620036c3378e8cc846f70040000000ff7f80000080000000000000742f457d42bc3668d74ec1e0f1090bc3692c99a75be306556ad54d6f4b7607e7596427d15433b45a3424fb0883ac9ca11455528648a58793c7030000004d581a4bad09f027eea178440095f45dc29195c49394050ab1abe245a27041461d75c243b8ff4080f1dc10ef36d077e569be8751f7e6ce0b7c"]) 2018/06/03 22:47:55 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000400)='bdev^md5sumprocvboxnet0mime_type-+\x00', 0x3) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000440)={0x7, 0x7, 0x8, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rfkill\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={r2, 0x0, 0x1, 0x0, &(0x7f00000006c0)}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000900)={0x0, 0x10001}, &(0x7f0000001b00)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001b40), 0xc) r4 = dup2(0xffffffffffffffff, r0) write$evdev(r4, &(0x7f00000007c0)=[{{}, 0x0, 0x18353fb4, 0x4}], 0x18) 2018/06/03 22:47:55 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioperm(0x1000, 0x9, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x81, "23d54368431a753e2199e196c209d31a6f9421d5753a5376ffce33a5068d941723a1f325341bf38a1f56ca7d3d55e2e117ed15407ad800327b27d9aaa469b2a84d45f7408986236ed6168639c08d20c485e50a5303e76c48a66811f85053d55fc0410c3054d205f0c34f30c1dedb76da8918780f1cd079130cf7a0cafaf327deb2"}, &(0x7f0000000080)=0x89) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000001200)=0x1008) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001240)={r2, 0x5, 0x20, 0x2, 0x5, 0x7, 0xfff, 0x80000001, {r3, @in6={{0xa, 0x4e23, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0xe3ad}}, 0xef, 0x7d805e10, 0x8, 0x40, 0x1054}}, &(0x7f0000001300)=0xb0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) 2018/06/03 22:47:55 executing program 2: r0 = socket(0x1e, 0x804, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0xa61e, 0x0, 0x0, 0x7f}, 0x10) sendmmsg(r0, &(0x7f000000a180), 0x0, 0x0) 2018/06/03 22:47:55 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0xef) r2 = dup(r0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000100)=""/62) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) close(r1) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000040)="a530228f6a027a31788739578788a291ba750d1e5f8f9c8c8bdc2be3c38a28794adb2031001d07d4f27cac5931ff368033e1c2a0f1f2f1a5c5caa06af48659463f903d8ab4748f111ad1ee3e571306") 2018/06/03 22:47:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x400200, 0x0) accept$ipx(r1, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80}, 0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) write(r2, &(0x7f00007b3f7e)="71bbc9d12e85a3fb556aa289cf38d79564ae4ab41396791977750ddacdc3efaf53cd8c07d823d788a7d890cc0e9aca7810ab298585448c0d10d6e42c1b467c06e5c8bd0f0ca4cf00c36adfcec4cc7c724b765a793f8d255b43a23ecb001c94e20d730d577d29b62121b8aac4b0ef5a839d944f7b80e4c59bd24db8fc7b4d3664539b", 0x82) sendto$inet(r2, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xe2}], 0x1) close(r2) 2018/06/03 22:47:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x15e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f0000000240), &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x1d6) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'Bat\x00', 0x19, 0x5, 0x5b8, [0x20000900, 0x0, 0x0, 0x20000b08, 0x20000c58], 0x0, &(0x7f0000000000), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'tunl0\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xb0, 0xb0, 0x100, [@quota={'quota\x00', 0x18}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}, {{{0x5, 0x0, 0x0, 'nr0\x00', 'ifb0\x00', 'ip_vti0\x00', 'bridge_slave_1\x00', @empty, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'gretap0\x00', 'team_slave_1\x00', '\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb8, 0xf0, 0x120, [@limit={'limit\x00', 0x20}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'veth1_to_bond\x00', 'team_slave_1\x00', 'bond0\x00', 'gretap0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xe0, 0x150, 0x188, [@cpu={'cpu\x00', 0x8}, @statistic={'statistic\x00', 0x18}]}, [@arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}, {{{0x11, 0x0, 0x0, 'tunl0\x00', 'bridge_slave_1\x00', 'ipddp0\x00', 'vcan0\x00', @random="d44357a49ec5", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}]}, 0x630) syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f756e6978004e273d2aae1f863b00d18fffe1cd3029e7f84960de7c244cc39e4705a80ba046d4fdcf85497281e18eaaabd40410b52b9e581fb400020000c894592714e6a5e5d08f9a47d9d411dab20b00e7a4ab801aaf2d") getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=""/123, &(0x7f0000000000)=0x7b) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0xb1, "d4772e9573034c3a914fd00bb0a639ea3f324276dd38f3497f28410f5c7c5715ecb5918acf1e5e828748609b18a7a8a46d985e7ac6890aa23c369f0f44345bc3ea4e7dee430d69f1833bcb7c09490629ed94a37ceff95122ba3ccbea89815a0984ba708847d2cc82e2e4fe6a4bf07e84b04497dfd0a343f8ee24385ff24b8c8c3c82100a30fd09b540abde07e470e9c8eebb56fd79717f52755f7f8fd8ddf08aa59363ad0daed1ccb2b9975b068a195a84"}, &(0x7f00000000c0)=0xd5) 2018/06/03 22:47:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") close(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = userfaultfd(0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x4100, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000540)={0x0, 0x100000}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x30, &(0x7f0000000140)=ANY=[], 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8916, &(0x7f0000000180)={@mcast1={0xff, 0x1, [], 0x1}}) syz_mount_image$cifs(&(0x7f0000000140)='cifs\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x3, &(0x7f0000000400)=[{&(0x7f00000002c0)="6fde67f27b488f8ef0b386f5c5037f6297436a6daccd581b1f9c9078d15c4b0ff920570650b9da62178ed4b3417da203a883a2e21dffcb59f8cc8db2b8c7d751b71f990e59cfcd64158da060502749078e305b1cb9af7d70b99ab3c727745dbefcf6bd49de78b02aa3d7cf3ad67b1e7e700b962804e8b0b7b63911ef6d7139b44caa218259e25a3ab2ff4d90", 0x8c, 0x800}, {&(0x7f0000000200)="beaf6648810a1e4b02559b37f4c46ea9cb95702a4c483bb8940e38f80e7fa7549277a75c0d671b", 0x27, 0x2d}, {&(0x7f0000000380)="1c5b065ab6b8b1244f9a480a56723eb6d6c2887027e600e4d8657061d1b216290278f4968c76f2cddcb8f9c13e63ca66796282d3211e06bd153ce5d5a6077fc6b566ee376f8dcf4c8d9fcf3b63aa2eae3b475284c0c65c9565b7d522afb11e303c8775819007c30991d8", 0x6a, 0x100000000}], 0x840801, &(0x7f0000000480)='\x00') dup2(r1, r3) r4 = socket$inet6(0xa, 0x2, 0x200000088) connect$inet6(r4, &(0x7f0000000280)={0xa}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r3) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000004c0)) close(r1) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={r2, 0x6, 0x1, 0x1ae21a39, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) 2018/06/03 22:47:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x414982, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnetconf={0x34, 0x52, 0x700, 0x70bd25, 0x25dfdbfe, {0x2}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x80000) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000130000002bbd7000fbdbdf2500000000f5932bfcfc107a983d862f800da9e4822f8119efc3818f8f77e468b80b9da0f19946929feaba617096dfd39f77a527c910dee58d07cf569f64b572ebaf510b65598b8f5bad4e370bafa7386667818f7fa77de5086195c9537428527af805928a57da", @ANYRES32=0x0, @ANYBLOB="000100000001000008001b008382000020001a0004001c0004001c000400020004001c00040007000400070004001c0008001f0001800000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl$int_out(r0, 0x80004537, &(0x7f00000000c0)) 2018/06/03 22:47:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x1b) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000100)={0x6}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x93e, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) [ 146.817357] x_tables: eb_tables: snat target: only valid in nat table, not Bat [ 146.881777] x_tables: eb_tables: snat target: only valid in nat table, not Bat [ 147.227643] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.234179] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.242430] device bridge_slave_0 entered promiscuous mode [ 147.286224] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.292669] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.300719] device bridge_slave_1 entered promiscuous mode [ 147.344700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.388369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.520867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.590339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.687288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.694297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.757491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.764499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.881066] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 147.889281] team0: Port device team_slave_0 added [ 147.920711] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.928198] team0: Port device team_slave_1 added [ 147.963606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.996890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.023439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 148.030569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.039120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.063278] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.071819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.080445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.312830] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.319265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.325949] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.332332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.339669] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.559278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.212527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.296874] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.380471] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.386854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.394567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.474163] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/03 22:47:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) 2018/06/03 22:47:58 executing program 7: restart_syscall() r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl(r2, 0x5, &(0x7f0000000f40)="59b31c7fc60856b9406d06a59da756b9987835054d13844fe0219c18c6f3bd94218a5745b2fec12b665ffda8f62f77b2211c5265de3668b34d6a838b32e64d8191351da809f90881f4f20d561b") r3 = fcntl$getown(r1, 0x9) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) getresgid(&(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000008c0)=0x0) r10 = getuid() r11 = getegid() r12 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000c00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000240)={0x13c, 0x32, 0x800, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x6a, @str='[\x00'}, @typed={0x8, 0x34, @u32=0x1f}, @nested={0x114, 0x47, [@generic="355d5bbb324d50f421b9da2c3b31f0a185809a70244bfaeafcff0a7a270eee570e832e2ad599d50e865ee9c1f72acd8290548c12d2d556466c15cc776dee9c3fb4b8a12dbe7310c5be45694bf2ed0962ba335543937bdf320d6be1", @generic, @generic="77c60b9d707e5580b5261dd71fbc7ed532035c2df396a0616b557732a1f76bdda1d1ccee3843a1d4e74cc442f8d41bc4456684cc9b9a6b733abac24b6e64", @typed={0x10, 0x30, @str='/dev/adsp#\x00'}, @typed={0x4c, 0x46, @binary="d955d24d717ed3f5d123527710f083d03c3de30584619f0d89ffacfe06b197fdd7c6f0535453e28a456d5939f41fbffc1ebda2505b2f511913855043e6da23c100365c64788887"}, @typed={0xc, 0x1c, @str='keyring\x00'}, @generic="93c2cc06ca82581a73394329ca18"]}, @typed={0x8, 0x33, @fd=r1}]}, 0x13c}, {&(0x7f0000000380)=ANY=[@ANYBLOB="d5ecea6930deffffbf1e7000fedbdf251c855d9b7b0118f361577398e54d6ddb33049ee992f85fd13e84b09b256d2f2a12db2902535de0014395ba5bafb06f373fc37a84967ff257275ace44a65992b4790da72442048839f9fd1b9e"], 0x10}, {&(0x7f0000000140)={0x1c, 0x31, 0x0, 0x70bd27, 0x25dfdbfc, "", [@typed={0x4, 0x80}, @typed={0x8, 0x1f, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}]}, 0x1c}, {&(0x7f0000000440)={0x54, 0x3e, 0x400, 0x70bd29, 0x25dfdbfb, "", [@nested={0x38, 0x7a, [@generic="126581596e320f46e522ec646cb76f25e3f7e51a4d8124ed5eb88997370322001001d9e227b37e6349932eed08b37dec5c4ec652"]}, @typed={0xc, 0x78, @str='%nodev(\x00'}]}, 0x54}], 0x4, &(0x7f0000000b00)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xf0, 0x404c000}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x3, 0x3, 0x1, 0x80, 0x1, 0x2}, 0x20) keyctl$assume_authority(0x1d, r0) rmdir(&(0x7f0000000100)='./file0\x00') r15 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x800, 0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000f00)={0x7, 0x6, 0x1f, 0xd2, 0x0, 0x100000001, 0x6, 0x4, 0xffffffff, 0x8, 0x9}, 0xb) ioctl$LOOP_SET_CAPACITY(r15, 0x4c07) keyctl$get_persistent(0x16, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000ec0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x1ac, 0x37, 0x8, 0x70bd2a, 0x25dfdbfd, {0xc}, [@generic="e67e894e14d7b0351a241074aa84c4dfc46e7e233fd0d2bb5c40f3b5ba190a125aef659d77290f1b54be39906c3a8846e3881e30084609396dcb4bd14a706c374562d8012e1a181441e9f27929762fef09cd34ad65f8bb5b6f9597349f7c428e29b2fe423c2b727eb66257e43680a05bf53f6f3184a7965db96f00fc5b8726719e58bad2b1d993a32a81e07812ac5363710f53ae05672e35db07c5f8e607b4c2f9", @generic="9e77eabcafd6d25dd1c200988df17f01b1d1aa90bb0da2c9f2a5f2cf88faa7e43d5ea5b23df2fab6e76f72afb632166a67179920c8d549ae219039462188ad4b0be34b03978a6eee9d46c709b25a8acb4dfbaf94fd697d6ba3b93b1b026337899593991bcccdd680a6321222c90fde5e3de12a7be02b30dc9a3ecb7f3b2cdf1c4e45db677ab7b38de978ac7cf06183a1928b0b8eea8151e24aa9101c59ce9fadd15eca8ec0356c0dc5049a3081d9bf0d4d86afb1b075f03e3c85d50d06091ef417dcd0fa5b45f80582a677d5502d4ba42e4385eb5f80b375b596b444db", @typed={0x8, 0x55, @pid=r3}, @generic="1eeed656b2adaffaa4378dc8b671d235"]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000c40)={'filter\x00', 0x4}, 0x68) 2018/06/03 22:47:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x9, 0x8}) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, 0x800000000000000) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x80800) 2018/06/03 22:47:58 executing program 2: getrlimit(0x7, &(0x7f0000000000)) 2018/06/03 22:47:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="1bd45006000000d1240970") socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x205, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000043b000/0x2000)=nil, 0x2000, 0x0, 0x28013, r1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000fd0ffc)) mmap(&(0x7f00000f8000/0x2000)=nil, 0x2000, 0x0, 0x44031, 0xffffffffffffffff, 0x20000004000) 2018/06/03 22:47:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), &(0x7f00000002c0)) pipe(&(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4c3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000d2effc)=0x81, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000df7000), 0x4) 2018/06/03 22:47:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffa5a0, 0x80002) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6(0xa, 0x3, 0x10000000000007) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=@fragment, 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000000140), 0x7b, 0x0) 2018/06/03 22:47:58 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r0 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x2e8586bf, 0x4, 0x4e, 0x17c3, 0x8, 0x9, 0x3e3, {0x0, @in={{0x2, 0x4e20, @rand_addr=0xea}}, 0xc2a3, 0xfffffffffffffffb, 0x0, 0x1, 0x5}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x53119aa7, 0x8}, 0x90) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000807031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x800, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000100)=0x7ff) prctl$getreaper(0x3b, &(0x7f0000000080)) [ 149.961736] FAT-fs (loop6): bogus number of reserved sectors [ 149.967913] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:47:58 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x800, 0x2000) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x2, @loopback={0x0, 0x1}, 0x7ff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)="3213e0628d424bdc27865128675dbb4b7550e6748bdccdc94b358e69a68a4d52bb789bae60e0ac139cedebfe0d96862c39a76201d913fad5ca7de994a0dff66baeb931d60286fd7cd815de032685275c5a35c70748417bd107c0d001f820dca6b370829682f0edf654264bf411c768aa0a7a53e342332f7079d68d1436edfa45e4a97a9a6516972ec2272ea6fe333881b39fb9555a2967f889c3344242dcf2ed77b54ef50f7b725c7d128518120d4c24dc435baa0c8213832de5b0b7da6368255e77516eafd86b9cb7af", 0xca}, {&(0x7f0000000180)="70583eaf306b480a7f5df10cc60bb361d16df08301c8770960f676dab38872ec706d1844f6d55a3c66a60553589338262c88f5901418ae2b1000f1818757f1607286a2d4044b0a0b312650f6db4c24b97b145a116b61fea13da413ecfd92a42e81468b76470e51edcc2dcc02360b93803390edd7d6f59b08f7449826375f0ef547c5", 0x82}, {&(0x7f0000000280)="add79c73a3f1f1fe86c20fd4be307ff9d40bf44e3ac14785", 0x18}, {&(0x7f00000002c0)="530fe5b588181e1b459f9bdfba81560a162dbe6678f689a49f276ce4136f21ab2e4479b155595b9981c407103ad7eddd7bae279cffa6e24fa73a4501cf468e9355f68a8f13307ebc9a14ba4b1f2f8b42c97293bc46ddeb2216e706316df3565508a3c265951c3eb47c35821a91d95905d202fdb900629bffd42a27c4dbacb06267556c495630b58b83f9eefacea4f779d729251fb124607c9aec0bf5ea1cc651f5d261bf324c88ebc73483257c75f509612ba15e9ab21ec8f1c8a30bd8799f1dbfaca4fbf6af24693d17ed10285756c9e75ffa8851298d7f5b8d5f0b8a32aafde0e217c305a29d3e48", 0xe9}, {&(0x7f00000003c0)="f45e104da3e3e6e66a90152c8e3a29b6eecd1884d7ea76327a7cf54aba80802a078b93ba3c53fa9933084490bacaa67f48", 0x31}, {&(0x7f0000000400)="6f420824c34493b19deca6793a66badded0a40ce236f1c03128d70834a048d12edcce1a2334ff95adba957ef7cc1d3d7075f944e176736c6a100521c04a8417456d737db3afc6751583f06581b35a1e7cae46a3e90bcab", 0x57}, {&(0x7f0000000480)="b94ee14c1a49540188acd035363bb30155552f538ebc6470e5a5a9315e36cee60380927561574cb77d91e93672438d68bb26a76e1e7818027609d036c9e490c3d959760deec23424a28cd183e00dcb1d67d3712594179e85537f9019957ff7779b729d0e63eadcdfc8b557cd12cc47fee8bbc234655ee3c5e3230d6b0c541abb4b6958642375e6683f04556d893f9560369a6b5006e4a965a891668b8c8be757485bbe253df488255f6bd44024aa4f53e2a897d44c4a296203c33bb4b11c69a739f49dbdd3", 0xc5}], 0x7, 0x0, 0x0, 0x881}, 0x800) r1 = socket$kcm(0x29, 0x4, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[0x1, 0x2, 0x3]}) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020207031dfffd946fa2830020200a0009000b00001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 150.033864] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 150.067067] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 2018/06/03 22:47:59 executing program 7: restart_syscall() r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl(r2, 0x5, &(0x7f0000000f40)="59b31c7fc60856b9406d06a59da756b9987835054d13844fe0219c18c6f3bd94218a5745b2fec12b665ffda8f62f77b2211c5265de3668b34d6a838b32e64d8191351da809f90881f4f20d561b") r3 = fcntl$getown(r1, 0x9) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@rand_addr, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) getresgid(&(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000008c0)=0x0) r10 = getuid() r11 = getegid() r12 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000c00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000240)={0x13c, 0x32, 0x800, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x6a, @str='[\x00'}, @typed={0x8, 0x34, @u32=0x1f}, @nested={0x114, 0x47, [@generic="355d5bbb324d50f421b9da2c3b31f0a185809a70244bfaeafcff0a7a270eee570e832e2ad599d50e865ee9c1f72acd8290548c12d2d556466c15cc776dee9c3fb4b8a12dbe7310c5be45694bf2ed0962ba335543937bdf320d6be1", @generic, @generic="77c60b9d707e5580b5261dd71fbc7ed532035c2df396a0616b557732a1f76bdda1d1ccee3843a1d4e74cc442f8d41bc4456684cc9b9a6b733abac24b6e64", @typed={0x10, 0x30, @str='/dev/adsp#\x00'}, @typed={0x4c, 0x46, @binary="d955d24d717ed3f5d123527710f083d03c3de30584619f0d89ffacfe06b197fdd7c6f0535453e28a456d5939f41fbffc1ebda2505b2f511913855043e6da23c100365c64788887"}, @typed={0xc, 0x1c, @str='keyring\x00'}, @generic="93c2cc06ca82581a73394329ca18"]}, @typed={0x8, 0x33, @fd=r1}]}, 0x13c}, {&(0x7f0000000380)=ANY=[@ANYBLOB="d5ecea6930deffffbf1e7000fedbdf251c855d9b7b0118f361577398e54d6ddb33049ee992f85fd13e84b09b256d2f2a12db2902535de0014395ba5bafb06f373fc37a84967ff257275ace44a65992b4790da72442048839f9fd1b9e"], 0x10}, {&(0x7f0000000140)={0x1c, 0x31, 0x0, 0x70bd27, 0x25dfdbfc, "", [@typed={0x4, 0x80}, @typed={0x8, 0x1f, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}]}, 0x1c}, {&(0x7f0000000440)={0x54, 0x3e, 0x400, 0x70bd29, 0x25dfdbfb, "", [@nested={0x38, 0x7a, [@generic="126581596e320f46e522ec646cb76f25e3f7e51a4d8124ed5eb88997370322001001d9e227b37e6349932eed08b37dec5c4ec652"]}, @typed={0xc, 0x78, @str='%nodev(\x00'}]}, 0x54}], 0x4, &(0x7f0000000b00)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xf0, 0x404c000}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x3, 0x3, 0x1, 0x80, 0x1, 0x2}, 0x20) keyctl$assume_authority(0x1d, r0) rmdir(&(0x7f0000000100)='./file0\x00') r15 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x800, 0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000f00)={0x7, 0x6, 0x1f, 0xd2, 0x0, 0x100000001, 0x6, 0x4, 0xffffffff, 0x8, 0x9}, 0xb) ioctl$LOOP_SET_CAPACITY(r15, 0x4c07) keyctl$get_persistent(0x16, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000ec0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x1ac, 0x37, 0x8, 0x70bd2a, 0x25dfdbfd, {0xc}, [@generic="e67e894e14d7b0351a241074aa84c4dfc46e7e233fd0d2bb5c40f3b5ba190a125aef659d77290f1b54be39906c3a8846e3881e30084609396dcb4bd14a706c374562d8012e1a181441e9f27929762fef09cd34ad65f8bb5b6f9597349f7c428e29b2fe423c2b727eb66257e43680a05bf53f6f3184a7965db96f00fc5b8726719e58bad2b1d993a32a81e07812ac5363710f53ae05672e35db07c5f8e607b4c2f9", @generic="9e77eabcafd6d25dd1c200988df17f01b1d1aa90bb0da2c9f2a5f2cf88faa7e43d5ea5b23df2fab6e76f72afb632166a67179920c8d549ae219039462188ad4b0be34b03978a6eee9d46c709b25a8acb4dfbaf94fd697d6ba3b93b1b026337899593991bcccdd680a6321222c90fde5e3de12a7be02b30dc9a3ecb7f3b2cdf1c4e45db677ab7b38de978ac7cf06183a1928b0b8eea8151e24aa9101c59ce9fadd15eca8ec0356c0dc5049a3081d9bf0d4d86afb1b075f03e3c85d50d06091ef417dcd0fa5b45f80582a677d5502d4ba42e4385eb5f80b375b596b444db", @typed={0x8, 0x55, @pid=r3}, @generic="1eeed656b2adaffaa4378dc8b671d235"]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000c40)={'filter\x00', 0x4}, 0x68) 2018/06/03 22:47:59 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000380)=@known='com.apple.FinderInfo\x00', &(0x7f00000003c0)=""/107, 0x6b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, 'vmnet1(-md5sum'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "de427c573f12422f87340fef28c1d736cbe8d8cc7cded3f1776e8594e2145b6d9e26ae8bd9d630abc25997693e64c9378b677904d42dadbcda3cbf1d297fdf"}, 0x81) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl(r2, 0x6, &(0x7f0000000280)="27e2f4b00614140945ef8d9d98aea81329242f4e2f38b6811e422eae4947eaef") r7 = fcntl$getown(r4, 0x9) tgkill(r6, r7, 0x19) 2018/06/03 22:47:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") set_mempolicy(0x4001, &(0x7f00000000c0)=0x401, 0x5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x5, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') 2018/06/03 22:47:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) 2018/06/03 22:47:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0xd0c, 0xffffffff, 0x100000001, 0x9, 0xc7}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x81, 0x88000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/03 22:47:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x4100) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x1, 0x4, 0x3ff, 0x9, "b0b19ffcffe2e04f33cf87f3b2fa8779f3e68d6e795e299ed1bdfa5f6356a8e2ec2dd42e507684566b0f228b", 0x3}) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000184000)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_x_sec_ctx={0x1, 0x18}]}, 0x88}, 0x1}, 0x0) 2018/06/03 22:47:59 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x258, [0x20000140, 0x0, 0x0, 0x200002d8, 0x20000308], 0x0, &(0x7f0000000000), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x1b, 0x0, 0x0, 'lo\x00', 'nr0\x00', 'ip6gre0\x00', 'team_slave_1\x00', @random="dd11774329db", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xe8, 0x120}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "4b9cb56ceb7b09def79220ef912bd147401dc16caee1814ccc9fa42d42fdc139f8c54da4c26952682e49ed1496958cfd2973be3e2ba2d9172d884591a6cd0f13"}}}]}, @snat={'snat\x00', 0x10, {{@random="82485162fb73"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'yam0\x00', 'ipddp0\x00', 'gre0\x00', 'yam0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10}}]}]}, 0x2d0) 2018/06/03 22:47:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x800) 2018/06/03 22:47:59 executing program 7: r0 = socket$inet(0x15, 0x1000000000005, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x401, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1300, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/06/03 22:47:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="260f01d1f68e2b9755a83f0f01d1f018ab84397f72c7442400a9b00000c74424026e000000c7442406000000000f01142466baf80cb864103388ef66bafc0c66edc4e109ed1e46875a00f0453100450f01c9", 0x52}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) restart_syscall() 2018/06/03 22:47:59 executing program 5: syz_emit_ethernet(0x3ea, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2}, @random="063d3b650453", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @rand_addr}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x26a, 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x10000, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, @local}, &(0x7f0000000380)=0x10) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r4 = fcntl$getown(0xffffffffffffffff, 0x9) waitid(0x0, r4, 0x0, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x14a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa65dfdb196fe086dd62a2687601149707fe8000000000000000000000000000bbfe8000000000000000000000000000aafee10109008d0000000000000000000000000000000000014e214e24", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="9040000990780004fe10f989cf6b263e301123056568239eb1534827839fe7d0c47899fd52507217be587f735ea9c3ff67a1f79c8dbf4220609903914bcd1986363fe424c095c5b0feee12fb1b006a67657130e3bb90164fd5d7db06747807eaa65473c21bc444d5d9afb20ae72ea59b71105d8e715995e2132dd242b3232820e2e5382b621debfd5e06acc9e145ec40dca512de4bc47c960e41808f19d53bbc320f5dc7eebc55e2de20b9d5fda709e75747e8893a0f3e6a09bbfc04db04af335dd048870c53af6aaf5761f10b8b75c7cfa417b008ae0e5de380b68aaa1f28e993045739284ef9ed6c569b66142b14c6"], 0x0) poll(&(0x7f00000003c0)=[{r3, 0x8000}], 0x1, 0x9) 2018/06/03 22:47:59 executing program 4: socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x80) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0xcb, 0x8, 0x0, 0x8]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@mode={'mode', 0x3d, [0x30]}, 0x2c}]}) 2018/06/03 22:47:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x101000) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000100)=0x3) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000010000000000000000"], 0x60}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5ef9cb16a79c9a3015625e009477117fc029bff52a3296020900"], 0x10}, 0x1}, 0x0) 2018/06/03 22:47:59 executing program 0: getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x400001ff, 0x0, 0x0}, &(0x7f000000affc)=0x20) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000ff8)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xf9d4, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r0, 0xe8, "6e324c1f92e0fc5b50ce9b1c244e6afa39e1c11143d2299b4238bea4b9bd3285c8250923f9adc1aae0242c202a433ec0e38762d04cf64aa8b62482d7307f2320dad523312c16e45bbdd337a605fa41a72547bf6f918804241080e3e6fe9b04d9ae7282d45e31f239133d50942852a2abea95c7f4a4340d3d85cc452b839386f5e4ea1b20f363490848b6adabd3624d98faacbab7e42af6ad1f483195f567cf9635523efbb0c51320f8f40ce71743df90c25055a01e6a4d466dde7f6d4dc9ee4b3603276ce1fe524c7db2476b0c161ce6c9a44fbf2c09859ad23070efacd0d66562bbf0e52e11d198"}, &(0x7f00000001c0)=0xf0) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) 2018/06/03 22:47:59 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0xc400, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x242001, 0x10) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000001c0)={0x0, r3}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5002}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000910000000200000000000000ff070000000000000000907800000000e000000100009078e0000001"], 0x2a) [ 150.442325] device bridge_slave_1 left promiscuous mode [ 150.447960] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.476817] device bridge_slave_0 left promiscuous mode [ 150.482461] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/03 22:47:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000056ff8)='./>ile0\x00', 0x0) r1 = gettid() prctl$setptracer(0x59616d61, r1) getpid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) 2018/06/03 22:47:59 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x2) 2018/06/03 22:47:59 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x6, 0xfffffffffffff800, 0xfffffffffffffffe, 0x4}, 0x8) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/ip_vs\x00') fgetxattr(r2, &(0x7f0000000080)=@random={'system.', '%selinux-#$+\x00'}, &(0x7f00000000c0)=""/54, 0x36) sendfile(r0, r2, &(0x7f0000000040), 0x80000003) prctl$intptr(0x0, 0x2) [ 150.675850] team0 (unregistering): Port device team_slave_1 removed 2018/06/03 22:47:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="260f01d1f68e2b9755a83f0f01d1f018ab84397f72c7442400a9b00000c74424026e000000c7442406000000000f01142466baf80cb864103388ef66bafc0c66edc4e109ed1e46875a00f0453100450f01c9", 0x52}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) restart_syscall() 2018/06/03 22:47:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) 2018/06/03 22:47:59 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)) [ 150.758070] team0 (unregistering): Port device team_slave_0 removed 2018/06/03 22:47:59 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'btrfs.', 'user.syz\x00'}, &(0x7f0000001180)=""/4096, 0xffffffffffffff67) [ 150.829168] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 150.884323] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/06/03 22:47:59 executing program 2: mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) acct(&(0x7f0000000040)='./file0\x00') keyctl$unlink(0x9, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000775000)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) [ 150.979335] bond0 (unregistering): Released all slaves [ 151.064711] ISOFS: Unable to identify CD-ROM format. [ 151.867215] IPVS: ftp: loaded support on port[0] = 21 [ 152.248617] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.255072] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.262305] device bridge_slave_0 entered promiscuous mode [ 152.288707] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.295259] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.302460] device bridge_slave_1 entered promiscuous mode [ 152.327476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.353193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.424290] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.452659] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.565714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.572894] team0: Port device team_slave_0 added [ 152.597529] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.604832] team0: Port device team_slave_1 added [ 152.629467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.656482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.683948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.711366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.954180] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.960674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.967372] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.973794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.832514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.915842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.998834] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.005129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.012727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.092907] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/03 22:48:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/03 22:48:03 executing program 5: r0 = socket(0x83029f5a232ce7a3, 0x1, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00120000000000000000803e88c0485641d0773ffa78ce60150d5e6e0afaf8521494c71d4b2fc55fe95b6318f3006698b327993ad90c3e4dea0a2fd462f7612de4493b6d9ac129c9d9f532ae05ead81d778604dedddc5ed467d6229accabdc62549ea9b8bdbdce31395be90bd45d621609eb4b95b0267e9f5a53d0d55c2cf7ce02da348941b3709d1067d5b2fbaf02"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0185879, 0x20000001) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 2018/06/03 22:48:03 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x400000) 2018/06/03 22:48:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e900000000000063cf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xff, 0x200) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x2, 0x0, 0xc01}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/03 22:48:03 executing program 1: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x4) fchmod(r1, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00'}, 0x18) 2018/06/03 22:48:03 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffff9c, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x10002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x104, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b6300000d6300000e630c400000000001000000000000000d63000011634840030000000000000003000000000000000000000011000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="85616466000000000300000000000000020000000000000010000000000000008561646600000000040000000000000004000000000000000000000000000000"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="fcffffffffffffff0b63000011634840000000000000000003000000000000000000000010000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a6a7700000000", @ANYRES64=r2, @ANYBLOB="030000000000000085616466000000000700000000000000020000000000000033000000000000008561646600000000000000000000000001000000000000000a00000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="3823060000200000000000058743000000003a971d7ab0298bc04b4cc4f05138"], @ANYBLOB="9a0000000000000012634840040000000000000003000000000000000000000010000000000000000000000050000000000000004800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="0000000002000000000000008561646600000000050000000000000002000000000000003400000000000000852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000100000000000000"], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="380000000000000048000000000000002000000000000000400000000000000038000000000000001800000000000000200000000000000000000000000000007800000000000000"], @ANYBLOB="0004000000000000"], 0x83, 0x0, &(0x7f0000000740)="db8d4e71a3a43bde38ca6e2e2d03ac5b1ccbcab685977842fba039465cea742335e60d70bdeda5f8df80a43478952601b2058a49a40a49fa6a1ccdb1424d7a47309cf90fb63ba5707efd9e3a348e84f548ba54ecf47aac2454215ecb8aea0fa91159449d1822786d1cdd66cf6f9818363b2432ceab992ac88cbaf0f6e27f3d27815d48"}) r5 = add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="0000036f9904430d6db49118f3d7271e10a8da25c873b360024cb5d33bb1280d8a7265bfabb300000000000000000800000000000000b891ebcd34b27e1352e16724e133e71c3f2c0546fefed6d0e15fd3efc6c6d37d750adddfeb8736b223982c6c59e82240306cf8b82e147b633b5f43c7c59ae595c0b95453e46a9d9960f006df656617717c5fed34bfcae63d1f12a06a2d00d8caf3aaed666750d95f69ed4ef0b43f2f056965f6e26f90bf0bbb538baaf63d3acf15b6589038a439ce6f88", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r5, r5, r5}, &(0x7f0000000400)=""/104, 0x68, 0x0) 2018/06/03 22:48:03 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind(r1, &(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x80) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x428000) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb9952989", 0xb) sendto$ax25(r2, &(0x7f0000000040), 0xfffffffffffffdb1, 0x0, &(0x7f0000000180)={0x3, {"c52b2cdc4b4936"}}, 0x10) recvfrom(r2, &(0x7f00000001c0)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x709000) 2018/06/03 22:48:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)="0000e2b6009a56450134c6e23dca60622478bdcc656a429544aaff93f6cabac5fdb2ababfafee6588725", 0x4) ftruncate(r0, 0x1000000) ftruncate(r0, 0x0) [ 154.569380] FAT-fs (loop6): bogus number of reserved sectors [ 154.575375] FAT-fs (loop6): Can't find a valid FAT filesystem [ 154.651347] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 22:48:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)="0000e2b6009a56450134c6e23dca60622478bdcc656a429544aaff93f6cabac5fdb2ababfafee6588725", 0x4) ftruncate(r0, 0x1000000) ftruncate(r0, 0x0) 2018/06/03 22:48:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000100)=""/82, &(0x7f0000000000)=0x52) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), 0x4) 2018/06/03 22:48:03 executing program 4: syz_mount_image$jfs(&(0x7f0000000200)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xcd1, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0xab, 0x1}, {&(0x7f0000000080)="0b5ec2d3f6f16c0e9540c7af6ee9315f88b6b46977975fa7e5aa0bbf8b", 0x1aa, 0x1}, {&(0x7f00000000c0)="aedeed93b77e827d0c65a2a5963e456a01c6d6a18e817b11939c043c80f84c483048fdcff2d6b7d407233301bf3b669c7573612753e2c11531cd7809e3f26bd1c2587237d99878fe64e39d85ad8f549c319ee13f8ff98383260dce8148a4d39c8b28561ae3463ac908dbce7a21cb412516", 0xffffffffffffff52, 0x1}], 0x0, &(0x7f0000001340)={[{@errors_remount='errors=remount-ro', 0x2c}, {@resize_size={'resize', 0x3d, [0x37, 0x0, 0x46088d9d94b5c9ae, 0x3f, 0x37, 0x37, 0x37, 0x37]}, 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@nointegrity='nointegrity', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@gid={'gid', 0x3d, [0x38, 0x38, 0x36, 0x33, 0x36, 0x78, 0x30, 0x78, 0x35]}, 0x2c}]}) 2018/06/03 22:48:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e900000000000063cf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xff, 0x200) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x2, 0x0, 0xc01}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/06/03 22:48:03 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x17, r0, 0x0, &(0x7f00000002c0)='\x00') [ 154.904997] IPVS: You probably need to specify IP address on multicast interface. [ 154.938567] IPVS: Error connecting to the multicast addr [ 154.994377] device bridge_slave_1 left promiscuous mode [ 154.995944] IPVS: ftp: loaded support on port[0] = 21 [ 155.000058] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.025310] device bridge_slave_0 left promiscuous mode [ 155.030956] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.043085] JFS: r is an invalid error handler [ 155.108346] team0 (unregistering): Port device team_slave_1 removed [ 155.121730] team0 (unregistering): Port device team_slave_0 removed [ 155.134292] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 155.170647] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 155.175418] JFS: r is an invalid error handler [ 155.241783] bond0 (unregistering): Released all slaves 2018/06/03 22:48:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/03 22:48:05 executing program 2: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x60081) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x7000, &(0x7f0000000040), 0x1, r1, 0x2}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/4096) r2 = socket$netlink(0x10, 0x3, 0x17) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080), 0xffffff10) 2018/06/03 22:48:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) 2018/06/03 22:48:05 executing program 3: personality(0x2200003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) uname(&(0x7f00000006c0)=""/176) 2018/06/03 22:48:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x0, @random="905826048cf7"}, 0x0, {0x2}}) r1 = socket(0xa, 0x3, 0x8000) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x4a0, 0x2c, 0x432, 0x70bd26, 0x25dfdbfd, {0x0, r2, {}, {0x0, 0xffec}, {0xffe7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}}}, @TCA_RATE={0x8, 0x5, {0x0, 0x7}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x40c, 0x2, @TCA_BASIC_POLICE={0x408, 0x4, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x4, 0x1000, 0xa8c, 0x40, 0x9, 0xfffffffffffffff7, 0x2000000000, 0x2, 0x0, 0x1, 0x1, 0x101, 0x4, 0x9b5, 0x6, 0x401, 0x2, 0x8, 0x5, 0x10001, 0x7, 0x4, 0x1, 0x200, 0x4, 0x6, 0x200, 0x5, 0xfffffffffffff8ee, 0x8, 0x1, 0x8001, 0xff, 0x400, 0x7, 0x1, 0x8, 0xe1, 0x9, 0x8000, 0xffffffffffffffff, 0xffffffffffffff4b, 0x4, 0x21, 0x1, 0x1, 0x2, 0x3, 0x101, 0x8, 0x1, 0x1, 0x101, 0x191, 0x5, 0x8, 0x20, 0x3, 0xff, 0x5, 0x9, 0x6, 0x59c357ac, 0x5, 0x5, 0xfffffffffffffffb, 0x6, 0x7, 0x100000000, 0x1, 0x4, 0x4, 0x2, 0x3, 0x6a3, 0x40, 0x80, 0x7, 0x100000000, 0x1, 0x8, 0x693, 0x1f, 0x7, 0xfffffffffffff800, 0x7, 0x7, 0x4, 0x2, 0x1ff, 0xb2d, 0x4, 0x8000, 0x1000, 0x100000001, 0x7, 0x200, 0x9, 0x71, 0x6, 0x7f, 0xffffffff, 0x10001, 0x1, 0xe2, 0x0, 0x0, 0x81, 0x200, 0x2, 0xffffffffffffff00, 0xffffffffffffff41, 0x7fffffff, 0x8, 0x7, 0x7, 0x1ff, 0x0, 0x7, 0x892, 0x10000000000000, 0x6, 0x0, 0x4, 0x7ff, 0x3, 0x4, 0x10000, 0xffffffffffff8597, 0x2c7, 0xffff, 0x6, 0x10001, 0x1c6, 0x3, 0x0, 0x40, 0x401, 0x9, 0x5, 0x6, 0x3e15da32, 0x1, 0x1, 0x6, 0x8, 0x1, 0x5, 0x4, 0x3, 0xfec, 0x1, 0x19, 0x2, 0x0, 0x311, 0x7, 0x8, 0x0, 0xfffffffffffffc01, 0x80000000, 0x4, 0xfffffffffffffff9, 0x8, 0xff, 0x3ff, 0x401, 0x4, 0x2, 0xeac, 0x7, 0x7, 0x1, 0x4, 0xd1, 0x0, 0x4, 0x81, 0xac, 0xde8, 0x5, 0x8001, 0x6, 0x3, 0x1000, 0x3, 0xfffffffffffffffa, 0x1, 0x3, 0x40, 0x80000001, 0x6, 0x3, 0x100000001, 0x3, 0x3, 0xb729, 0x7cd6, 0x9, 0x15, 0x200000000000000, 0x0, 0x3, 0x3, 0x7, 0x10001, 0x7, 0x916, 0x5c, 0x1f, 0x7f, 0x6, 0x80000000, 0x9, 0x200, 0x6, 0xa000, 0x5, 0x7, 0x1, 0x8, 0x6, 0x2, 0xfff, 0x6, 0x6, 0xbe2, 0x9, 0x80000001, 0x6, 0x64, 0xfe, 0x8, 0x7fff, 0xd7, 0x0, 0x100, 0x7ff, 0x2, 0x0, 0x4, 0xeb, 0x397, 0x8, 0x2d, 0x9, 0xffffffffffffffa8, 0x2, 0x4, 0x2ec, 0x8, 0x6, 0x200, 0x7]}}}}, @TCA_CHAIN={0x8, 0xb, 0x100000001}, @TCA_RATE={0x8, 0x5, {0x1f, 0x8}}, @TCA_RATE={0x8, 0x5, {0x6, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x20}, @TCA_RATE={0x8, 0x5, {0x100, 0xc5e}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040040) 2018/06/03 22:48:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180100002c00198100000000000000000300000004000000"], 0x18}, 0x1}, 0x0) 2018/06/03 22:48:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xf56, 0x40800) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x531, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/06/03 22:48:05 executing program 1: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x4) fchmod(r1, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00'}, 0x18) 2018/06/03 22:48:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/sg#\x00', 0x3) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000200)=0x1, 0x4) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x1000000) 2018/06/03 22:48:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00"}) socket$inet6(0xa, 0x804, 0x1) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}}, &(0x7f0000000040)=0x100) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000040), 0x24, 0x0, &(0x7f0000000080)={0xa, 0x894f, 0x3, @dev={0xfe, 0x80}}, 0x1c) 2018/06/03 22:48:05 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000012000102000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00d1000000f7ff00040012008966329e8aa6adc3afce97abe0c03164271ff790afd7936d07569b5a8bdc24475d2f87cd5a65ee2a56c4635c095fa9976d2f50617cb693ab0050774a96090c8a75a9f0aa71f1"], 0x24}, 0x1}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) getcwd(&(0x7f0000000080)=""/67, 0x43) [ 156.645253] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 22:48:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) setpgid(r2, r1) r3 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x101400) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000200)=0x9800000000000000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000100)=0x3, 0x4) 2018/06/03 22:48:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00009e7fe4)={0xa, 0x3}, 0x1c) listen(r0, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x10000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000002c0)=0x1, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x4800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r5, 0x201, 0x70bd2c, 0x25dfdbfe, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000000000}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x959}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00'}) connect$inet(r2, &(0x7f00009ae000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) [ 156.950438] IPVS: ftp: loaded support on port[0] = 21 [ 157.029411] IPVS: You probably need to specify IP address on multicast interface. [ 157.037389] IPVS: Error connecting to the multicast addr [ 157.580088] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.586664] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.594482] device bridge_slave_0 entered promiscuous mode [ 157.632448] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.638924] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.646479] device bridge_slave_1 entered promiscuous mode [ 157.685433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.722749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.837315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.877636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.060734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.073121] team0: Port device team_slave_0 added [ 158.109896] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.117838] team0: Port device team_slave_1 added [ 158.158274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.199640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.229863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.270604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.579369] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.585929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.592631] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.599040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.607112] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.455633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.894674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.979041] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.067175] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.073425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.081331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.174086] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.712598] FAT-fs (loop6): bogus number of reserved sectors [ 160.718535] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:48:09 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1, 0x7ff, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x9, {0x8, 0x3f, 0x1, 0x3f, 0x0, 0x4}, 0x7f, 0x52}, 0xe) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100), 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x17}, 0x2c) 2018/06/03 22:48:09 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x1f, 0x10100) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000100)=""/55) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x1) read(r1, &(0x7f0000000000)=""/143, 0x8f) fadvise64(r0, 0x0, 0xf627, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)=""/250) 2018/06/03 22:48:09 executing program 5: timer_create(0x7, &(0x7f00000000c0)={0x0, 0x15, 0x2, @thr={&(0x7f0000000280)="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", &(0x7f0000000000)="6b05a067723f77d88ce7519881fb0ab09357c7d83b673443993edc17f4676ddd3a6f7efcedb0e0ceb8362c52c22a6b6559402eea6d9492e46bd48089678148534666dac5ed3e57d9d30a8549aceb03d9f61e5f75c92a70acfdf43cb73b47d96c7284a9ee1b24006b6fe958ec8071a15b3088ba91bddf2d1de45c236f0eaab5e5ad18f6cd77071c7d3077fafba3f49179c5b272966c25457ebbf4f2"}}, &(0x7f0000000100)=0x0) timer_getoverrun(r0) r1 = msgget$private(0x0, 0x4) msgctl$IPC_SET(r1, 0x1, &(0x7f000079df88)) msgsnd(r1, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000001280)=[@in6={0xa, 0x4e21, 0x1f, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e20, 0x80, @dev={0xfe, 0x80, [], 0xb}, 0x7fff}], 0x48) ioctl(r2, 0x8914, &(0x7f0000000180)="0054fc2f07d82c99240970") msgctl$IPC_RMID(r1, 0x0) 2018/06/03 22:48:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0xa00, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000002c0)={r2, 0x9}, &(0x7f0000000300)=0x8) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff7000/0x2000)=nil, 0xcd8, 0x0, 0x0, &(0x7f0000ff7000/0x4000)=nil}) writev(r0, &(0x7f0000000040), 0x146) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) 2018/06/03 22:48:09 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x20000000000648, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x2, 0xbf8}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x912, 0x83f, 0x81}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r1, 0x80}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000000180)="290000002100190000003fffffffda260200000000e80001040000040d000c00ea1100000025000000", 0x29}], 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c000000c46a57cb5b8f928289716ef8ba02000000f05ce1deae09672a2bc2b5b1bbf94462bf937ef830660d4e0b07bcf7cfef8b12", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2508000000240001000800020000000000080002002b00000008000100000000000800090050000000340001000c0007000200000000000000080005000400000014000300e00000010000000000000000000000000800060072720000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r3, 0x220, 0x70bd2d, 0x25dfdbfc, {0x8}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7bd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe538}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec}]}]}, 0x8c}, 0x1}, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x4dd17100, 0x953, r5}) 2018/06/03 22:48:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r0, r0) 2018/06/03 22:48:09 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) getpeername$llc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000200)=0x10) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8b22ef24"], 0x4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xe, 0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x1) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000480), 0x1000) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f636b746162598266622c6c6f636b70726f746f0824538b6b2fda7ec16f636b2c00"]) 2018/06/03 22:48:09 executing program 3: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x7d, 0x5c}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 160.882381] gfs2: invalid mount option: locktabY‚fb [ 160.887897] gfs2: can't parse mount arguments [ 160.973546] gfs2: invalid mount option: locktabY‚fb [ 160.978888] gfs2: can't parse mount arguments [ 161.130333] device bridge_slave_1 left promiscuous mode [ 161.136211] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.148778] device bridge_slave_0 left promiscuous mode [ 161.154473] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.191828] team0 (unregistering): Port device team_slave_1 removed [ 161.202597] team0 (unregistering): Port device team_slave_0 removed [ 161.215941] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 161.233372] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 161.266715] bond0 (unregistering): Released all slaves 2018/06/03 22:48:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) write(r0, &(0x7f0000000080)="1bf4fc002304000a04f511080001000201007188597c9e1e4f3e87265287184242f992f57d6afb4fa14bc7ab36", 0x2d) 2018/06/03 22:48:10 executing program 0: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0042fc2f07d82c99240970") r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x14) sendto$packet(r1, &(0x7f0000000080)="36a45d64520819865d622d34ac712d7c18c3fb35216e573e9714136c0efa669487baf98e5aa82935a31f2a722963b1c203f0193d19a32be14169e199196e815dfead1ee557ebe61f25f933d704f11edf679f9473fc309ca656716167ae933074a79eb5a2a9577a", 0x67, 0x20000040, &(0x7f0000000180)={0x11, 0xf8, r2, 0x1, 0x40000000000000, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0x6, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f00000001c0)) 2018/06/03 22:48:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x20803e, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000100)={0x9, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$binfmt_aout(r2, &(0x7f00000001c0)={{0x1cf, 0x0, 0x0, 0xfffffffffffffffe}}, 0x20) 2018/06/03 22:48:10 executing program 3: r0 = socket$kcm(0x29, 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0xa28d}) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c504", 0x5) sendto$ax25(r2, &(0x7f0000000040), 0xfffffffffffffdb1, 0x0, &(0x7f0000000180)={0x3, {"c52b2cdc4b4936"}}, 0x10) recvmsg(r2, &(0x7f0000002780)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000002700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/21, 0x15}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x3}, 0x0) 2018/06/03 22:48:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:10 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x40) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) 2018/06/03 22:48:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@x25={0x805, {0x0, 0x5, 0x1b, "a451ed0fcfcaa73c68e515c50373bf11e114df8522ac7ea7188dbb505b793711ef46d18e1d947444927f569fccc65150933c0f08a6c0bcaddeebbded757b344646f0d174dcb015f34e53917f3194a4afb283f0b72f777dce3668dff8dd22aa755df1e266f3c9d502c93f79817d"}}}}, &(0x7f00000002c0)={0x0, 0x0, [0x0, 0x800000000000]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xfffffffffffffe00}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x70f}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r2, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) 2018/06/03 22:48:10 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) ptrace$setregs(0xf, r1, 0x1, &(0x7f0000000380)="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") fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)={0x303, 0x33}, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x101, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000340)) r4 = syz_open_procfs(r2, &(0x7f00000001c0)="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") ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000140)={r5}) keyctl$set_reqkey_keyring(0xe, 0x6) setpgid(0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040)=0x1, &(0x7f0000000180)=0x4) [ 161.775634] skbuff: bad partial csum: csum=65535/0 len=22 2018/06/03 22:48:10 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl(r1, 0x2282, &(0x7f00000000c0)) r2 = pkey_alloc(0x0, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x5) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, r2) 2018/06/03 22:48:10 executing program 1: time(&(0x7f0000000080)) 2018/06/03 22:48:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) write$binfmt_aout(r0, &(0x7f0000000280)={{0x0, 0xdb, 0xd560, 0x5d, 0x260, 0x1, 0x10, 0x7fff}, "c07fa38318aa4a78de6097f1e45cbd67a6f29292aae953fde238b0", [[], [], [], [], [], [], []]}, 0x73b) r1 = dup(r0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x1000, 0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffe}, @in={0x2, 0x4e21, @loopback=0x7f000001}], 0x48) ptrace$setregset(0x4205, r2, 0x205, &(0x7f0000000080)={&(0x7f0000000100)="95ee1e22c71be2c12cbe93f5923fa18f373d4b09348e2a4785d83e76dfc8a178a626ad313dd1fdf32d160b2c0f9a10b332825806fee05f025e9c9878e7188c4bf9d9ff5af6c7f722d4b227c6f986788499d007e3979e4fb242fe57c84097d017de493dba627c91687a6b49329eab176cdea53e0277d2e9a7fc3b653d5a35ba6eed55a1a666f7b40d14914e1edade6de46a9276b2fce57cce614d37b7cf63800d107f5fdd0e83ad9df9731ca2e0f056b92052dc30dc420104a83d3e2f1ce095185a8e", 0xc2}) timerfd_create(0x4000000006, 0x80000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000013000/0x3000)=nil, 0x20014000}) 2018/06/03 22:48:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) accept4$ax25(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000380)="800000000002000019000000e60100006c000000002800000110efef01000000004000000040000080000000000000006d5ebe5a0000ffff53ef318da0c0215c66a06d06a38283bdecbc468fdbc85704421554f51d47ca497ca6b38310e70661c028f54c71e6", 0x66, 0x400}], 0x0, &(0x7f0000000200)) 2018/06/03 22:48:10 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400000) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000280)={0xff, 0x409, &(0x7f00000000c0)="a1f8b28f73ed95d683bb2a55b701ab80412af3318bb4f5bd1086bf4c97d8c7645959ca243ab52902ea656575e3b013435c2a98a98ec092e9c510723e1b2cf2a3ef79e936c3be5959596c3bc7a97e02cec6cfd9f2c5fbd6aa", &(0x7f0000000140)="ba22a41dfd37cecf714492e7802ea9d1e330cd0c441af573d1529e6f9b69a6d07fefbe31f65f4cbc656491277d40dac332c178338775ad1b68773657b31e2528bf63064e09402982ac700a84e1b125ba7942be3f4ddc69b2ec862be0e10607d64d7a81a7d8fe66d4cb478e9399b6b2c1fa8f1db847c0406213b2e9595dbefe36aaadc46f740d1b4348066e65c6b9798144843aa8d396657e1d80b9c0d30f5a", 0x58, 0x9f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x900, 0x100) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 2018/06/03 22:48:10 executing program 4: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x4, 0x200, 0xffffffffffffffc1, 0x101, 0x221b, 0x1}) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$TIOCSLCKTRMIOS(r1, 0x5437, &(0x7f0000000040)) 2018/06/03 22:48:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) prctl$seccomp(0x16, 0x2, &(0x7f0000000400)={0x9, &(0x7f0000000200)=[{0x5, 0xfffffffffffffeff, 0x800, 0x2}, {0x0, 0x6, 0x0, 0x978e}, {0x7, 0x3b6b3b01, 0x0, 0x7}, {0x4, 0x3, 0x5b, 0x1}, {0x4, 0x9, 0x4, 0xffffffffffffff91}, {0x4, 0x40, 0x4, 0x2}, {0x9, 0x5, 0x6, 0x8}, {0x7f, 0x4, 0x0, 0x9}, {0x0, 0x95, 0x0, 0xfffffffffffffff9}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0x9, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{}, {0x0, 0xfffffffffffffff8}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) write$sndseq(r0, &(0x7f00000002c0)=[{0xffff, 0xe23, 0x100000001, 0x401, @tick=0x7, {0x8, 0xfffffffffffffffc}, {0xffffffffffffff59, 0x7}, @raw8={"8d6a5f4f15f4d54a33eeb4d5"}}, {0xfffffffffffffffe, 0x4, 0xffffffffffff0000, 0x5, @time={0x77359400}, {0xffffffffffffff18, 0x7fffffff}, {0x80000000, 0x5}, @connect={{0xffff, 0x2}, {0xff, 0xffffffff}}}, {0x200, 0x8, 0x9, 0xffffffffffffff30, @time, {0xffffffff, 0x800}, {0x7, 0x4}, @connect={{0x3045, 0xa9c8}, {0x6a28, 0x614d}}}, {0x1, 0x6c65, 0x0, 0x6, @time, {0x6, 0xb832}, {0x2ca4, 0xff}, @raw8={"5c40b42392c16b5f5eb8d16f"}}, {0x7, 0x3, 0x1, 0x9, @time={0x0, 0x1c9c380}, {0x6, 0x7}, {0x7fffffff, 0x3}, @raw32={[0x599c0f8a, 0x8, 0x80000001]}}, {0x0, 0x2, 0x0, 0x6, @tick, {0x9e, 0x100000001}, {0x81, 0x9}, @connect={{0x7fffffff, 0x37e52b79}, {0x34ab9756, 0x8}}}], 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) [ 161.990231] EXT4-fs warning (device loop5): ext4_fill_super:3491: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 162.002417] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 2018/06/03 22:48:10 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x9, 0x4, 0x7fff, 0x7f, 0x0, 0x15, 0x202, 0x8, 0x7, 0x4, 0xc786, 0x10001, 0x8, 0x300000000, 0x4, 0xffff, 0x81, 0x5, 0x4, 0x0, 0x5, 0x40, 0x7, 0x1, 0x1f, 0x8, 0x2, 0x97fd, 0x8aa, 0x7f, 0x44c8, 0x0, 0x6, 0x1, 0x375e, 0x3e, 0x0, 0x81, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x2220, 0x80, 0x2, 0x5, 0x0, 0x18, 0x1}, 0xffffffffffffff9c, 0xb, 0xffffffffffffff9c, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x813, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x9a0, 0x4) 2018/06/03 22:48:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0xff, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8200, 0x40) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x28, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb}, 0x2c) bind$ax25(r1, &(0x7f00000001c0)={0x3, {"6bab35a3914e7c"}, 0x8e}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000280), &(0x7f0000001440)}, 0x20) memfd_create(&(0x7f0000000040)='securitywlan1\x00', 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f00000000c0)}, 0x10) [ 162.170157] EXT4-fs warning (device loop5): ext4_fill_super:3491: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 162.182459] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 162.197931] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 22:48:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x18000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x3}) 2018/06/03 22:48:11 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x8100000000000000}) 2018/06/03 22:48:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x2) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 163.243932] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.250356] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.257599] device bridge_slave_0 entered promiscuous mode [ 163.296327] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.302791] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.310929] device bridge_slave_1 entered promiscuous mode [ 163.346305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.372915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.444947] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.473655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.584948] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.592235] team0: Port device team_slave_0 added [ 163.617873] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.625156] team0: Port device team_slave_1 added [ 163.650484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.677325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.704423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.732954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.978278] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.984718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.991403] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.997787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.873501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.960413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.045668] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.052266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.059994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.139384] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/03 22:48:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:14 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3ff, 0x40001) 2018/06/03 22:48:14 executing program 7: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdirat(r0, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x9) symlinkat(&(0x7f0000023ff8)='./control\x00', r2, &(0x7f0000012ff6)='./control\x00') syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./control\x00', 0x9, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="1f19d7342e8b58a0344eae42a82bb54150545df8354447cc24a5dd4d3b986c2fb2e7cab17d063113bf032e271dad5fea5e204b2ffd93de18ba80f5acdc58a5155cd1fb1cb12fa5adfd097a301019028c362ec5e154bc9050b042239e955d25b2743c995d47302ad70e9de6186d6606218c94d1a2c4ea1ceb7743fc2c5dcb0bc0f0", 0x81, 0x7d}, {&(0x7f00000001c0)="6b081883425d524003e1d96cfda49824ef63685ea32d50fee31c3484e5ef4c537d4d40f6c79d0110d85bb5992bb4d9e5fb1674e20989bb6eaed473191d3a817d2aa27578", 0x44, 0x5}, {&(0x7f0000000280)="4b4a5011bd8af943a60860cfc9015ed5f7466fe94493", 0x16, 0x9}, {&(0x7f00000002c0)="68ebf46a54c4382420d38f4eb15b715b210a4860798a1a573b5a443997f11338e4fdba4bd76901674c4c1c0676a23a6058c5f01a0932c51a693f11f062ac137f84c5a16506946a3dc0834e724a19e8e6dc8d13d91f8301ad3b473f964e4dd50b34884967d19f6d59fa64ffb4fb713b0c3417ea2382f1db7cdde7890a88f8ef2849ed2a669c47ac959f", 0x89, 0x6}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="656e6f7370635f64656275672c73706163655f63616368653d76322c73706163636163fc415c0863a273cb6c69643d2c6461746173756d2c000000df521c50173cda8c820cb8c73c42ec9b372d1471e3e5634ade55c81f1a5fc267366a99ef9f7f73c55b6aaba39717f276c19e6fee4c952b144edc4ffcfab1b2182394dcbf94fb0e3571725d26277c1075c4d90383cf8a0c40d38540861d00e92c03d33783d460940f93cbd5705c9b869ea27a684d172f3da2b09de1172c4b14e759138cfad75426eacd571709d69fac1511bb911391e68367c72ab7d482b4099fa3e7e486c82a30003d8674756005f0a8080e45f50938a1a54053c50e8a8db337e591370d6c76572b4d607d965df70e"]) renameat2(r0, &(0x7f0000000000)='./control\x00', r2, &(0x7f0000000040)='./control\x00', 0x2) 2018/06/03 22:48:14 executing program 2: r0 = socket$kcm(0x29, 0xb, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") lookup_dcookie(0x0, &(0x7f0000000000)=""/15, 0xf) 2018/06/03 22:48:14 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet_mreqsrc(r0, 0x10d, 0xc, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f0000005800)=0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x101, 0x3, 0x3, 0x8, 0xc12, 0xfffffffffffffe00}) 2018/06/03 22:48:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f000000a000)={0x6, 0x400000004, 0x7063, 0x8, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x2c0000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0xe73, 0x100000001, 0x0, 0xf}) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x8, 0xb06d, 0x100000001, 0x9a4, 0xfff, 0x1f26, 0x1, 0x3ff, 0xa8b, 0x9}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000008fe8)={r0, &(0x7f0000001000), &(0x7f000000e000)=""/4096}, 0x18) 2018/06/03 22:48:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/51, 0x33}], 0x2, &(0x7f0000000240)=""/242, 0xf2, 0x8}, 0x8}, {{&(0x7f0000000340)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000600)=""/182, 0xb6}, {&(0x7f00000006c0)=""/144, 0x90}], 0x5, &(0x7f0000000800)=""/210, 0xd2, 0x5bb}, 0x800}], 0x2, 0x40000000, &(0x7f00000009c0)={r1, r2+10000000}) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000a00)=0xf3, &(0x7f0000000a40)=0x4) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") keyctl$reject(0xc, 0x0, 0xfffffffffffffff5, 0x4000000000006, 0x0) 2018/06/03 22:48:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80e, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3)="441f08e3000000f49727c1c6fe36cef3e26def23000200000011000013", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/12, &(0x7f0000000040)=0xc) [ 165.622802] FAT-fs (loop6): bogus number of reserved sectors [ 165.628731] FAT-fs (loop6): Can't find a valid FAT filesystem [ 165.708739] 9pnet_virtio: no channels available for device ./file0 2018/06/03 22:48:14 executing program 2: r0 = getpgid(0x0) r1 = getpgrp(r0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000000080), &(0x7f0000000040), 0x8) 2018/06/03 22:48:14 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='^vmnet1posix_acl_access+vboxnet1\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0xa, [0x8, 0xffffffff, 0x6, 0x8, 0x5, 0x6, 0x1000, 0x3802, 0x8, 0x3ff]}, 0x18) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x20, 0x2) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/06/03 22:48:14 executing program 5: mprotect(&(0x7f00007d0000/0x1000)=nil, 0x1000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x9}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000100)) [ 165.759527] 9pnet_virtio: no channels available for device ./file0 [ 165.762562] FAT-fs (loop6): bogus number of reserved sectors [ 165.772111] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:48:14 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="006ffc2f07d82c99240970") r1 = socket(0x40000000000a, 0x1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x2000000) dup3(r1, 0xffffffffffffffff, 0x0) 2018/06/03 22:48:14 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x8, 0x5, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bcsf0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/06/03 22:48:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000440)={@loopback={0x0, 0x1}, r1}, 0x14) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000200)=""/188, 0xbc}], 0x2, 0x0, 0x0, 0x6}, 0x40) sendto(r0, &(0x7f00000001c0)="12000000120055b884a1000000ce98364d7d", 0x12, 0x0, 0x0, 0x0) 2018/06/03 22:48:14 executing program 5: capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x3d) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xa1}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@empty, 0x6d, r2}) unlink(&(0x7f0000000040)='./file0\x00') [ 166.004636] FAT-fs (loop6): bogus number of reserved sectors [ 166.010622] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:48:15 executing program 4: r0 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$evdev(r0, &(0x7f0000000100), 0x0) sendfile(r0, r0, 0x0, 0x1) 2018/06/03 22:48:15 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="cd390b081bf20180c200000086dd6002290f00383a00000000000000000000000000000000010200907800000000609433df00002100ff0200003dfe2fe6f8b3d01446c7c1ab6fd9c691ce2e000000000000000000000001fe800000000000000000000000000000802a08000000006b"], 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x6e5e4859, 0x1, 0x1) 2018/06/03 22:48:15 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10005) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can={0x0, 0x0}, &(0x7f0000752ffc)=0x10, 0x0) recvmsg$netrom(r2, &(0x7f0000002780)={&(0x7f00000000c0)=@ax25={0x3, {"56d2a785ffa67d"}}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000002640)}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180), 0x212}}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0xefd) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1f, r3, 0x1, 0x6, 0x6, @random="81e71dc376d4"}, 0x14) 2018/06/03 22:48:15 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) accept$ipx(r0, 0x0, &(0x7f0000000040)) socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000080)={'team0\x00', @ifru_map}) 2018/06/03 22:48:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, @multicast1}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x80, 0x2}, &(0x7f0000000400)=0x8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x28183, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r2, 0x2}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r4, 0x100, 0x27a8}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f0000000300)='./file0\x00', 0x0, r5, r6, 0x466f, 0x480) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x12041, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) connect$packet(r7, &(0x7f0000000200)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}}, 0x14) 2018/06/03 22:48:15 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x0, @multicast2}, &(0x7f00000022c0)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002300)={0x0, @in6={{0xa, 0x4e23, 0x2, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x12}}, 0x80000000}}, 0xe07, 0x3, 0x7, 0x0, 0xa}, &(0x7f00000023c0)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002400)={r2, 0x10000}, &(0x7f0000002440)=0x8) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000fe0ff4)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0) bind$ax25(r5, &(0x7f0000000100)={0x3, {"4d4bb93f71bd53"}, 0x7fff}, 0x10) r6 = dup3(r0, r4, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x89bc32c, &(0x7f0000001280)="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") ioctl(r7, 0x8912, &(0x7f0000000000)="0054fc2f07d82c99240970") r8 = socket$inet6(0xa, 0x800, 0x10000000002a) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) ioctl$PIO_FONT(r9, 0x4b61, &(0x7f0000000280)="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") epoll_create1(0x80000) epoll_create1(0x80000) bind(r8, &(0x7f0000000200)=@generic={0xd, "5a3ddb40a54272db28d3ef5282984bed780fd5c268988364a2f5942019e7a2dbf66dc079e3100f12d98ae307cf6e55327e1752a27329352abc505a363b67de237a53913a668ebe14334a492bce534682604d0627a497998e5e4a1cd77e4ef4848b7f390c2e0ba592e0c00df0b3beb27bef301b587777ec55f31e26e0dec3"}, 0xfffffff9) mq_timedreceive(r6, &(0x7f0000000140)=""/169, 0xa9, 0x4, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f000073bffc), 0x4) r10 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x10001, 0x0) sendmsg$inet_sctp(r10, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0xa, &(0x7f0000f71000)}, 0x0) 2018/06/03 22:48:15 executing program 3: r0 = socket$inet6(0xa, 0x8001000000000002, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x66, "b9dfdf754339ccc210015b53ce2bd9c427b5dad77f2bdd19be0d5e552353189f5362ebbee05af5a9ec7845509257ad79334e8ed599b31796cb5c92829257c3f068f464d4efc7e38ef21b6eb222218173e464f9729dcc54622b306cf5716b9c6ffa447fb71d0e"}, &(0x7f0000000080)=0x6e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, &(0x7f0000000280)=0x84) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket(0x400800000000011, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={"69666230000800ffffffffffff00", 0x201012}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/06/03 22:48:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:15 executing program 0: getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setfsgid(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x101, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) 2018/06/03 22:48:15 executing program 2: r0 = getpgid(0x0) getpriority(0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) sendmsg$netrom(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={0x3, {"1618d090def757"}, 0xfffffffffffffffe}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="19419dbb80b0fd975995705b026cea881be0b8830008e468459ca372ad9a51eac188788f05628dcdd6bfefaca13d6e82579a92719bbafd822840a0ae1b719d1494ff23d9b8713ce2f393de9ab40e4672f305e1a174cec415316b31659543ee008dcd9f71badd5a0ef74e78901df01f46", 0x70}, {&(0x7f0000000240)="4b04270d16d7a673bb25bdf147a26838c9c3beedbcb6ba38e76f2ec383e087bc35ed41ec676d5196be3f2727c4615aa8f0a91917869a880d7b11aaece2946c8460079550c7c956ad7f0f843f484d0a74f9154c40fbe415b6fd075e8b8946703c4ef6cb47b35b90f7f068d1e1a79dc4a6e3f72e227e9abed7b7771be245bbb625a0bdbff076c60adb66ee85706e2610a960a3414424fbb08fad1791c238703ba0f0786f46f87081966d419674411e", 0xae}, {&(0x7f00000003c0)="c4e51df9ad847a73bb80d5f453953e298680cb9493c5f357a0782cbc5c3acc924e0ae91f4e8e9c6d8fb285e67b56ac375f0266ed7fa1122108fd4902d3e6d93d1ebce9d5dfdde86b6f3c806f1543edc101f50bf5ae00875c3adc0ef0ac580ac74c0c88e7f3424e68509e79790df0615b859abff95914042639ab438ee1b84055c43a1316c6a44717288d6ddd803e5d3aa7208f11cb56aecfd53cbd19410089aa59c3a7e2c122a69a36ae2a06d37296d4346562", 0xb3}, {&(0x7f0000000100)="a5041650", 0x4}], 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1540, 0x8000}, 0x804) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000600)="c744240036ffffffc744240200000000c7442406000000000f011424b9800000c00f3235002000000f30c74424005d950000c744240200280000c7442406000000000f011c240f35b983020000b8c5000000ba000000000f3048b87b510000000000000f23c00f21f83501000f000f23f866ba400066edc4a29501df66baf80cb849bc6f8aef66bafc0cecb9230a00000f32", 0x92}], 0x1, 0x0, &(0x7f0000000200), 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000040)={{0x1, 0x5}, 0x4a}, 0x10) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000540)) [ 166.762827] FAT-fs (loop6): bogus number of reserved sectors [ 166.768778] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:48:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40240, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x36, 0x3}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000001c0)={{r3, r4+10000000}}, &(0x7f0000000200)) dup3(r0, r1, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000240)) 2018/06/03 22:48:15 executing program 6: syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:15 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000040)}) r1 = socket$packet(0x11, 0x2, 0x300) listen(r1, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/03 22:48:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc06855c8, &(0x7f0000000080)) 2018/06/03 22:48:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) [ 166.951777] binder: 12360:12361 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/06/03 22:48:15 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x424000) r1 = accept$ax25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f00000000c0)="2f7e28ddf0875bbbd77037230f3a6f93cfc643393717995f327b55b4aac63b78", &(0x7f0000000100)=""/251}, 0x18) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) readahead(r0, 0x4e, 0x3) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/236) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000340)={0x1, 0x0, 0x5102, 0x401, 0x3f}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@nat={'nat\x00', 0x19, 0x4, 0x380, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000568], 0x0, &(0x7f0000000380), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x0, 0x8, 0x200, 'yam0\x00', 'eql\x00', 'team_slave_0\x00', 'rose0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}, {{{0x0, 0x40, 0xdbff, 'gre0\x00', 'bond_slave_0\x00', 'syz_tun\x00', 'bcsh0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @random="37a8ba40b47a", [0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x40, 0x0, 'sit0\x00', 'ip6gretap0\x00', 'veth0_to_team\x00', 'team0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x2, 0x89fb, 'team0\x00', 'ifb0\x00', 'teql0\x00', 'nr0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0xa0, 0xd8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x400}}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}]}, 0x3f8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}}, &(0x7f0000000880)=0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000008c0)={r3, 0x17}, 0x8) bind$bt_rfcomm(r0, &(0x7f0000000900)={0x1f, {0x2, 0x5880, 0x4, 0x96b0000000000000, 0xfffffffffffffffb, 0x6}, 0x1000}, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000940)) ioctl(r1, 0xac, &(0x7f0000000a00)="c3a25e68df53b6143d6d83cd729e1792cfb71128b616b89d4a4b210e0382aa48770e188e22cc7a5b5c765ae96e19cbd8430d651f6299a00b696d60272991a798ed4c7553d19bf80f9418e0405c74e0c1b1fd8aa108ad7fea30b7743bd5052bdf4c7c9bff2f9ffcf62897b2cdcee019fa4251eab6572ecce8707ce20c4fd330e0848d75b2c28f03136bfc9cd73006d28e193f59f0acffeca819ec02a03c522a1d480fe1f5f055458c4cdc81cb3e997e4b51fbb2d5b9ed07fc2a435998fdb5829ab019e94f751294d1f56a7d82d9") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000b40)) statx(r1, &(0x7f0000000b80)='./file0\x00', 0x6d00, 0x4, &(0x7f0000000bc0)) signalfd4(r1, &(0x7f0000000cc0)={0x4}, 0x8, 0x80800) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000d00)={'filter\x00', 0x2d, "ccc0a2ccf42715e5499eba30c2edc3396f00386f30591d0145f7f5aa2350abc68888babdad437b521c28b6fe31"}, &(0x7f0000000d80)=0x51) recvfrom$inet6(r0, &(0x7f0000000dc0)=""/251, 0xfb, 0x0, &(0x7f0000000ec0)={0xa, 0x4e22, 0x100000001, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) ioctl$void(r2, 0xc004587f) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000f00)) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000f40)=""/60) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000f80)={@empty, @multicast1, @remote}, &(0x7f0000000fc0)=0xc) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000001000)=[0x4, 0x80000000]) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001040)={0x4, 0x2}) getsockname$inet6(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, @local}, &(0x7f00000010c0)=0x1c) mq_open(&(0x7f0000001100)='$\'\x00', 0x0, 0x8, &(0x7f0000001140)={0x1, 0x6, 0x6, 0x5, 0x9, 0x1f, 0x7c1, 0x7}) connect$bt_l2cap(r0, &(0x7f0000001180)={0x1f, 0x1000, {0x7, 0x5, 0x10000, 0x0, 0x8001, 0x4}, 0x4}, 0xe) getpeername$netrom(r0, &(0x7f00000011c0)=@full, &(0x7f0000001240)=0x48) r4 = add_key$user(&(0x7f0000001280)='user\x00', &(0x7f00000012c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001300)="ff096156858243d768909d284c08590d8f9ab494237c9573a56414350f78724eb40f2797bb6873b0be23be1b459a7fa9e1a7aca2709154b54608f2aba33a99023fcbcbcab6bd54ae915a508d9784a301e77e1f2b6d9fc998537a532230bf3ecda51635cf85b426d2df09004d2b434476", 0x70, 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r4, 0x1) [ 167.020343] binder: BINDER_SET_CONTEXT_MGR already set [ 167.089916] binder: 12360:12371 ioctl 40046207 0 returned -16 [ 167.107997] FAT-fs (loop6): bogus number of reserved sectors [ 167.114058] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:48:16 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x4, 0x0, [{0xf001, 0x41, &(0x7f0000000100)=""/65}, {0x2, 0x1, &(0x7f0000000280)=""/1}, {0xf000, 0x79, &(0x7f00000003c0)=""/121}, {0x0, 0xcf, &(0x7f0000000440)=""/207}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)=0x6, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x80000000000, r1}) 2018/06/03 22:48:16 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)="b430ca9ef1ebd8c5d0f42d55738d0fd31fb7bb4b3dad0838437eeb23263ee84a3edd9cae95178ccb8e081ccbfb4a91fd14c7326b9513ca107f133f61fc49d92280ad7b5ad22c8ad539b7af4ae5549e97", 0x50, 0xfffffffffffffff8) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0xa2740, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) keyctl$search(0xa, r2, &(0x7f00000000c0)='id_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, r3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/06/03 22:48:16 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0xc000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x87f, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="002ad82c99340970") r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], &(0x7f0000000080)=0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) 2018/06/03 22:48:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0247e22f05d02c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair(0x5, 0x800, 0xff, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000001c0)={0x8, 0x6, 0x1790, 0x7a, &(0x7f0000000240)=""/122, 0xc6, &(0x7f00000002c0)=""/198, 0x1000, &(0x7f00000003c0)=""/4096}) syz_emit_ethernet(0xffd1, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/251, 0xfb, 0xfb, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) 2018/06/03 22:48:16 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000010ff0)={0x1d}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r3}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000030000220000000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="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"], 0x48}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0xc0, 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x6, 0x40000) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000140)) ioctl(r5, 0x200000000008912, &(0x7f0000000000)="0047fc2f07d82c99240970") recvmmsg(r4, &(0x7f00000078c0)=[{{&(0x7f0000004000)=@l2, 0x80, &(0x7f00000051c0)}}], 0x1, 0x0, &(0x7f0000007b00)={0x77359400}) dup2(r0, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r6, 0x1, 0x1, 0x1f, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="bc5cea1f3da72f1aec0b", 0xa, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}}, 0x1c) 2018/06/03 22:48:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:16 executing program 0: getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setfsgid(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x101, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) 2018/06/03 22:48:16 executing program 5: modify_ldt$write(0x1, &(0x7f0000000080)={0x1, 0x20001000, 0xffffffff, 0x7, 0x5, 0x301, 0x5, 0x7ff, 0x2, 0x80}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x408240, 0x0) r1 = shmget$private(0x0, 0x7000, 0xa8cf3120b9296bc, &(0x7f0000ff7000/0x7000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000001c0)={0x8000, 0x1000, 0x1, 0x2}, 0x6) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x589000) bind$rds(r3, &(0x7f0000000100)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) r4 = dup(r2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0xd5f, 0x0, 0xa13e, 0x10001}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TCXONC(r4, 0x540a, 0xa) [ 167.855236] FAT-fs (loop6): bogus number of reserved sectors [ 167.861242] FAT-fs (loop6): Can't find a valid FAT filesystem [ 167.874045] QAT: Invalid ioctl 2018/06/03 22:48:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_pts(r0, 0x20201) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) write(r2, &(0x7f0000000140), 0x28d) [ 167.896438] QAT: Invalid ioctl 2018/06/03 22:48:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4008ae93, &(0x7f0000000080)) ioctl(r1, 0x9, &(0x7f0000000000)="3edafbd14822ac75fe786b564fa5902c42f6532ac854647289745490894145bd") 2018/06/03 22:48:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:16 executing program 4: unshare(0x40000000) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000eaef033708000602000bfffffffffffffcd1aaaaaaaaaaaa69f5d29500ffff000000000000000000"], 0x68) 2018/06/03 22:48:16 executing program 7: 2018/06/03 22:48:16 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000021ff4)={0x2001}) socket$inet(0x2, 0x3, 0x5) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000340)="96afa1380fa59bdadbe035f9fda6dd5b7230a39bb40e47e6b4b7cc9e3b53e6b8dccf5cb5606b0b12ba43c47541daa661b07cd2592c7c790148b927ed1d677a15c88570b9b768004fd300bd58328a94c8660878b19ebcb1c2d65ab3807347f0fec56695f2a2b914b60ca027c78c259c711ea5b6a782f5aa58541d48c64944ec5460a2fc5ce7b644738b9befff85c535805b014647a84baf4a2691", &(0x7f0000000080)="fcf52ef1213c", 0x1}, 0x20) [ 168.030958] FAT-fs (loop6): bogus number of reserved sectors [ 168.036958] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:48:16 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="000627bd7000fedbdf2506000000480003001400020076657468305f746f5f7465616d00000008000800ff0000000800010003000000080004000500000008000400ff070000080007004e23000008000800000000000800040008000000080005000000000038000100080002003c000000080005000300000008000b00736970000c0006006c626c63000000000800050003000000080001000a000000080005004505000008000500aa0d000008000400570f0000"], 0xbc}, 0x1, 0x0, 0x0, 0x4048804}, 0x20000800) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x3b) sendmsg$inet_sctp(r2, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=' ', 0x1}], 0x1}, 0x20004001) shutdown(r2, 0x2) recvfrom$inet(r2, &(0x7f0000000040)=""/75, 0x4b, 0x40000001, &(0x7f00000000c0)={0x2}, 0x709000) [ 168.092187] IPVS: ftp: loaded support on port[0] = 21 [ 168.242968] IPVS: ftp: loaded support on port[0] = 21 [ 168.635302] Unknown ioctl 21569 [ 168.664143] Unknown ioctl 21569 2018/06/03 22:48:17 executing program 4: seccomp(0x0, 0x1, &(0x7f0000000100)={0x3, &(0x7f0000000240)=[{}, {0x0, 0x8001}, {}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x24, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000280)="47823329e6db548078ff30e1e6d26c0361ecfbbd5dd339b89c794c397c9f197c06daf213e96b3dc3ab3df49d0de26aa1bf64d1b2cb3616ac19d74c2350b95d7d944c30ebea9108b98b3732301f10786abac75a8f5ca37de867395953c4a28b17c32c70fd30b7fbcbf8d1709c81d8e978bcf64914a9d60f88a0a8ebafebaee03464da3ffe32a79a05766bcbe98e57856b3a269a3819d945a7f6a1ecaa82c5ead95a579a956a265a0074c68032f4bcbcd84c9a90064d93a829ea222408b6790f38", 0xc0, 0x7ff}, {&(0x7f0000000340)="e20ed17e7020583a53c0ea553085c66110578ef0b4e1da43e6991fbb13f90aa77544dacf70f991afb5fa0d7a0b08c884bd3dedfd8fbe10d0fa0713ab5a71d683e0fdc85c09709f736ce9f2c57e9b225d7223a26a7ae91138ce2ca3b8120b6593082910d0dd7e86989c314892dd81beb717ce6db4dcdb8780d78fea85d89d1620ac66038f67c7f8102b", 0x89, 0x8}, {&(0x7f0000000400)="0b48c1683b242a42a6b7b98e7daf20263f71aeb19b8f2a2b77553d34fcfc764534e0a48d48f01d68c58b718753ef2382d58bc1d3521012325b574d89550fadd1d10e370e1ee56ea287b615bb57caa901da4d263f5f39080df965732dc5f85dc59ab604bcab364a1a67a5d3a53b1b10ada5fa8ae2014481e2435f86ccb1776d4c7c9b7fd6c75005917ee9f0b41a890c6e7bdd5d09af228f79f032918e5f6e18be3571826c5f47fa603d4bb08627a1c4cc19ae5bfbb733af503f323fc78513ff0aa0bbc44b1f1627fc2f1640a9b355922b866cfcf11345b56d54d208fcc55a29e48122ce41fdd2f27fec819aa7ddb5fd", 0xef, 0x100000001}, {&(0x7f0000000500)="aef7d81975ab9d38bff7a36ff0ca4e33873f925ffcd101b322670b78a24f0e902da393b277ec51e8d8c2b8bde72d3aa9a7315247511e67393af172d5429b2a5bbf282a5c23528a05cf9cadd7e5230c6d90c6a8873874e617665d0941682e2e5dd85d4e11a517fa48916913a7790402c41fd125d6715e7cf429be6c27a03e8420c3d75eeee84f122a984e4ee639ceb024b5471e9e84ff591173c2e767", 0x9c, 0x78e}], 0x2, &(0x7f0000000200)={'nouuid,', {[{@biosize={'biosize', 0x3d, [0x39, 0x32, 0x38, 0x78, 0x35, 0x3f, 0x3d, 0x3d, 0x34]}, 0x2c}, {@sysvgroups='sysvgroups', 0x2c}, {@gquota='gquota', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@noattr2='noattr2', 0x2c}]}}) r0 = shmget$private(0x0, 0x4000, 0x804, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/132) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 2018/06/03 22:48:17 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x17}}) 2018/06/03 22:48:17 executing program 6 (fault-call:2 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:17 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x4, 0x0, [{0xf001, 0x41, &(0x7f0000000100)=""/65}, {0x2, 0x1, &(0x7f0000000280)=""/1}, {0xf000, 0x79, &(0x7f00000003c0)=""/121}, {0x0, 0xcf, &(0x7f0000000440)=""/207}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)=0x6, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x80000000000, r1}) 2018/06/03 22:48:17 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) times(&(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/201, &(0x7f0000000140)=0xc9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000280)=""/11, 0xb6) 2018/06/03 22:48:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) fchdir(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r2, 0x40047452, &(0x7f0000d1df52)=""/174) 2018/06/03 22:48:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)={0x5, 0x0, [{0x80000008, 0x6, 0x4, 0x9, 0x7, 0x8, 0x1f}, {0x0, 0xd9, 0x4, 0x4, 0x2, 0x9, 0xb7}, {0xd, 0x10000, 0x6, 0x400, 0x7f, 0x4000000040000000, 0x5}, {0x80000019, 0x7ff, 0x4, 0x1b, 0x0, 0x7, 0x3}, {0x40000005, 0x7, 0x1, 0xfff, 0x0, 0x5}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 2018/06/03 22:48:17 executing program 3: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f00000000c0), &(0x7f0000000040)="7072f29314723729b3e0a24fae7e00cd8b86caffe720be6c9fcfe63b80e84afadb4de6a3ff8cb6310183a5423401eabcafddc78f70143bfe0eacdc3f8c7f88013501fec1e12a4470839e6405") mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) lookup_dcookie(0x40, &(0x7f0000000200)=""/255, 0xff) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') read$eventfd(r0, &(0x7f0000000140), 0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 169.050819] FAT-fs (loop6): bogus number of reserved sectors [ 169.057102] FAT-fs (loop6): Can't find a valid FAT filesystem [ 169.073676] XFS (loop4): unknown mount option [biosize=928x5?==4]. [ 169.143684] XFS (loop4): unknown mount option [biosize=928x5?==4]. [ 169.164979] FAULT_INJECTION: forcing a failure. [ 169.164979] name failslab, interval 1, probability 0, space 0, times 1 [ 169.176379] CPU: 1 PID: 12479 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 169.187579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.197216] Call Trace: [ 169.199836] dump_stack+0x1b9/0x294 [ 169.203496] ? dump_stack_print_info.cold.2+0x52/0x52 [ 169.208718] ? perf_trace_lock_acquire+0xe3/0x980 [ 169.213586] ? perf_trace_lock+0xd6/0x900 [ 169.217844] should_fail.cold.4+0xa/0x1a [ 169.221940] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 169.227081] ? lock_downgrade+0x8e0/0x8e0 [ 169.231264] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 169.236832] ? proc_fail_nth_write+0x96/0x1f0 [ 169.241378] ? find_held_lock+0x36/0x1c0 [ 169.245507] ? check_same_owner+0x320/0x320 [ 169.249869] ? rcu_note_context_switch+0x710/0x710 [ 169.254835] __should_failslab+0x124/0x180 [ 169.259102] should_failslab+0x9/0x14 [ 169.262931] __kmalloc_track_caller+0x2c4/0x760 [ 169.267636] ? strncpy_from_user+0x500/0x500 [ 169.272078] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 169.277645] ? strndup_user+0x77/0xd0 [ 169.281475] memdup_user+0x2c/0xa0 [ 169.285047] strndup_user+0x77/0xd0 [ 169.288703] ksys_mount+0x3c/0x140 [ 169.292282] __x64_sys_mount+0xbe/0x150 [ 169.296285] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 169.301335] do_syscall_64+0x1b1/0x800 [ 169.305255] ? finish_task_switch+0x1ca/0x840 [ 169.309780] ? syscall_return_slowpath+0x5c0/0x5c0 [ 169.314744] ? syscall_return_slowpath+0x30f/0x5c0 [ 169.319705] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 169.325108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.330008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.335221] RIP: 0033:0x455a09 2018/06/03 22:48:18 executing program 1: keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0xbc0c4ddf84598891) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x100000000}, &(0x7f0000000100)=0x8) 2018/06/03 22:48:18 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x2800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000002c0)=0x1, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="4cdd50"], 0x3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0xdd, "4ea97ec11f5bd76de2f8160b0f79371e9548c3b897f78760da1577d6bd4a105b040168a30c2e5974cb53653cd5724516e48bcf2563765934c67965b9c373192ada137155008be25df442c48a960ca45eeab6c6b25dab55294390173a38664e29e7c716a0991739a1d6cfc36f0101ec30d4040e9143436cb2206b92012742c865a8b3c021464af90a81fdda200778f33eaf7b420efc8254e596cdc10edfec7ad0628873f15e63f4b44c71429fee90d7756f0418529130ecbfb4f866a149024815962d5b5ad63c85694347a5ec014dcfd6c513d2f6b4d90547d983d811b2"}, &(0x7f00000000c0)=0x101) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [], 0x1}}, &(0x7f0000000100)=0x20) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @rand_addr=0x3}, {0x1, @random="08a4eb58295c"}, 0x2, {0x2, 0x4e20, @rand_addr=0xffffffffffffcdef}, 'tunl0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/03 22:48:18 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xa0001, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xff8000000000, 0x0, 0x1, r1}) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000180)={"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"}) r2 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 2018/06/03 22:48:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000000000), 0x8080fffffffe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x100, 0x4) [ 169.338408] RSP: 002b:00007fa9734a6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.346130] RAX: ffffffffffffffda RBX: 00007fa9734a76d4 RCX: 0000000000455a09 [ 169.353404] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 169.360667] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.367927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 169.375192] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000000 2018/06/03 22:48:18 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x100000055cb, 0x40000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20}}, 0x7, 0x38, 0x6b8c, 0x5, 0x8}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="ef000000c4d01c74bb9ff46ccbfa3aeea7f42885247a6c2310948baee31c3020c9fccf376b89f7b77ce1ecc88dc5acc142030000002ea05f8ebc6026f051bfdf8a1e76b2dc96b714e2fbf0a0267c03b0674cea9cf8bc9993ad9716d523af1e71138c5871039017dd8e060021870217c442092e2d3c740f5ad26d280962fa6f915cece54f48e642d75bfc00240f21384ae1e2800d94a7f393ad2be382faf6854ed3c15d28e15fdbf476f5a9018b5c2941948206ce4874911f574b63d037b99debac366b77807e18d2e568f0e8411ed4a83414854744ddbf33a9b3c1256c865493c1d2ed4b40a41b20e6a797d19be7aa0f350000"], &(0x7f0000000480)=0xf7) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x4003) fallocate(r0, 0x2, 0x81, 0x271) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffff82e, 0x8, 0xf}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r1, 0x10000, 0x5, 0xffffffff, 0x7fffffff, 0xffff}, 0x14) 2018/06/03 22:48:18 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002940)="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", 0x111}, {&(0x7f0000000300)="43827df432ca384599c982fe3fedcea540a33c57ed34b495d63b22c417d145b2b1eef6a24b07ecbb0b820ea9cde9311016b1a8f3780461cdbedccb1d84ec02f57205a60ff8b10a9e5fbb1a4e3ffed8cf622f82181fe578fa0b869589bfc15df20df763276b5a076c7782bf7bc6daf26f41ef33ed5d6c8aae33235e2bcebb520a85d7100b80080f89796410e5aa7a59e6d0bbef53be744fa5b7a77f7210db415d36d4eefa343420d96ae9fd401598f5e4e8cf9e9042c86330f901128ca19fa71ddec5ee93bf93221f8fcf", 0xca}], 0x2, 0x0, 0x0, 0x8800}], 0x1, 0x40000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/2) recvmmsg(r1, &(0x7f00000011c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/129, 0x81}], 0x3, &(0x7f0000000700)=""/194, 0xc2}}], 0x1, 0x0, &(0x7f0000001340)) 2018/06/03 22:48:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xffffffffffffffff, 0x85) r1 = memfd_create(&(0x7f0000001080)="776c616e31256367726f75707d656d3024656d3073656c696e7578276367726f7570852f6c6f2a00", 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xa0, r2, 0x300, 0x70bd29, 0x25dfdbfc, {0x1}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) recvfrom$inet(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x1, &(0x7f0000001040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) 2018/06/03 22:48:18 executing program 6 (fault-call:2 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:18 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) socket(0xa, 0x1, 0x0) ioctl(r0, 0x8fa57ad, &(0x7f0000000040)="c6e4a6354ccf42df2e26262c8523bf010bf66f720c661b904c5bc0a0f1251a4810a4d9054d7da0ba8b7388e3ef46") setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000008000"], 0x8) fchdir(r0) 2018/06/03 22:48:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$void(r4, 0xc0045878) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r5, 0x7ff, 0x4, [0x1, 0x9, 0x7fff, 0x401]}, 0x10) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r2, r1, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) dup2(r2, r4) 2018/06/03 22:48:18 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x6, &(0x7f0000000080)="81ffffffffffffff240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x1c, &(0x7f0000000040), &(0x7f0000013000)=0xfffffffffffffdf8) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000000c0)={'gretap0\x00', 0xfffffffffffffffe}) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 2018/06/03 22:48:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000e80)=[{&(0x7f0000005a80)="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", 0x579}], 0x1) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000ff7f000000"], 0x0, 0x0, &(0x7f0000002000)}) 2018/06/03 22:48:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000d30000000002575f50c8ff79e0a15d0edb8000007a0a00ffffffff006b38"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x40, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x1}, &(0x7f0000000400)=0x8) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000003c0), 0x4) 2018/06/03 22:48:18 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x608200, 0x0) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff, 0x440}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x802, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x102, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x2, r3}) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000e9"], 0x1}, 0x1, 0x0, 0x0, 0x3}, 0x0) 2018/06/03 22:48:18 executing program 2: r0 = request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)=')#:#em0cgroupGPL\x00', 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x8800) r2 = gettid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={[], 0x2, 0x7, 0x1, 0xff, 0x401, r2}) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x100000001, 0x3, 0x80, &(0x7f0000ffc000/0x2000)=nil, 0x101}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x20, 0x400) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000180)=0x8) keyctl$instantiate(0xc, r0, &(0x7f0000000100)="fcc42b4c074aff73d8faa221ce3aa723da39ece904cfd203f27b862be50c9506ff18712bfd365995820fc8f3c8ac52f160", 0x31, r3) fadvise64(r4, 0x0, 0x8000, 0x2) 2018/06/03 22:48:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x9, 0x1, 0x3000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r1) close(r3) 2018/06/03 22:48:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x4a000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x2e, 0x4) sendfile(r1, r1, &(0x7f0000000180), 0x5) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setflags(r2, 0x2, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000280)={{0x0, 0x1, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0)={0x800020000010}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e22, 0x80000000, @loopback={0x0, 0x1}, 0x9}, {0xa, 0x4e23, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0xb76, [0x1ff, 0xfffffffffffffffe, 0x1f, 0x19, 0x4, 0x4, 0x7, 0x3ff]}, 0x5c) [ 170.039306] binder: 12553:12554 got transaction with invalid data ptr [ 170.069132] binder: 12553:12554 transaction failed 29201/-14, size 241-0 line 2990 [ 170.124224] binder: BINDER_SET_CONTEXT_MGR already set [ 170.158251] QAT: Invalid ioctl [ 170.171647] binder: 12553:12557 ioctl 40046207 0 returned -16 [ 170.191329] QAT: Invalid ioctl 2018/06/03 22:48:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000011c0)) 2018/06/03 22:48:19 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) close(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x62, "a837fb0592b36cc180d4e03e049679f822e31cf6aabb4c1c76ca2af9a3e11dda00708eed04be516327a0c7a5bd0ccfa97d17d43e98e587b52a43a80cbec6a5da7e2e2a285439464c528c05d9f7d1f235fc42a5de92c2c9628e0e7148bdcf54402689"}, &(0x7f0000000100)=0x6a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x6}, &(0x7f0000000180)=0x8) 2018/06/03 22:48:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={r2, 0x80000, r3}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r4 = socket$inet(0x2, 0x8, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x1f, 0x5, 0x3f, 0x1, 0x1, 0x3, 0x7, 0x1ff, 0x6, 0xe618, 0x3, 0x33}) sendto$inet(r4, &(0x7f0000001640), 0x292, 0x200007fd, &(0x7f0000e68000)={0x2}, 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_buf(r5, 0x1, 0x4, &(0x7f0000000100)=""/237, &(0x7f0000000040)=0xed) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x8d, @empty, 0x4e22, 0x0, 'sh\x00', 0x30, 0xfa, 0x24}, 0x2c) 2018/06/03 22:48:19 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x6080, 0x0) ioctl(r0, 0x4, &(0x7f0000000200)="2ab725c02316d05e01afa88bfc1692ba654df72569dba46fd4b159583e949305ea5d910f468575a5f707f2e977d601e9681f6372bbf6319c65b056f8be6bd95c9b25f4c71a28acf9215589a31a16a1e890287107534570768984b4985fa4462a9727f585b136aa4eb5e194eeabe9d2a1f34306e66ffc5c765a83508727c1603bdb101aa6c53a386b3f952540f63d4940ac4bcf387d82920a329d89d5602bd2a009676f887e492b183b48518b43cf3afdb2e9bee91b919b22dcc7a1") ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000000c0)) [ 170.251720] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/03 22:48:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000011c0)) 2018/06/03 22:48:19 executing program 7: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) syz_open_dev$sndseq(&(0x7f00000005c0)='/dev/snd/seq\x00', 0x0, 0x111000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0x200000000004, 0x810, r0, 0x0) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r4 = inotify_add_watch(r2, &(0x7f0000000600)='./file0\x00', 0x2000000) inotify_rm_watch(r1, r4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000640)={0x9, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000680)={0x3, r5, 0x1, 0x5}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/73, 0x49}, {&(0x7f00000000c0)=""/232, 0xe8}, {&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/51, 0x33}], 0x7) [ 170.926289] device bridge_slave_1 left promiscuous mode [ 170.931945] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.942750] device bridge_slave_0 left promiscuous mode [ 170.948419] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.988800] team0 (unregistering): Port device team_slave_1 removed [ 171.002446] team0 (unregistering): Port device team_slave_0 removed [ 171.012849] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 171.028754] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 171.058822] bond0 (unregistering): Released all slaves [ 171.953596] IPVS: ftp: loaded support on port[0] = 21 [ 172.340554] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.346983] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.354211] device bridge_slave_0 entered promiscuous mode [ 172.379783] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.386195] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.393399] device bridge_slave_1 entered promiscuous mode [ 172.420107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.446296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.518272] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.546727] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.658607] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.665796] team0: Port device team_slave_0 added [ 172.690667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.697871] team0: Port device team_slave_1 added [ 172.724434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.752073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.778963] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.786185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.794244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.816308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.823512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.832104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.075707] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.083668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.090350] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.096771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.104421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.471199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.979248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.069228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.153428] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.159649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.167442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.247594] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.728845] FAT-fs (loop6): bogus number of reserved sectors [ 174.734894] FAT-fs (loop6): Can't find a valid FAT filesystem [ 174.753136] FAULT_INJECTION: forcing a failure. [ 174.753136] name failslab, interval 1, probability 0, space 0, times 0 [ 174.764453] CPU: 0 PID: 12871 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 174.771840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.781209] Call Trace: [ 174.783803] dump_stack+0x1b9/0x294 [ 174.787425] ? dump_stack_print_info.cold.2+0x52/0x52 [ 174.792613] ? __save_stack_trace+0x7e/0xd0 [ 174.796933] should_fail.cold.4+0xa/0x1a [ 174.800988] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 174.806086] ? save_stack+0x43/0xd0 [ 174.809701] ? kasan_kmalloc+0xc4/0xe0 [ 174.813601] ? __kmalloc_track_caller+0x14a/0x760 [ 174.818528] ? memdup_user+0x2c/0xa0 [ 174.822232] ? strndup_user+0x77/0xd0 [ 174.826033] ? graph_lock+0x170/0x170 [ 174.829833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.835186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 174.840713] ? proc_fail_nth_write+0x96/0x1f0 [ 174.845211] ? proc_cwd_link+0x1d0/0x1d0 [ 174.849265] ? find_held_lock+0x36/0x1c0 [ 174.853325] ? check_same_owner+0x320/0x320 [ 174.857643] ? lock_release+0xa10/0xa10 [ 174.861615] ? rcu_note_context_switch+0x710/0x710 [ 174.866533] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 174.871542] ? __check_object_size+0x95/0x5d9 [ 174.876044] __should_failslab+0x124/0x180 [ 174.880280] should_failslab+0x9/0x14 [ 174.884074] __kmalloc_track_caller+0x2c4/0x760 [ 174.888734] ? strncpy_from_user+0x500/0x500 [ 174.893132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.898838] ? strndup_user+0x77/0xd0 [ 174.902640] memdup_user+0x2c/0xa0 [ 174.906168] strndup_user+0x77/0xd0 [ 174.909782] ksys_mount+0x73/0x140 [ 174.913309] __x64_sys_mount+0xbe/0x150 [ 174.917270] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 174.922276] do_syscall_64+0x1b1/0x800 [ 174.926150] ? finish_task_switch+0x1ca/0x840 [ 174.930632] ? syscall_return_slowpath+0x5c0/0x5c0 [ 174.935569] ? syscall_return_slowpath+0x30f/0x5c0 [ 174.940601] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 174.945978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.950817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.956002] RIP: 0033:0x455a09 [ 174.959187] RSP: 002b:00007f527f095c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.966895] RAX: ffffffffffffffda RBX: 00007f527f0966d4 RCX: 0000000000455a09 2018/06/03 22:48:23 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) close(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x62, "a837fb0592b36cc180d4e03e049679f822e31cf6aabb4c1c76ca2af9a3e11dda00708eed04be516327a0c7a5bd0ccfa97d17d43e98e587b52a43a80cbec6a5da7e2e2a285439464c528c05d9f7d1f235fc42a5de92c2c9628e0e7148bdcf54402689"}, &(0x7f0000000100)=0x6a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x6}, &(0x7f0000000180)=0x8) 2018/06/03 22:48:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x4, 0x1f}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x7f, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000003a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80, &(0x7f0000003e40), 0x0, &(0x7f0000000040)}}, {{&(0x7f0000004180)=@nl=@kern={0x10}, 0x80, &(0x7f0000004540), 0x0, &(0x7f00000000c0)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 2018/06/03 22:48:23 executing program 5: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0x4) 2018/06/03 22:48:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/55) 2018/06/03 22:48:23 executing program 4: prctl$getname(0x10, &(0x7f0000000180)=""/176) prctl$intptr(0x200000000002c, 0xdffffffffffffffd) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xbad, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x3, {{0x2, 0x4e21}}, 0x1, 0x3, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0x4e22, @multicast2=0xe0000002}}, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}]}, 0x210) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth0_to_team\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x7, 0xfff, 0x208, 0x3, 0x80, 0x4, 0x200, 0x6, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x9, 0x1}, &(0x7f0000000100)=0x8) 2018/06/03 22:48:23 executing program 6 (fault-call:2 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:23 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 2018/06/03 22:48:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='#! .@file0 /dev/loop#\x00 /dev/loop#\x00\n'], 0x24) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000080)=0x6, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) [ 174.974165] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 174.981550] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.988820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 174.996082] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000001 2018/06/03 22:48:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58) close(r3) 2018/06/03 22:48:24 executing program 4: r0 = socket$inet6(0xa, 0x80806, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/103) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r2, 0x1) sendto$inet6(r2, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r2, &(0x7f000050ef88)=[{{0x0, 0x0, &(0x7f0000e8afc0)=[{&(0x7f0000654000)='c', 0x1}], 0x1, &(0x7f0000607000)}}], 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000f96000)={0x9, 0x7fff}, 0xfe53) close(r2) 2018/06/03 22:48:24 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) close(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x62, "a837fb0592b36cc180d4e03e049679f822e31cf6aabb4c1c76ca2af9a3e11dda00708eed04be516327a0c7a5bd0ccfa97d17d43e98e587b52a43a80cbec6a5da7e2e2a285439464c528c05d9f7d1f235fc42a5de92c2c9628e0e7148bdcf54402689"}, &(0x7f0000000100)=0x6a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x6}, &(0x7f0000000180)=0x8) 2018/06/03 22:48:24 executing program 2: r0 = socket(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000007c0)={@local={0xfe, 0x80, [], 0xaa}, r1}, 0x14) sendto$inet(r0, &(0x7f0000dbf000), 0x14c, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x114, 0x2715, &(0x7f0000000000)=""/13, &(0x7f0000001140)=0x4d) 2018/06/03 22:48:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r2, 0x400, 0x70bd29, 0x25dfdbfb, {0x8}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x97}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x44) 2018/06/03 22:48:24 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r1, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='/\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001880)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000001b40), &(0x7f0000001b80)=0x10) fstat(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() sendmsg$netlink(r1, &(0x7f0000001b00)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x55404400}, 0xc, &(0x7f0000001940)=[{&(0x7f0000000240)={0x162c, 0x34, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x70, 0x31, @binary="f40fa4525779d7674d5653e7694a7a6d824e09b4049d603ea694dc98686392d00090340cd2bab68586c21e2b69470895e785c0d85d510b0b5dbf4f89566be018e0f681669d73780ccf7a7bdfbc1fea9e47c135004194ccab32c10c38a3828762b9e2bc37ea4e3adaa7"}, @nested={0x35c, 0x1, [@generic="8a9e22ed97b8ee60026dc4d6f46f55dd6c49a5e1d43f1ab38ed7645e6433f97819d2ba14361ff3d036bf98716367cb9b152b764a76ee03c605732983111826065c489dc853be030a62232540fd37daf09c8344a303ea43f2df097c8467dc3122cfe9bdb19746e17904651419cad1d68df1572bc9b8a5e7cc390f90cbb8d5d1f68c18b27b5846177830ed26df51650f44e1ab01856d24bb4cdc2b0c98d44dc2fedb0475407d9c7a3a67dd8bf4fd70a6c6eaad3c926004d6d2297c254efa5deb4695e24265633b715a8a8f8524ed40be45e984d1560894c11293af70ba6c6bc8a2a4786e4a54f126f0de", @typed={0x8, 0x4f, @u32=0x3}, @typed={0x8, 0x1c, @str='\x00'}, @typed={0x8, 0x46, @ipv4=@multicast1=0xe0000001}, @generic="39fd6b47cfc82c883921aaae1fe9b8cc7faac9902d7d377f3007941140bf1f4c6e0ba9ed930d145a67f5d4d3ce3ebdadf5ca24f326aa0ba1477f38e901a86430b82507e10dba0cbbe64bcc73a77aa35fc5a28bb2ad10471a100c54c1a2d2d629df694b247606aba59c8df5fa8343d4468b209a8aa0feae7606963fe9753b086deee34b69237b1bd63dcdaab739dbe2abb7b30314d18d5df1df188bb0888fdf6c", @typed={0x8, 0x4f, @fd=r0}, @generic="9bcbccab8c08c3cc4d1d603729b532eebc67d7552c345045e2efd4bdf9e239", @typed={0x8, 0x58, @u32}, @generic="201c7bdfbca0a8d98f3b58a20d8ff7a155ffa3768e8b511f8ee254e7d7a81f07f934bc90d2e83ac8e6b18fbc2ba0cfcf25f14509c8071f5283f31a398aa4a04f563ff7b6980ba85cf49f1aa6dcd275bf60e13ab7dcaf9f45b8ddef578db68b76a8fb2fa5cbc310154d15db10e1c5d892eecedb139f9afb1b0e28ab22c1e3fd5710a96a845ff2c7c4d6f2756ab8f59c4af0fc9a7e81436ad6e16434ff58614edeea71016b1178a4c4b3ea301950019c4165b68bac9e2726867df9620ea8", @generic="7f2ffc5607fe147f3dfb5b9df28cbab2af5526f3ec8bd492e648054e4ccff629bd23d655c068b41a5670c7f56d08c0b3f3f008a78d975c5a20c1e3d9339f52a09e860e294a4b46e4e937c04cedb28c0e982491bc5d581be3406dc64ca07d36bd8b033b35d7926224480b07a2e23493659ddc7722f30e5994527637b4aa6c5f14b8aac39b125dc832e63364d5a5f66d43f4ceae410b8a32983b292a5b94c923d70198c9322c63d51e07cfb4074388dd057bb24754c068407a9c7559f620d88d78cbec3a23e368c784542fd2"]}, @typed={0x4, 0x16}, @typed={0x10, 0x91, @str='\'.trusted\x00'}, @typed={0x8, 0x7e, @uid=r2}, @nested={0x1220, 0x19, [@typed={0x8, 0x45, @uid=r3}, @generic="1c3fc563e49219a04a69f236792e743dffd18fa43cb4debe60f6be162a20edb0b16aa9112da1d73b71cb08b23297ee6c9b120e81fd58518923fad7a838c302c271d57d92f977da7ad6af763afed375", @typed={0x8, 0x21, @fd=r0}, @typed={0x8, 0x74, @ipv4=@rand_addr=0x7fffffff}, @generic="fd2d514b5971f706293a225c86ea26aa6ad4e69a4cc89fb6b48d5f70ae6be1b463c2d394cc37eb8b6a79d6a50f58be7e8364005bb78baf638fd63a37431a3cfb30272b2c318597efa7b36a10f6032a02ba4a786e695dfee2faf109ce710b065a3a1de60e846258203775caf3b48137b0d511a12d2ec5be590dc7f7025a61b8a2d1d15be74303dff28b559bd59e5d07b674420a18eb86b9b27aa21cfba61aa1ccdc1c2105b40811db1054e02c97228ed4c918dd63739661206e8eaeb549cfd99a83ca15500601b307ea76e42d83d999f28f302cfafc14", @generic="002c54a891220f57e5331f9fb5fd8f2f414e9dcd676183092146d8c43c9462650626406dcb67b63f073424672e425052905bc4719e5fc3301def35248c104aa7c8c03185d1366c8e530ba7e73a7b2cc44cb2f02d0bc3fc97a42f9ae06cb52149f67c11dae6eb20a2cb6f07fe9ac043c92cb3b2593728958f829d63e1dbf1f604605e2eac0860f334a17edd440e546b25eec0b8107c9638f27546116a182b7bf7390e9426e1e50dcedce15635724e9b5e897a3e571bcaf81d6e46b5de63dc6d6b5741d5f881c5ce3ac872dd722c31557c515d8ff658f7ca14d0faa88c5e8026c4c95185b4a8b2e79808ef166c412e801b414343aadb8b5de08ffc376a21fa19d3e501a29a3d32ced4fdf9f2d0b1371d996a22e703ada9683fe82f823bde7a6173c25aefe8375a97fc389584d896cb389e1ae5e4a1638a7ee15ff4e4d5d2d7547ef46796363ca612f5c80c5cd0379b9147ff1a4a5480a8dfa55255ce18bcb70d253b272cc7dc82fefb6b1a1e5f4da9fe23b20d8710dc0b9be4fe3e30418f395cae84f5c47ac10d25c3e1cef6d4d9e21b3126bce519d3b2cac81b3bcaa5e3c408f9845e6e23f230fafac609124855a496f5cdde1dece45f6871ce3898e1e5d5dd7299c1bd599316fa20499b783a75538320d66738d823838019b337db3b700f2b468620ce9afdb231e8fbdf7f0be47fb79b8fbd0507ec5987f83a351edc2a9b3c4812449ea5637e5c2f3b77403b4914866e6fbb9fffa2f3a610de16e4798964b2bfb566c901a579858561eee38a4dba8bb653eff211760b23b0da9c091a39b63ac74cd02eb37afe0d48f6b0fae588d9c2ca6221eb70d02e364222c208715b5d76927454c2db768f00c5d871f583164be74e73d9f49428608c204143de5af3af0e0549f37b5378924aa21822a65e83df8bec0a496662da843d43b317f283e42389e3f15742b64f40411dd3c2220420108955ab758b7ae7efc89e2961ea7ffe76ee8c71dfb904d7050234e1d63632a2289e09264b1bf48129a67dbeac7c532c6c57e37f0414403816b82197907bea8fdb3519073e314b3035a4a72e0c4998376076f1a923e3e7ecf92864d9906b902ac6fac5c2519cb96f5b9bcb76f055a317b67fddb044b321c5702e6f82bc8811aadee0041d445d21f96f8e5680097a420b737f5407d9a49ac35ea42ba0f1084b48bad17c0a907b093ed8df9c452d1b1ce0a2ada7cc05bc28a39e02343c1492b9a878f6e1b55c576f84dfcee8f45badd4fd78bfa9a962c22beec05cc5b6c51b74262b4e29ea2e94dfddf773aa96fcf87935d85e8053a07fa209ec7a054f0fe8291f766b88fd3bacc25f2fe59373a1dadfbc2e35c57cd83c68fde6ea33b948c03728fd9aa19af9f0950f73e900721117c56cfed723feeac6dc01a7ed884bb4805536479d7ea0641ee7f303ded45c62365fae97d5b9787662247c2b306bb141559f3dcd5644d0c710c746556bf79c717250650739938680aa30cf6a7be466ee2bcbf69bd75645e81dd7a5458ae2a75df7f921d5256725ebdf5ad32b588935ff145fc1c30e0f120de090f44b56de61becd33e68502e4c0a936de889b071a138568643066101c626c045e1c4aaee14a208d1c1e5b38ac477e5dfde90a652fd7d8e5fa8e892e13999c74393712713761bfe0552a60f39bf919e10fddeb3f695a91e28152f7a2c1a13e1150d1402f9dc7588043869608e0ddc016235160f4bd056825f12ba37da89e706c65c889062c7797a2b4e73702e394154d68285a150123196f9ba5f7eae16c654ca0613eeaa09f3d386579bf2a8fd6e21b6d273421b2967f67576f38ec802f04f0491344c95acc9bc153162b5ac72489cbe7cd48894ccdd3a4147904115fdfa1742c5a76e73990e34257384e7e565a5a2956ed5d662273234787d456ef2da55637109078d286957f974cc038b4b832f5f4cd8a1caf2f6fcd4ff8fae04ac5355d62a63a23667d0b69297f1bb043c161168dc9cf4bb9319ed33238fbfe5f55f0a4a0576d7761e539511af16e0edd36ec3d373897db3d1129690a290ffcdcfd2c742320e7bd88859675adc223009f6fc65e67b4eed4746bb15a1229bb7d77be3c35309b032049e818b23d2269ea4d260b619c5b26254ebcf2930cc9e03660ed1229f42b5f9b04acfe1c92a47303783e82ec08558cdc443ab0876758dbe44828ca83a57a9c0cc79554715f2385a5fd68596c6ced2ffe7883a28cd3ea51b0cdf5c1141eda5bb649fc5de59810135027104aa57e76d347fe32ee1038789fd6cc1fbb78411c59cb32c384a982f61eaa1068a3087ab33bc0e383c8ea1fd419167c847f43bd3b22f5134ca1e21db4003374d145e08d3210b607cd6c3634201af30689a97eed320f592e608f96cc530d21658441d0fe7382c50096e44eb0dcb47d1df043cdce2b83edba9fcff79df1ae11e09da76352abbbeed79c0bffdadd28341c02dbcabd84fe9db6be8b3e763084f429be3c9a3219a6685020c1feadccab97fde6c2809ad46d975db07bd2e83729d3d25a06f338d2169f055e3de09de49c16c41a7d933cd995bc790b9230caeeeee4c525e8e1a6f6da91cacdfd79628ac7024e9cd9c6d13477362aef1a4541bb215394620a0e7c473470b86d15cc813d08fd3293759645dfb5bde89d702775b238ca65a302d6e669507a7ec843ec00f22e0b2a3f6c93528ef7051aaf1f893e350074dda10e4a2a8b84ab41e11f46f697b811935373ba0ce8a8f7f097b0ae8e6c6e994a61e3d3d5db90757ba183d71da1aafd4e0bda78e18eeb544c96167c9a7014683550e5389a5848331d2a6c1eef97d1f9d716fa09098cce226ce305347ff58e6cf57e1868948cd0b8cf5491be76712ee3491a62dcf19f91074d8971dbef1cda89cdea24f9b831afaba8861a86fcf73306d1fece2914208f9e259cd4eba2c0e53b858a78e5482bae0a272a66a45a866b65a2015a187ca9172479e37f3a9ccc74142959fd7621f85ac6f21c82260e21f18241a68bff39dce2391db689a771f541803cb47f7decd2bcf9f89824d780519780f32f26a75183761810d23aa21086972b7484abd981828c7088bd3cf2738fe5cd699eb52c258641cda79ec7b75609e7e021ddf8f130df30a62adea8e9272e423bb805da25ef2ea7c239004a06ce3c4bba66f114552c1d4fcfd814813550b48791edb493a374bd4d5c7fbf0c8ad3f0ca45ca1cf6883b1942d5f0d8193a5599e994f69ffc069ba3e6fe195eea5e12849294678bea61507464929e32d822b7a499f87911b7f2253b1f6a4a787db778aa0913a3786120d4d00f673a309bafc9cbf5013e6055356a47c864c8b369dcd4de7a9424de9c8c32231267443ae12d06476372fbecd9984a8e8fb7766eef6b5d38f5c3dc489ac4d24f7be8975b97268c0d0b069aba48bc57828e35058ac9efc56f355ca6db10cc9e2c1441e60d4b9d2cd789e6c84e4a7d0ef9b8b75fa3027ead95e37a2f73ad32735af7f93bbd6b48f55f071a7397743ed1e59d18439a061e9b60f8a7dfbadcc18f40a9258b7ced4bf9fc4776f9d28566e324226a7ff79ebf6b51286432fbffbe2ef8688e3d9e0502228c025e993dd60270e411326da187a8a7c43333f6d973d2e12b1962a09d3608ffbc82e0a04204cbf03cc8b128b4ae7293cc0dce495f4a524a6d6f3d94b7976d4e49a3e02a9e816bada3f37b4a40651aa45738eb8056c9eac23bff97b95a71e04d03c2c4ae87bb8d2cc32a5ff1b516d149e1d1315d1fe692c9fa39383d91f5eb63913ec6c2ab72aee462eea0846c4639e77149919013a091e7058cb5606b2f237631d4d75e00f48d76b5508e246648e769a1ecb23fc5c46c7668bfabd3e2ca119f9f182520bb73e60e569314b0c464dc3d36e044cef31560118ddf95b16872876f32e1ebd705622d440659b9f8c61efdd29128bcfaa5ac07e87094ab27bbea124f511e9103e828244470c6102d04565c0c0a6c243b912f07e2a08a3c11158aafd6e9ffec38d0ff620089ee5263eaa404444a76e8d2b49830e83f0ba1c5a9eaff261a5dfa83dc03be0f98c9eefca0426a5d198f6efd2027bd85f078e354647abab48eec2f8b7c5d658ea83918f6a3b88365e0982a4f98e80c029155c892cad8ce75e3da4b4314110bcde96484b0ba486d966da5e23e24cb477ef4c929d1201b1005dc7387f2e6480ad8af6a5569c9470302f1c5f9b6fa8d26b0881d94c906934f2fcd14e79e195d0ffa061f361ac34d28499463f46dba7f45368a3f2b7047eaf0ea493c7bfe17af6ce3a0c3e4207b5838f6a58f87c7e7d2005a59473fc743634bd55b77f00a4523ba00a127f34f2a3998a733cb4e05b11a9c7f3b6a01ce984d4cbc1324e0bbafd001ec7fb9ced61834260fcf91dfa714928ea3aaae79ce50369d018cc070bb581b7c540ba98a99646955514f7f90f6839b32b67826078d01a265f75f7728abd42398a19622e684dc0d217ee7c1e208fe4e3f90a70ad9b52cacb840e8c0386d5464d848cb427e7d413c6b9a82b123ab8d675c793d27f83c472896b7394ecf80c08f79ea71701469363bc0673ec8f3debcd00a45d74723b0daaa9507c4b573807288baeadbe80f4ae0d7dd3101fe710684ab2709343e5dc70faeb1b9875b269fe06964a8242bc398b781d26234dbcd8e9ea89772705623504f9ece69cb7ced88bb7549b5aae86ca5102bccecc10db7b6ceb19a22c04cfbd6193bd938bf58eb09799729f312501ac532748a839c57f3d4d010e28fcb156a37499fa459f0bb69e40942d795fc64a63fed4d092f2a48bb16685f03ece8b7d1468476b9a76fe083791fa7e0a27c89540be45eae6f6483b3badbdb06392cd234fc0f8ce30b7ed3f9b308614fc87ff96dc45930f102b7d093ed05844d18546c072868416385f87d3500af4b76f4422c23997fb285b046a74bf0a87e14696355c479e4f0ef4e546d53703c215eb37ff03ec7685e0f759fef050c687e8a4b40a37bd922af4dc00b4d4286189079116db9ee18107d441e5e69994a6b27e858714dfce4b3c787afd5bccdb4d7a98047ddc5bfed9853a1c02fc432e716e225d1d33fb27239605b9a00a9acd114ddaca042f666be2441856e9bb4c6a688bfcdb4323ec062b0235fd4c017560a843df38252b036e590819549e8788351b7099c30dc3c2ceaa3392264a71a52013a2260a513dc06fb801c1eec72bee63493bb271c0d7d57ec58311ac293453f638bddc785f2faa94c30369cb39d5d7b0e459704fa77f9c8befbf7327dc3288ceb0881d959c1de056c91be92b2058974b89be101ef1b49b9253be4aae4286f531f13401fab8c49daa186066fd70f367652bf7bb206be59a66b73219ff736d75c597141c6558dbe21bc168e49d0722ff8cfed7409b63866f63640a7347e6c2eea5adae5115ac886b7331f742fc577c99b8984e2ee588e00759a972d5b6676a344a470d0cc00bae289934a16925d9972b0317d3be7e1de9fbe766dd5fb0cc9c154a610ed67f2dff6d677e3828594af8ea6f4b31bb064d9760086845feb60c5d6013ec600bf461949e23d167025e4725ed121b2d44521f10fb31f375955dd445ec75fcbbdae3a6d27438a61e3b4b61a86190f736d6c939b5d32f3ebd48f8d6f074284501c2c015f1d38b60b05275cc67f3ef44b0c6dc21093258ae24a650293880293607c847e786f559e83ea540e68db2a2ffa19794c7ec046ea2d6912edab09ea7fb30f4331002b1eff9b642356c8cac561debf591bc195e789fd7914424ea72fa81a63694ce25bff76e9c5577b26b81e92d8", @typed={0xd0, 0x76, @binary="39d7abe3956e49cdc7def8a6a3fa557bb0ac23fa1b0ca435bcac4298d69eaadbf8c8c2f64c549bcdb8cef3b2f45a76630cc0cdf845d93fdcda8a3f6a325b507c427e9d34628d29986399d9261f1a24f8bd1720ecd29286ccbb1b9e720a268d1f30e5ff5f75871758ced761bcc7f0920a04501e9971e1782d8af3adc0b774ce70919e4d67f0bf44d243c274811e7805f258f98ded4d093d8c08dcef2e69ce7719807917acb1819e168fa5a70037d7c079bc964e879891fbcf5baecf9eade754a73eb50cc29f6c47270c7620"}, @typed={0xc, 0x21, @u64=0x7}]}, @typed={0x8, 0x6a, @fd=r0}, @nested={0xc, 0x3c, [@typed={0x8, 0x96, @str='+\x00'}]}]}, 0x162c}, {&(0x7f00000018c0)={0x80, 0x31, 0x20, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x28, @fd=r1}, @nested={0x68, 0x82, [@typed={0x8, 0x3c, @uid=r4}, @typed={0x8, 0x87, @u32=0x7ff}, @generic="a925eb06c7608c8df18e9f32fac6358c95be699d2ee7eded8c750f5f063130cfa3993d50ad20e6405327d6ce3cad5cc9", @typed={0x8, 0x59, @fd=r0}, @typed={0x14, 0x30, @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @typed={0x8, 0x59, @pid=r5}]}]}, 0x80}], 0x2, &(0x7f0000001a40)=[@rights={0x38, 0x1, 0x1, [r1, r0, r1, r0, r1, r0, r0, r0, r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r1, r0, r1]}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r1, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0xb0, 0x80}, 0x20000810) r9 = syz_open_dev$midi(&(0x7f0000001980)='/dev/midi#\x00', 0x3, 0x40) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001c80)={@local, @multicast1, 0x0}, &(0x7f0000001cc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001d00)={'vcan0\x00', r10}) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000d7efec)=ANY=[@ANYBLOB="1400000001050700000000000000000000000000"], 0x14}, 0x1}, 0x0) r11 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f0000000080)=0xfffffffffffffffa, 0x1) 2018/06/03 22:48:24 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80000) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4e, 0x50639c9a51aad6b2) ioctl$int_out(r0, 0x2, &(0x7f0000000080)) 2018/06/03 22:48:24 executing program 1: iopl(0x3) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x404240, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, r1, 0x1, 0x4}) 2018/06/03 22:48:24 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f0000000400)=""/250, 0xfa}], 0x1000000000000181) read(r1, &(0x7f0000000040)=""/241, 0x6c360e15) fcntl$notify(r1, 0x402, 0x4) get_thread_area(&(0x7f0000000140)={0x1b, 0x20000000, 0x6000, 0xffffffffffffffe0, 0x80000001, 0x2, 0x5, 0x3, 0x7fff, 0x9}) 2018/06/03 22:48:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000040)=""/185, 0xb9, 0xfffffffffffffffe, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0xfff, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) listen(r0, 0x5) 2018/06/03 22:48:24 executing program 6 (fault-call:2 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) [ 175.478271] device bridge_slave_1 left promiscuous mode [ 175.483965] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.565587] device bridge_slave_0 left promiscuous mode [ 175.571239] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.646798] team0 (unregistering): Port device team_slave_1 removed [ 175.657709] IPVS: ftp: loaded support on port[0] = 21 [ 175.664236] team0 (unregistering): Port device team_slave_0 removed [ 175.674718] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 175.691556] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 175.719011] bond0 (unregistering): Released all slaves [ 176.335863] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.342297] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.349638] device bridge_slave_0 entered promiscuous mode [ 176.389172] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.395645] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.403541] device bridge_slave_1 entered promiscuous mode [ 176.441113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.478840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.591771] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.632814] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.804215] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.812176] team0: Port device team_slave_0 added [ 176.847808] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.855739] team0: Port device team_slave_1 added [ 176.892523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.922884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.964347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.001801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.239886] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.246565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.253226] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.259627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.266813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.123245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.207401] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.213607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.298645] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.305193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.312839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.392898] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.886550] FAT-fs (loop6): bogus number of reserved sectors [ 178.892694] FAT-fs (loop6): Can't find a valid FAT filesystem [ 178.907937] FAULT_INJECTION: forcing a failure. [ 178.907937] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 178.919818] CPU: 0 PID: 13206 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 178.927126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.936492] Call Trace: [ 178.939079] dump_stack+0x1b9/0x294 [ 178.942700] ? dump_stack_print_info.cold.2+0x52/0x52 [ 178.947880] ? debug_check_no_locks_freed+0x310/0x310 [ 178.953066] should_fail.cold.4+0xa/0x1a [ 178.958339] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 178.963440] ? debug_check_no_locks_freed+0x310/0x310 [ 178.968623] ? graph_lock+0x170/0x170 [ 178.972427] ? graph_lock+0x170/0x170 [ 178.976240] ? do_raw_spin_lock+0xc1/0x200 [ 178.980617] ? print_usage_bug+0xc0/0xc0 [ 178.984675] ? find_held_lock+0x36/0x1c0 [ 178.988750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 178.994282] ? should_fail+0x21b/0xbcd [ 178.998168] ? __lock_acquire+0x7f5/0x5140 [ 179.002394] ? lock_downgrade+0x8e0/0x8e0 [ 179.006547] __alloc_pages_nodemask+0x34e/0xd70 [ 179.011215] ? kasan_check_read+0x11/0x20 [ 179.015367] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 179.020378] ? debug_check_no_locks_freed+0x310/0x310 [ 179.025569] ? find_held_lock+0x36/0x1c0 [ 179.029633] ? check_same_owner+0x320/0x320 [ 179.033954] cache_grow_begin+0x6e/0x6c0 [ 179.038018] kmem_cache_alloc+0x689/0x760 [ 179.042169] ? proc_cwd_link+0x1d0/0x1d0 [ 179.046237] getname_flags+0xd0/0x5a0 [ 179.050041] user_path_at_empty+0x2d/0x50 [ 179.054186] do_mount+0x172/0x3070 [ 179.057746] ? lock_downgrade+0x8e0/0x8e0 [ 179.061888] ? copy_mount_string+0x40/0x40 [ 179.066115] ? check_same_owner+0x320/0x320 [ 179.070436] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 179.077539] ? __check_object_size+0x95/0x5d9 [ 179.083002] ? __might_sleep+0x95/0x190 [ 179.087404] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.092933] ? _copy_from_user+0xdf/0x150 [ 179.097198] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.102738] ? copy_mount_options+0x285/0x380 [ 179.107237] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.112771] ksys_mount+0x12d/0x140 [ 179.116504] __x64_sys_mount+0xbe/0x150 [ 179.120485] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 179.125588] do_syscall_64+0x1b1/0x800 [ 179.129475] ? finish_task_switch+0x1ca/0x840 [ 179.134003] ? syscall_return_slowpath+0x5c0/0x5c0 [ 179.138932] ? syscall_return_slowpath+0x30f/0x5c0 [ 179.143862] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 179.149246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.154089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.159269] RIP: 0033:0x455a09 [ 179.162445] RSP: 002b:00007fb8d4cc3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.170142] RAX: ffffffffffffffda RBX: 00007fb8d4cc46d4 RCX: 0000000000455a09 [ 179.177400] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 2018/06/03 22:48:28 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0054fc2f07d82c99240970") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20400197897c03c154b3f000000001c0000000000000000000000000000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/06/03 22:48:28 executing program 5: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_pts(0xffffffffffffff9c, 0x101800) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000140)=""/4096) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x2, 0xffffffffffffffff, &(0x7f0000000100)) 2018/06/03 22:48:28 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mlockall(0x2) socketpair(0x2, 0x5, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0800000000000000bc0b3b54b6ae36e093852d26653c2e04cd6748578f26ebadc4696f291d78f478c8bdf232f2ebe3ce61f57f761720d85559d1abce22000000009dd7ec316f5499eb", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="63f78d725a73e7692616ce6a59c88ee89574cea669eb40511d3f0350dc67577e7b99810e508d869d4fd3cdf3f1dc8b71d729810ce88b0034699a3e2ad14493bfa4ffa01ed6f6c0038c279204601690bdeb09f9dc8ce9f4c00b38b6d9f7471876"], @ANYBLOB="0804e7ffff000000040000009d000000fa2b12e32240250802fdd596b36e5433cd239a63d7617774a2c041ed7fa689fc5be21a785e47065f3ce497fb792bf8b796750dd1e0a2a8b10f2958a9dcc4b7db906f74489da30d01608561158ad4529c479e84e90908c7ebe8f0e94de21bc07822fab92d55bdd30551d44ce1936ccd4528c7264d4f04fadc5363c34f4d976b6502fdc91cd9393bfcec523faa5974800d277cdbd6b67d4e86be11e612357369edd5e1528beccc2852995ccb41ede4485e51dcddc42bca29fb50d00c596323dba7d91e713a1f0e566d05846491f3c2abb6de8d608c9c05b815e7c8094b4b160d58142efc"]) r1 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000280)=""/164) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040), 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) prctl$intptr(0x8000000000000004, 0xfffffffffffffffe) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000140)=""/146) 2018/06/03 22:48:28 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/06/03 22:48:28 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101040, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="8c1ecd26d1c753f82f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xea57}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, &(0x7f00000001c0)=0x84) 2018/06/03 22:48:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000080000006a0a00fe00000000850000000a000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2018/06/03 22:48:28 executing program 6 (fault-call:2 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:28 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x1, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') [ 179.184662] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 179.191924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 179.199184] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000003 2018/06/03 22:48:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000240)={0x24, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @u64}]}]}, 0x24}, 0x1}, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"693a623000faffff370000008000", 0x2e00}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nfsfs\x00') 2018/06/03 22:48:28 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x1c1000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040)=""/164) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000180), 0x3) [ 179.331119] FAT-fs (loop6): bogus number of reserved sectors [ 179.337117] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/06/03 22:48:28 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000240)='eth0\x00', 0x42, 0xfffffffffffffffe, &(0x7f0000000200)={0x6, 0x6, 0x4, 0x1, 0x0, 0x9, 0xc, 0x8000000000}) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)=""/197, 0xc5, 0x5}, 0x20) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000004c0)={{0xded, 0x8000, 0xfffffffffffffffc, 0x8, 0xffffffffffffffff, 0x3}, 0x9, 0x0, 0x6}) mq_notify(r1, &(0x7f0000000140)={0x0, 0x8, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) r3 = memfd_create(&(0x7f0000000500)='/dev/ppp\x00', 0x0) statx(r3, &(0x7f0000000540)='./file0\x00', 0x500, 0x40, &(0x7f0000000600)) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000100)) tee(r0, r1, 0x8000000003, 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 2018/06/03 22:48:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000002c0)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x5, 0x101, 0x9d, 0x8979}, 0x10) rename(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000140)='./file0/file0\x00') getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8001, 0x0, 0x3d81b9d9, 0xb51}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r1, 0x5}, 0x8) socket$pptp(0x18, 0x1, 0x2) [ 179.373184] FAULT_INJECTION: forcing a failure. [ 179.373184] name failslab, interval 1, probability 0, space 0, times 0 [ 179.384735] CPU: 1 PID: 13231 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 179.392028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.401506] Call Trace: [ 179.404123] dump_stack+0x1b9/0x294 [ 179.407791] ? dump_stack_print_info.cold.2+0x52/0x52 [ 179.413022] should_fail.cold.4+0xa/0x1a [ 179.417117] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 179.422257] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 179.427482] ? is_bpf_text_address+0xd7/0x170 [ 179.432012] ? find_held_lock+0x36/0x1c0 [ 179.436106] ? netem_dump+0x5f0/0x1ad6 [ 179.440033] ? check_same_owner+0x320/0x320 [ 179.444385] ? kasan_slab_free+0xe/0x10 [ 179.448400] ? kmem_cache_free+0x86/0x2d0 [ 179.452583] ? putname+0xf2/0x130 [ 179.456071] ? rcu_note_context_switch+0x710/0x710 [ 179.461023] ? ksys_mount+0x12d/0x140 [ 179.464901] ? __x64_sys_mount+0xbe/0x150 [ 179.469056] ? do_syscall_64+0x1b1/0x800 [ 179.473127] __should_failslab+0x124/0x180 [ 179.477379] should_failslab+0x9/0x14 [ 179.481193] kmem_cache_alloc+0x2af/0x760 [ 179.485342] ? perf_trace_lock+0xd6/0x900 [ 179.489486] ? kasan_check_write+0x14/0x20 [ 179.493717] ? do_raw_spin_lock+0xc1/0x200 [ 179.497952] alloc_vfsmnt+0xe0/0x9d0 [ 179.501665] ? mnt_free_id.isra.27+0x60/0x60 [ 179.506088] ? kasan_check_read+0x11/0x20 [ 179.510232] ? graph_lock+0x170/0x170 [ 179.514040] ? rcu_pm_notify+0xc0/0xc0 [ 179.517938] ? trace_hardirqs_off+0xd/0x10 [ 179.522178] ? putname+0xf2/0x130 [ 179.525629] ? putname+0xf2/0x130 [ 179.529096] ? find_held_lock+0x36/0x1c0 [ 179.533157] ? lock_downgrade+0x8e0/0x8e0 [ 179.537314] ? module_unload_free+0x5b0/0x5b0 [ 179.541807] ? lock_release+0xa10/0xa10 [ 179.545788] ? mpi_free.cold.1+0x19/0x19 [ 179.549847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 179.555376] vfs_kern_mount.part.34+0x88/0x4d0 [ 179.559949] ? may_umount+0xb0/0xb0 [ 179.563567] ? _raw_read_unlock+0x22/0x30 [ 179.567710] ? __get_fs_type+0x97/0xc0 [ 179.571595] do_mount+0x564/0x3070 [ 179.575130] ? lock_downgrade+0x8e0/0x8e0 [ 179.579274] ? copy_mount_string+0x40/0x40 [ 179.583505] ? check_same_owner+0x320/0x320 [ 179.587821] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 179.592829] ? __check_object_size+0x95/0x5d9 [ 179.597318] ? __might_sleep+0x95/0x190 [ 179.601289] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.606830] ? _copy_from_user+0xdf/0x150 [ 179.610975] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.616505] ? copy_mount_options+0x285/0x380 [ 179.620995] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.626532] ksys_mount+0x12d/0x140 [ 179.630172] __x64_sys_mount+0xbe/0x150 [ 179.634153] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 179.639164] do_syscall_64+0x1b1/0x800 [ 179.643062] ? finish_task_switch+0x1ca/0x840 [ 179.647559] ? syscall_return_slowpath+0x5c0/0x5c0 [ 179.652480] ? syscall_return_slowpath+0x30f/0x5c0 [ 179.657404] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 179.662764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.667603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.672778] RIP: 0033:0x455a09 [ 179.675955] RSP: 002b:00007fb8d4cc3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.683660] RAX: ffffffffffffffda RBX: 00007fb8d4cc46d4 RCX: 0000000000455a09 [ 179.690920] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 179.698180] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 179.705441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 179.712702] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000004 2018/06/03 22:48:28 executing program 4: r0 = socket(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffbfc) accept4(r0, &(0x7f0000000340)=@pptp={0x0, 0x0, {0x0, @multicast2}}, &(0x7f00000003c0)=0x80, 0x0) shutdown(r0, 0x0) 2018/06/03 22:48:28 executing program 6 (fault-call:2 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) [ 179.769302] netlink: 'syz-executor3': attribute type 1 has an invalid length. 2018/06/03 22:48:28 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) getsockopt$inet6_int(r0, 0x29, 0x3d, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x8, 0x5, 0x2, 0x5d3830ce, 0x7178, 0x100, 0xfffffffffffffffa, 0x1000, 0x3, 0xffffffff80000001}, 0xb) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) uname(&(0x7f0000000240)=""/73) r1 = request_key(&(0x7f00000002c0)='blacklist\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)='ppp0[{$\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) r4 = getgid() keyctl$chown(0x4, r1, r3, r4) connect$netlink(r0, &(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@sack_info={0x0, 0x6, 0x1}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000580)={r5, 0x2, 0x2, 0x3, 0x29, 0x9}, &(0x7f00000005c0)=0x14) faccessat(r0, &(0x7f0000000600)='./file0\x00', 0x40, 0x800) r6 = socket$inet6(0xa, 0x5, 0x401) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ashmem\x00', 0x0, 0x0) prctl$setendian(0x14, 0x1) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000680)={r0, 0x2}) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) fcntl$getownex(r7, 0x10, &(0x7f0000000700)={0x0, 0x0}) kcmp(r8, r9, 0x3, r7, r7) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000740)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000780)={r5, 0x400}, 0x8) clock_gettime(0x7, &(0x7f00000007c0)) fcntl$setlease(r6, 0x400, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000880)=@deltfilter={0x510, 0x2d, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, r2, {0xf, 0x3}, {0x9, 0xffff}, {0xe, 0xb}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x94, 0x2, @TCA_BASIC_ACT={0x90, 0x3, @m_bpf={0x8c, 0x11, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, @TCA_ACT_BPF_FD={0x8, 0x5, r6}}, {0x70, 0x6, "d38b289f37fab6c5f752333c986b0a9c1344314b4c3c2859a22176f0bdd287a15d79b6c128f73ffb2cea5345a0795d022d87fc7bea0474bdfe976a14f0b61a9ba79ed0abad980dae9980f2ead520b21a493a4bbb524c42d84aace1e2cf6a135b59eba2d07615c31ae2"}}}}}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x40c, 0x2, @TCA_BASIC_POLICE={0x408, 0x4, @TCA_POLICE_RATE={0x404, 0x2, [0x1f, 0x6, 0x1f, 0xfffffffffffffffc, 0x4, 0xd7df, 0x401, 0x9, 0x9, 0x8, 0xffffffffffff8000, 0x7fffffff, 0x100000001, 0x6, 0x0, 0x8, 0x8000, 0x3f, 0xfff, 0x0, 0x4a2, 0x0, 0x6, 0x37ad, 0x7, 0x9, 0x0, 0x3ff, 0x9, 0x6, 0x7, 0xb3, 0x6, 0x7fff, 0x8, 0x2, 0x9, 0xb8, 0xfffffffffffffffd, 0x46208, 0xfff, 0x9, 0x3f, 0x100000000, 0x63f, 0x6, 0x9, 0x46c6, 0xfe10, 0x8a41, 0x7f, 0x8, 0x1, 0xfffffffffffffffd, 0x100000000, 0x83, 0x7, 0x10000, 0x2, 0x6, 0x0, 0xd, 0x1f, 0x149, 0x8, 0x1, 0x8, 0x7ff, 0x6, 0x81, 0x20, 0x7ee, 0x6, 0x40, 0x8, 0x6467, 0x0, 0x30e5, 0x6, 0x1, 0x6, 0x9, 0x5, 0x9, 0x316a, 0x0, 0x2, 0x1, 0x1, 0x7fff, 0x8, 0x3e47, 0x9, 0xf7, 0x401, 0x9, 0x1c000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x35a3, 0x7, 0x3, 0x8, 0x4, 0x9, 0x65, 0x1, 0x103f444b, 0x40, 0x1, 0x80000000, 0x0, 0x4, 0x80000001, 0x1000, 0x6, 0x2, 0xfffffffffffffffb, 0x6, 0x2, 0x6, 0xacc, 0x8, 0xffffffff80000000, 0x3, 0x1ff, 0x7fffffff, 0x675a, 0x40, 0x10001, 0x3, 0x1ad4, 0x0, 0x0, 0xb5, 0x9, 0x4, 0xd07, 0x3, 0xfffffffffffffffe, 0xffffffff00000001, 0x3f, 0x5d2, 0x9, 0x3f, 0xad, 0x9, 0x20, 0x0, 0x1ff, 0x1ff, 0x4, 0x100000000, 0x3, 0x90e, 0x10001, 0x2, 0x800, 0x6, 0x0, 0xb38, 0x100, 0x3ff, 0x100000001, 0x25, 0x50, 0x9, 0x1, 0x8, 0xffffffffffff46ef, 0x2, 0x8, 0x3ff, 0x400, 0x80000001, 0x4, 0x10000, 0x8e49, 0x3, 0x100000000, 0x7fffffff, 0xb888, 0x7fff, 0x7f, 0x2, 0x8000, 0x0, 0x5, 0x40, 0x36, 0x8915, 0x5, 0x8, 0x3, 0x7f0a, 0x8, 0x9b1, 0x0, 0x0, 0x86, 0x5, 0x2, 0x0, 0x1, 0x8, 0x3ff, 0x11b200000000, 0x6, 0x39, 0x9, 0x200, 0x359, 0x9ba, 0x3, 0xfffffffffffffff9, 0xff, 0x7, 0x0, 0x5, 0x3efb, 0x12000000, 0xd42, 0xfffffffffffffffe, 0x347d, 0x90, 0x4, 0x1b, 0x101, 0x7, 0x80, 0x101, 0x7fff, 0x6, 0x5, 0x1, 0x788, 0x8, 0x0, 0x7, 0x1, 0x80000000, 0x1000, 0x3, 0x8000, 0x8, 0x2, 0x0, 0x7, 0xde, 0x6, 0x700000000000000, 0x3, 0x1]}}}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x28, 0x2, @TCA_BASIC_EMATCHES={0x24, 0x2, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_CMP={0x1c, 0x6, {0x3c0f, 0x1, 0xfffffffffffffff8, 0x2, {0x1000, 0x1, 0x5, 0x1, 0x3, 0x3}}}}}}}]}, 0x510}, 0x1, 0x0, 0x0, 0x20000000}, 0x8090) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000e40)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 2018/06/03 22:48:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f0000000400), &(0x7f0000000440), 0x8) r1 = socket(0x12, 0x8786decbce2568ca, 0x7) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) [ 179.830624] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 180.097273] device bridge_slave_1 left promiscuous mode [ 180.103164] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.113722] device bridge_slave_0 left promiscuous mode [ 180.119317] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.153183] team0 (unregistering): Port device team_slave_1 removed [ 180.163431] team0 (unregistering): Port device team_slave_0 removed [ 180.174935] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 180.192714] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 180.220585] bond0 (unregistering): Released all slaves 2018/06/03 22:48:29 executing program 6 (fault-call:2 fault-nth:6): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000340)=""/186) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="0e60d87d6d2b8f8b55c9d0a355e48027b6dea13488f05513788c75b139241c0b26a85e4fa0d3f3d84be04f3db1c800bc17746731d5f4e16a19d068ffedbe3146d4a2f359f435f8a2d981c7d10fb63d7063d8c667a9b609721dd75c83c64b83aa4c0f537812af2f21d48ecbc2", 0x6c}, {&(0x7f0000000280)="709a23b898cd403966142a94acaaae4e9c69974cfc91dee8d48ffb512ae3a1f72c1fa970b0b0198ad5960907e6a3df425ac18b628c9e4622dcb8b7c8a45785d56c2c4565c498ad1ad202c186492d29b59254ad518966b339f5f946b16281dd55d132112840953f3f74165b95807305647da47ce3e505da97abf93cef155e2c22c5c32e58bc1d5204fb1cb0aa72e6640a73b2097c9cbc3d4de74c56e0e87c1a0b5fefe6761c405c23b14be8659b348cb7ea8c", 0xb2}], 0x2, &(0x7f0000000180), 0x0, 0x400000000}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004008ac3bb4e56aa71200000f50f020000000000010000007e5d3f766aff229c7c62e5ab0f27ccde679718cbd156d018dbe32b2c446357e9e4f4da2d3cf3d72d9254709c66e19bc3290ec5f36df745d7b9217f24c780e265649e0be75f1ed8b8d61ee74235f0d2cb78df060ef96855deff"], 0x18}}], 0x2, 0x0) 2018/06/03 22:48:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="ddc430a13f9ef5ae1808c5eb6ac969e01d5e6b5ffad5b0a4ed97e90c883089b56807789b19895c058802bb6d0bb02918d888fe71702700c975176b30815269bab20d261fa54ff8d6f631cb84", 0x4c, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a59103c850000002e00007625000000000000009509000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x16) 2018/06/03 22:48:29 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3f, 0x800) connect$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x80006d6a, 0x4) 2018/06/03 22:48:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r2, 0x3, 0x1, 0x7fffffff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r1, 0x209, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0x28}, 0x1}, 0x0) 2018/06/03 22:48:29 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000040)='./file0\x00') r1 = semget(0x0, 0x7, 0x100) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) r4 = getuid() getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0x0]) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000180)={{0x7, r2, r3, r4, r5, 0x100, 0x84f}, 0xfffffffffffffc00, 0x100000000, 0x9}) fcntl$setlease(r0, 0x400, 0x2) 2018/06/03 22:48:29 executing program 7: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2405, &(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x81, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x8, 0x5, 0x401}, 0x6) 2018/06/03 22:48:29 executing program 2: r0 = socket$inet6(0xa, 0x4000002000000802, 0x0) sendmmsg(r0, &(0x7f0000005180)=[{{&(0x7f00000016c0)=@in6={0xa, 0x4e21, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)}}], 0x1400, 0x0) r1 = dup(r0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) setns(r1, 0x50000000) 2018/06/03 22:48:29 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x9, &(0x7f00000003c0)="c626262c9d3b237f23bf012cf66f0f7424cb5ac662c6a9fe98d2bcddb8012d92fe53a96fe6e85a038db26ba743a1568f8f840a649a4a8c0d143970a0cb08f01c7bcd6c5016aa332a83cc95baaca35435cfb98d5eb9daebc73e7b796423b7429dcacbe56185118f499f5582d013cf1521dc8ae2a2dc36e8d8b85cf1cd7fd5954b5ac04635f2d4ed2e8aa457d68292a1d300000000000000") splice(r0, &(0x7f00000001c0), r0, &(0x7f0000000340)=0x4b, 0x8, 0x1) mknod(&(0x7f00000010c0)='./file0\x00', 0x29, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) r2 = gettid() fcntl$setown(r0, 0x8, r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x60000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={[], 0x1, 0x0, 0x1, 0x4, 0x5, r2}) ptrace$getregs(0xe, r2, 0x1, &(0x7f0000001100)=""/4096) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000200)='\x00', &(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)='eth0[\x00'], &(0x7f0000000180)=[&(0x7f00000000c0)='\x00']) [ 180.740959] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/06/03 22:48:29 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x4000002000000802, 0x0) times(&(0x7f0000000000)) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e21}, 0x1ed, &(0x7f0000001b80), 0x0, &(0x7f0000001740)=[{0x0, 0x1bf, 0x63, "1d23d3cd0ede18e15a3aca491b0f37a745bb5a96b47370a863c99a54a354a93f44ccd6832045d26eddc400af567a73dff77f21e58547632aace26b4a7dd3abe386e6d469230e3034652a11e8136adc178ed56d067b9f21b78ad0cb427d6f11ca74d4a47145fec4468fca491733160333e61f2e5d931f3c50"}, {0x0, 0x1ff, 0x6, "5f78c38b3ec768c9ab2a9fe66cef92783e7895b652c32ee3e42cebb62bab5e87e904efd9545f8a536bd3e232e0c1d839b7389d66d7e81f08f3e0e6b5658a7c1e4fb196ad83c5d328fec0501a968627fa8a15f813151ea857fdd28695a386553ffcfb0583158cc00fd5e5e99edc72186f2bfe350c21f8b39b4e957b77f6c36d51da2fe2ea0ec3d9ba309d2a6fbe0b78cbb9815d24ff15f920ba090b982934b9b01a4ade6a405e63460b460894915c52fcbfdb2771fad7ed8f93e2e042872f9c941a97d9a48cd7704f99794281"}, {0x0, 0x104, 0x3, "06a4580fb7d3ca6698853965acfc949174b3443f5458a9e14a6a588afd2b161954ba95fb168839f98e7f67137278f53537d8b03ae4142d8700c6a0414a70563bab3c17c263b5774772a144229c28d24dde322191571851c27b7db81cb3a911c15db0c433f3431ff767b17ae6a654ab6bfd0edff6bc7bf8b0e02b1a3c2c4819ae5b18d1961c600334d60b9c1075d33986"}, {0x0, 0x10c, 0x5b83, "e08bb230d9f8c1fb440087b30e8e3cfe3c410cf0e16d3a0e0e6fdab74e4265fad78aa948fc5a12da0d35457c92ef8b984bb3814b452d07d246ae96c910eb141ddbba307b7ff3fc950ca3335ec66031ff232f4126a398d32d56a95c5311d1a7ef2b82c8e327e86dbd4c10906b477c2250321398a03e4c9dca12697fd9092d9c2e4650"}, {0x0, 0x11, 0x5d6, "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"}, {0x0, 0x0, 0x1, "c5bc5c4b5b12723aa7e190b94d44056f55"}, {0x0, 0x104, 0x3d96, "8300b047c2e4ece2792e4f0734a7b72ad5984bd7f18beea75e5d1d8ba3694e496ad8ddb352f3d9881160f8182ef061af941c71746372c5482af7a7bff9ef16ddaca7c7f071a6ade24bad31463c1e71dfc1ab4d00627a36cc5bbced9551ef384ecaed4618bfa88061e62018"}, {0x0, 0x11f, 0x1, "f710224f8b3c3642b6ab9c74a59227903fa524dd7a94fc0d0a1092f8786daaa63a1e3e8023097355f5a36e3b8852928ed1bb7d26a753a2eb6ce67ba929d2775236abeca57b5f58c11228b32a18ea06ea1678899d9fa9527e63fc5fe4df04bd1796ef8229de9ff78dd3ae095a57fda3bb0759228a4e5b7a9bb4aad286410fcca4b5923ff0f25939211ff456ab90cb868a99c08aec9e33f56b0ebab020b49a9274a7170499ef1406d7e5cb72b828a00bf908b2e67f44e1dec05863b04898bbb3ae4b5072b7a1c83ab0d138a9c204fd94cbb6383f052e3e2aea9b75c517c9"}, {0x0, 0x11, 0xa23, "77a0d626fa3f7b8353fadba8b0d6f893c1d3758e8f95c0c07474784b6607b7"}], 0x0, 0x1}}], 0x1, 0x0) 2018/06/03 22:48:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001200)=ANY=[@ANYBLOB="7f00000000009f00"], 0x8) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0x3) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="00150000001b0000"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000140)=@routing={0x0, 0x0, 0x1, 0x7}, 0x8) sendto$inet6(r0, &(0x7f0000000080)="0e4d1cc38fd5935be93b46f285ecead112610dea241716c59ebed399e7c4fd7f9ac1d0b5a083bd474e578fc044fddc4caa08fb4b96255b5c13c58836e7daef0d95e8ee8cc7d30e5e876025e315491607c7a2eb5d293df01f70502128f9549b6803dcdbc2c4b8056a2496b61d67778d42fe1c35472f92d3315a5c9df976797a04e53392545dca21ca15d128ea27ea4b5db0a5e495d300dc35f47fec6b1343dd6efafd8bed8e33a27310191f8aad6953832b000000000000000000", 0xba, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x3}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x400) accept4$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14, 0x80000) 2018/06/03 22:48:29 executing program 1: socketpair(0xe, 0x80003, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x78, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e23}, @in={0x2, 0x4e20, @broadcast=0xffffffff}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) r3 = request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)='$user,\x00', 0x0) r4 = add_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="7064a57375992802e8a198013cb05607326d0e6cfda077676ce271e5a64cec602f3e56fcc31f464e1ece0138b3eb8695365f80260e8dcfa906c5cf740132b6d15fa1dacad31b670eb700d6793acc0cdd5ab83280826b", 0x56, 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) socketpair(0x6, 0x2, 0x9, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)=0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000400)=""/93) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000500)) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000540)=r1) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x0, 0x0) bind$pptp(r8, &(0x7f00000005c0)={0x18, 0x2}, 0x1e) sendmsg$unix(r5, &(0x7f00000017c0)={&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000680)="67627bc10dfea387073f691ba3fc2e6a16930e20466e671bfd2145b39a693b8dbe79736659d452cd52824c4ead17e193999039eb9dbd20d0c33d8e99c3bf7a36cc48071cb839d53ba776682d1d4dae7ddb99eb73768fff29bd7bb2595711688acf8c2e0036cc955f3eae7eb17857cac3c942b2a7dcecba0a246abbc4c4c662b216172998326709137dffe4785de5ce3868cecd416187a47220da306a43670bd168c73cb90043eab673a122c04d21192aaf8f2641", 0xb4}, {&(0x7f0000000740)="c7649179895797593da6d5b8b4916a7dfc98afdba19800f8682655c313f9592de10cd7a039a38ac04d4e1a0296c27bb2b26b1d7449a69fb39cb3ec178793fe70a4158c4bbe25fd4bd21332a793da25ede2da6a036cc71f4fcd52e0d0c44aafd5e7362640b03630bfc8cd928b7a970a2c02ae7bba68a8cf09ae69628623e9bfd77f311ec44c22d3cca262014ae438a579d979480c77c1e8e4ae2d54371e9702a54ca49db413cf61bd80d480368440a0e738a761bb036a6fb3f390b1389d54a2cdde23825341913e76cb9059b5164e1f2186563dc7f71351317d6cbfef8cb61bf0329902f285c3120dbff6f1d373f89827dd15d7c64ea5036b69f47301c9786a564b1d23820d1f61c489860d2174cd8d2c52f6a2e7754d77dda75c74d7f0687cf01333f82f01af25d0a26feb2437152b0ffe40adb26b0dbff1ce044ef07cd08f88900d2350f4cb117c8467a98c17da65b3e915d9f8784ef9c2032c5d64173b2619ae2692f67b33a58f3c89ed3d0f67cfb62584b55dbfc05a66004265e4960549acd55f8bf1d7c9dbc843b7c9d7df4495fe6d9a23bf8a6ac91d6d212cd97eb46c694f552060166b9e93991590cff92c96a52d53e406d0b7cc902797678f57cbae080236c9a76e9ed4ab40b20a259ff628f49a31a6cfa2efa9200a652092a1b40b40f24994cc61bbd3cc6749b4c70b45f0f02bda0f6b1fa211c08a9b8fdd46ea8797519b908a1fa5b76cf53980a2020044ffb68acca13386772c8752c9bfc851ba473777615eac3a14d990bd739e6f22cf86039032dca75f95f4080b3db966999cd0811f1add1dae74cbc237cc8baa7c14793e03ae461142ed2ba634f7d0cd57cc2d177b8f625010a73768d9e411f681b923b25e01338f7c2c0eb5914c01366894b0c2fd25ef014980a7b41b45fca612b7fb17f3d3d498767c787b2fce516addb53a14f9e6e1e488b69c319fc9c0b3a4a14f44ba588d2735ba6be679e6541aa8027ddc5493953d0077945dba22e12661f7b0b67ef031503da78215a3382d0f5ecea826b8f6f2f176bc4c830cb004ca462de4b93a560b8d4a9f81f9bb81d35f0eeb3c95c88f233a815f92940bd1141de6d2c03eb35694f48f59abfda7721ef6a4cd232338dd0d3372fd43bce008df0de872409e743f5971fe6b914650ad00548b12021f0683b7a0ba6c54eafadeb0b1fec179e558e569822119debf3638960414d360976285bc66720676b1b4556b9d5a841f24ba6305b0c7ee4e93ddb1d47a7371cd56aa8d03e3b54ccf7da1b68316627793f06faf90fcc03a4eab030bc1cd369a47083b43c8a0aaf301df25bbe62cd0919e50edf25f2fde4ab9c98e03e0fcdabe4f75d6b1d4c0cdc5f7f4d4b7f5bbe95e270292b15255976678d6c39eb9e7700ecc10426fc8fb2b06eb3adf7a1772a55d3c434978815dbb93296db0e52eb937b07d3ada9a6d762bde3997898b7a00f5b3188f79cf5fda0611872afc9a28dfcbeed5f6075ac532c83b9a5d07cd11151f996755c90780fcdc9208a8dc73a9941928658a3241a01545cad2dafa17b846447c3edd2e71a35ab27af7f07ad7249b3995121475e2040e3a8d0f1740d83b96481489ea6304b943de9e8ec97a731ebc58a2bb968618103fc4a17f0c077b21f74af9755d8887356378a954daba5a1c1db232f9b20b4ccd3e708bfd86778eb63ee2b0d94bb782550a8ed59a35d7f5893ef8fea91adf504270d715b293ada0f961b5fd70ad770a4051eddb7b8841d6ee5e509a20252781b29cd53f1a931cc044cb9e6b25c0e417083f78a3821a0930e5f527df7135292b5c091357c4c8377199d35a86f4379367c2a23197c5b37ddda5220273906c230e0d5f519b6f414ddec18ad67ca553e739aa03d94a503d9635dc70e4c7c0204bbbf8f6b828161458e03ef0c1fee2a0e13ecfebb5c6c38e5bce77c6318111076c51ab24b9440f03c18ef40b6df9d4c56b0ad79467e58ab7895ecedf646c37c2c870382b41225a6fd25a81072f984130d5e08a0eaa55e7cfb908cfac0a4d187be14028efd0cd934fb96b0c1ade2c17529774cfee584e4b34bf0d92cb1142473cd174e9c71105874e8b4393e3c21822637de5000a5e25a99045821a6dd382541b3b7bedf69dbd591c3fc5ec50d6e38b90d4b87d72d724ea1d9edd8d7b65e5746103adb8b2327983a7d6f05cb687c6305f27895b3b53cd2052cb176d7491aafccbe868289067288c996a72998f812a75221e7663a5c5c97233df06c53198a38de7c3af35d609c4852fb8aea781cd200b0a99cc18b38ae196c7fa879a75a03e38bc3a4eb4fbc9ee5e4d19d5cf6c7a4a108bd7cb2cb236406e0c9dea6dc0fa42f0dc20303c9fcf024392849a74ee79ccc200ca486d14be49cb36e27bee9a309523747176f5d0d87c2fe2e7724e1429482a47ec849bda6ac8bd0e26de0645b0f1418d359c830a7b68668b0cfaa4dbdf9b2caa408ab7c7669fce02c1aa00eb867eafa97c8e24c4abde32b10b6679656648e0dda371de669ff29713765be29f82cf9696dca1f7eefed5aa62ac551b702b3f302be359b74687cdaf5a9d5f2e55b430e010af6af932500661cef2c5792372015874d629b9156ce2b1cd6f58d1ea2aa24f9da4d01239e4e05d8ef324d1649cbe6371ffcbefad7a8cdf8e5f9da3cf613f553435f5d62c0b4eaacd38935af4fc9576cc23fdf0e6928ea1db2bbff8d2e00bb63399e42b7e4da581bceb5e75443d9f95d816cb3416ea1f3fd9c8610b58b63aed0ebcc23f253dd45d2317216cb098123504b24061aa969c0b8bb05e3980963a50979998a9551f7acb7f9c1be9733e84b6ac970c31ebef061ff0eadbda0948165ef41a79b5f8e9c00ea05d42b13083c7ae8589079cce1a92adecb9db1384b27fc4c21dcb61af343341517e8376c1cc9a222e0bac904f3d490969703e202db2727b019fcc20c94b0f1b3a9e3043f16dd7935ef5b0745858fa96a6500d334ca6c61d94efc41f56d2c5fff0925ca8a7ceb53224552243e95dcffefb6b819f37491120671eb77d2127fe34b67ebc542a95929e7dbd903029f92ca176e5a508ec9ff8615e344b8e580e1f270c4ec44f7afc552ed4a9fd8af148bfd961c2b08f0ee8ca8759884ba13ddb6f4ff88770e3d878c14486dbd576c907d49c57abb1960defd1ce7052673c2a98f5e9246180cbb4caa6c62762c54bdf958e87686a0adbe3b62f61d7ddd4ac00ed3399a48b5ec954d50a16283d888d7342b4f7f11c4cdde1c5a73b1ffb7ed7754b4974945e08f03cccddc6b146b9a5cc77f141672f85c827b20d2857ca8eb60bb7a3d516631519ffc9de1dbc8b579486691a11dde49e1bca6f1d8010ec19741f368baca20dca72999587a3c005ce2abf496ad9754c75fb2b76644c0fc64c1041bf0732aa5187f1ca767a3c04c0d6fd05efd659d116ad11085b76a24ee7b7c381305afa943c5fc97aedf76c3787ed61fa3bc0ec97641faf791c4cf3d2a5bc376ed1a54dcc8594142ccd4c3b862477f91ccabafeae962b3f4418cef6797cb1018118b2a2d4eb06a692a2659df26d434dceb93ad014e45a52abbf80da5f0b8e439885174a72c7df4f18834c0777a211ea96202d0d610596b6808ec318d3eb7caecb48a0d80f1289fc75f4faabee605d296e1156d525f3988886771c745f49ef0ec5464271de8319f907ac69bac064fb7aa612d794bff23e1e621527d3383541507e4777ba6e2096ce9f911da20a1888e88eb2e477657d204e25195a49c18b677d5ff38bbc57f8c336c7c6999257bc569c4d8bc871a2e971b4a33df27cdcd1e19f48140a11f701599f7fdfeed498fe5c0f1b7cc7014aa16fac6f400b8c5cfba74434c03ab17ff30dc67d2f4f7148f4e8a6943ed0a1b94e24cb5e3dedb45a3ea199201afe717d6aea56d4d7b74bb40aaddbfbaeb928877af3f2458b04c4d13dfb9b5cede1461fd934d44e01ee55845d967f8c585e790c2356ed38e20aa58fc3444fc5066f2594d1e86f2f41d249f4a86146b6a0e4f784c1a996ec46c36afe559c88c263fa7b36a5be4c522c3d44d72595cfa453ceaadbe85efdaf360d40989410fc67daab7c1f1dbc92f46c2c4f10c0c3b492323f69d7bafd789346cd3d9d88effd33d82779d66e6d5d1a02df0b8f7a3133f45034f2ecddc1ebe8d5eff05de6726254f160dfd5b803707d825aae08336568086226e7f6951d230e9c60ffc0b2737c45a628690e15140941f6e3cb922b26668d9e99b0fdf4ef393de17b5f3795052a659c707af24040ef42d97af174303ba688f773cf872a7cf3b14b7905336bcd2e0b55a84d64e7436de03df83b4cbf9ff6d61cda78aa3e88adf19bf4c0fb4194045131a62bfea03783ba841e91c907bc601980041dbbc0102d87fd374bc5a5a9e35e6842b8e38a683c3952e4b5d841a36b41fc340f5f90f76a0cd3079d5065692d54bc9d4071ba387780fb3e85e3aa7fa71c95e70c81b5d43c20b785003a8d6e8efd320b4e7c60b7736c8ef2bb9efbb25e0f8aae4c6c6ef6f3d437773f557f88f77a36c1137605d6c8975290b055596119742b861fd113d66586a45692e34983e3b0801d94088c63bcb52c3e6a17499a012e291e8ee62e633a229b3fa457f9a88559185bf1a9c12ab700d674d31b8e3152b52e0d136463f4e32d345556c256d084bb93086ad1e0c9fbd2a01f12048f7ae9abd256f3efd393b3adebc95537f303d3b611ce596cb80505dd410c3cb5e3e7294321d25f79236c96c1a83878cf6ba0dd7a18f18188a617e5043f49eb567280a4911790ca33d67dadc73d17b6f3d3ddff59224253e99365466bfa298cfbe6e5f586b235aa63c8a870598ba0ce4827f945ad8bba7cdd6a24037df20179a89cd3242fe12a901025f7a4b92ff9f0103a8374c10a05e5f22bbb4920127c4e64ea4e2c4a48e19dfcd40285ffa49228446555c8f31fa8a53d8ea5cbd1b3f46653a6fe1516efe9f54f0505f703836adcf30747ceda56a2f4fc538c7e3d02a6cf1e892c9dd68e0b47ce6aac138defc7d1ba8ef08544150de2cc67d4726688e35e8a28bed8e7e17bfe00ef04d89733a0e0c4770cc090d33c650804ddd4a991b75b805e5a91724fc1cc4e5cf143e758a043d2ba0d4dc5b49cc4a0ba13af6f3c99ada90b1128d4eee778ac0499c8307e447c5623a18cfa3a65f4b176445eebc079637592cab41c349bed92714156e15fbb24cd90eb36262dde334a9b4c62f5781d6ad5058713c5b1a9763ced98ac01b53ec71f517f318c719a0d1b786230f69ee4d132b4a6c470f6196575ea95c71c27b0ccb4cd18a2e8e7885357344b83813e2a75d2c40c715dda2b2a5b11cac68357b32ff3c135fc48223e665607787185f53e08d7a566565888a20f62f34761b6b441fc4fa780a6d498a2814ca43343651d9f1c2a1ba865b1cb35dff5a3cc5a17bc1bc6a80d0c6e590476838b63acba05d69db82a5e793ae9ae6222936c3eff70e9350f5529e4b4aacd406a8d7913f21a5c2cbcd2030dc37bd2c70028959d40e3c5935c04798fcdbbdd58b95976006c694f90480cd10d4d5f512d54c84529f14ab515b157796580c5ea8d08a698771e97ee9c7008b4b92e58f98c5857b6310e0a2df1edd575e2022bb733321c53d39deb4aa0943aa0f611491c3ccde39826296e0d54d8a510b3ffe7b34903f8db3100c246b4abb299c39e551d92ec1cffa4a50e220c729dcc09bafd18560994801548b884d15bcbc6e664de72b24f8b4dab32a17ee64f425a1928615d6d953a1d3c67733203a5e69dd3cbeeb6359e564f2932e8f845e4", 0x1000}], 0x2, &(0x7f0000001780)=[@rights={0x28, 0x1, 0x1, [r0, r0, r8, r5, r0]}], 0x28, 0x40050}, 0x4090) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000001800)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000001840)=0x2) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001880)={r2, 0x7}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001900)={r2, @in={{0x2, 0x4e24}}, [0xfffffffffffffffd, 0x0, 0x1ff, 0xfff, 0x800, 0x6, 0x0, 0x7, 0x6, 0x0, 0x2, 0x7fff, 0x4, 0x40, 0x9]}, &(0x7f0000001a00)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000001a40)={r2, 0x3ff}, &(0x7f0000001a80)=0x8) getdents(r0, &(0x7f0000001ac0)=""/129, 0x81) setns(r6, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000001c00)={0x3, &(0x7f0000001b80)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000001c40)={0x1}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000001c80)={0x3a, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x2, 'lc\x00', 0x8, 0x41, 0x79}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001cc0)={r9, 0x3a, "1630a2a36b459da950cd0102e0a57c778a3626c884dc339b0652bd81a030431308fb19289b53e53761b3077ef2bd81fe5802f3283b1d0d69ab37"}, &(0x7f0000001d40)=0x42) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000001d80)=0x4000) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000001dc0)=@assoc_id=r10, &(0x7f0000001e00)=0x4) [ 180.808999] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/06/03 22:48:29 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x180) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x3, 0x1, 0x6, &(0x7f0000000040)=[0x0], 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x8, 0x1}, 'port1\x00', 0x10, 0x41420, 0x1, 0x8, 0x1f, 0x0, 0x5004a900, 0x0, 0x7, 0x7fff}) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0x35b, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="160cbbc99bd6f44d58a058364e157cac16b689d9b2a93ad2b1fb989d45c602e5dc6ddf65d65df05c4d7763b12f808589019e16c0ff8b8436641ae9fd1b84bd7b2e636a7604c3f5c276bad911e5b8a20ae65ad5f50c2d8ef89b0564714bec2deb2683045ca0c7457d991c59635c2082417c2a1c325e1e05cc2b7229055b3e46e522111d2b23ef4611370a69cf1011e37c671f9b68671c14237ba7a279c32413d2896a190128d3ea46816e50366360ac9d7fc9a8b4cb31a2b2a6e798a69b714baf8aea77a9a45047fcbf419a69efc0eaf7e2d4b2", 0xd3, 0x1f}], 0x10000b1, &(0x7f0000000340)='port1\x00') getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000380)=""/205, &(0x7f0000000480)=0xcd) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000004c0)={0x1}, 0x1) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r2, &(0x7f0000000540)=""/134) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) removexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@known='system.sockprotoname\x00') socketpair(0xaac237be62ac6801, 0x3, 0x6, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept4$alg(r5, 0x0, 0x0, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x8000, 0x40) getsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=0x4) restart_syscall() ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000840)=0x7fffffff) io_setup(0x7f, &(0x7f0000000880)=0x0) io_submit(r7, 0x1, &(0x7f00000009c0)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x8, r6, &(0x7f00000008c0)="bace38720b5ba182a7f26ded5a606609ca19fe624fe22507eacb647068ce7359f18413026f36730bf0ab1a36406c2e5810cc5dca1295964ee04f123a622576ec73fd563232a89b6eb4ad1e6241fd9c076baead642aa24124c9b0973892633fd15c15a60f36a8dc94ff331a490bbf5cd5ec11c5eef8018b36a42bf17b5b6c68ac4c934da2c5019283755398f2cd378be3dbb6fee4d08b7e62bbc605f9a3dd273d00af541f5dc47b75aa7aea30fe054d12bb", 0xb1, 0x7, 0x0, 0x0, r5}]) connect$llc(r1, &(0x7f0000000a00)={0x1a, 0x338, 0x8, 0x2, 0x5, 0xffffffffffff1ac1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) lsetxattr(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=@known='security.ima\x00', &(0x7f0000000ac0)='nfs4\x00', 0x5, 0x1) name_to_handle_at(r5, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x52, 0x3, "dcd26599689ddc777ee53dca5b61223bbc6c4f330ae726b90c0c57ea75e42385f97d69d854a51ac961863e824e861563d7dee8f87b6301038bb17fa88b595c4436506227b25ddbcc7a6b"}, &(0x7f0000000bc0), 0x1000) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000c00), 0x4) sendto$llc(r1, &(0x7f0000000c40)="904d92873600bb0108a375224dc43441789ec5f0b87bdabcc3cee370a7767bdff020d5757d269a42b2bfcd144acb5df657903335351b3b319968a9d79266a0758d75dbc65e7a08a062929d1135e2830696705a62012294d0c645808ec41d57b68ff0c8d257016d915b1e0529bba3c0168493cf7195a05b4c5bdc22917cbfc24195fc74332bcc56fd980b3022b63296997d7fe8e3ac642ee28be89f5f602ad79f31b1db0400d5bfc340120a1c06251bd823312e3c48dba869bfce96ae8880f119a05c9bcae7906c836f2223", 0xcb, 0x800, &(0x7f0000000d40)={0x1a, 0x324, 0xffffffffffffc4bb, 0x6, 0xb94, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000d80)=""/112, &(0x7f0000000e00)=0x70) setxattr(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)=@known='security.selinux\x00', &(0x7f0000000ec0)='system.sockprotoname\x00', 0x15, 0x1) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/ppp\x00', 0x400, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x6) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000f40)={0x2f, @broadcast=0xffffffff, 0x4e20, 0x2, 'lblcr\x00', 0xa, 0x6, 0x5}, 0x2c) mq_timedreceive(r0, &(0x7f0000000f80)=""/178, 0xb2, 0xf3d, 0x0) 2018/06/03 22:48:29 executing program 3: ioperm(0x0, 0x102, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20100, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x4dca65a2, 0x7, 0x10000, 0x3, 0x3, 0xfde, 0x2, 0xffff}, &(0x7f0000000080)) ioperm(0x0, 0x7, 0xfffffffffffffffe) 2018/06/03 22:48:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000e00)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000dc0)={0xffffffff}, 0x111, 0x1002}}, 0x20) write$rdma_cm(r0, &(0x7f0000000e40)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) 2018/06/03 22:48:29 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[]], 0x1, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000400)) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000440)={'security\x00'}, &(0x7f0000000580)=0x24) modify_ldt$read(0x0, &(0x7f0000000900)=""/137, 0x89) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") gettid() timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='rdma.current\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000780)) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) msgget(0x1, 0x0) r1 = msgget(0x2, 0x64) msgrcv(r1, &(0x7f0000000000), 0xc6, 0x0, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 181.028257] IPVS: ftp: loaded support on port[0] = 21 [ 181.616845] Process accounting resumed [ 181.670523] Process accounting resumed [ 181.792631] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.799072] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.806380] device bridge_slave_0 entered promiscuous mode [ 181.832455] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.838899] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.846285] device bridge_slave_1 entered promiscuous mode [ 181.876827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.905896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.985497] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.023216] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.050399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.057342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.085476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.092411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.162501] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.169686] team0: Port device team_slave_0 added [ 182.194703] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.201841] team0: Port device team_slave_1 added [ 182.226403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.253422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.279434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.286578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.294716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.317232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.324353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.332532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.564374] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.570804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.577498] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.583895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.591352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.008206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.545661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.637403] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.730240] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.736668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.743888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.831106] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.377195] FAT-fs (loop6): bogus number of reserved sectors [ 184.383155] FAT-fs (loop6): Can't find a valid FAT filesystem [ 184.399247] FAULT_INJECTION: forcing a failure. [ 184.399247] name failslab, interval 1, probability 0, space 0, times 0 [ 184.410610] CPU: 1 PID: 13633 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 184.417897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.427251] Call Trace: [ 184.429848] dump_stack+0x1b9/0x294 [ 184.433475] ? dump_stack_print_info.cold.2+0x52/0x52 [ 184.438671] ? kasan_check_write+0x14/0x20 [ 184.442909] should_fail.cold.4+0xa/0x1a [ 184.447000] ? wait_for_completion+0x870/0x870 [ 184.451607] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 184.456715] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.462262] ? find_next_zero_bit+0x111/0x140 [ 184.466758] ? kasan_check_read+0x11/0x20 [ 184.470904] ? rcu_is_watching+0x85/0x140 [ 184.475060] ? rcu_pm_notify+0xc0/0xc0 [ 184.478949] ? find_held_lock+0x36/0x1c0 [ 184.483026] ? check_same_owner+0x320/0x320 [ 184.487357] ? rcu_note_context_switch+0x710/0x710 [ 184.492288] __should_failslab+0x124/0x180 [ 184.496527] should_failslab+0x9/0x14 [ 184.500332] kmem_cache_alloc_trace+0x2cb/0x780 [ 184.505000] ? kasan_check_write+0x14/0x20 [ 184.509250] ? do_raw_spin_lock+0xc1/0x200 [ 184.513484] sget_userns+0x1c7/0xf00 [ 184.517196] ? get_anon_bdev+0x2f0/0x2f0 [ 184.521265] ? test_bdev_super+0x50/0x50 [ 184.525323] ? destroy_unused_super.part.11+0x110/0x110 [ 184.530688] ? alloc_vfsmnt+0x771/0x9d0 [ 184.534661] ? mnt_free_id.isra.27+0x60/0x60 [ 184.539070] ? kasan_check_read+0x11/0x20 [ 184.543217] ? graph_lock+0x170/0x170 [ 184.547019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.552560] ? cap_capable+0x1f9/0x260 [ 184.556452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.562002] ? security_capable+0x99/0xc0 [ 184.566177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.571716] ? ns_capable_common+0x13f/0x170 [ 184.576132] ? get_anon_bdev+0x2f0/0x2f0 [ 184.580190] sget+0x10b/0x150 [ 184.583298] ? test_bdev_super+0x50/0x50 [ 184.587354] ? fuse_ctl_add_conn+0x280/0x280 [ 184.591755] mount_single+0x3a/0x170 [ 184.595467] fuse_ctl_mount+0x2c/0x40 [ 184.599274] mount_fs+0xae/0x328 [ 184.602637] ? mpi_free.cold.1+0x19/0x19 [ 184.606692] vfs_kern_mount.part.34+0xd4/0x4d0 [ 184.611286] ? may_umount+0xb0/0xb0 [ 184.614915] ? _raw_read_unlock+0x22/0x30 [ 184.619071] ? __get_fs_type+0x97/0xc0 [ 184.622968] do_mount+0x564/0x3070 [ 184.626502] ? lock_downgrade+0x8e0/0x8e0 [ 184.630661] ? copy_mount_string+0x40/0x40 [ 184.634901] ? check_same_owner+0x320/0x320 [ 184.639263] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 184.644298] ? __check_object_size+0x95/0x5d9 [ 184.648810] ? __might_sleep+0x95/0x190 [ 184.652789] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.658323] ? _copy_from_user+0xdf/0x150 [ 184.662489] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.668032] ? copy_mount_options+0x285/0x380 [ 184.672545] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.678087] ksys_mount+0x12d/0x140 [ 184.681723] __x64_sys_mount+0xbe/0x150 [ 184.685707] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 184.690729] do_syscall_64+0x1b1/0x800 [ 184.694616] ? finish_task_switch+0x1ca/0x840 [ 184.699112] ? syscall_return_slowpath+0x5c0/0x5c0 [ 184.704045] ? syscall_return_slowpath+0x30f/0x5c0 [ 184.708975] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 184.714359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.719222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.724404] RIP: 0033:0x455a09 2018/06/03 22:48:33 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x200fff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000700)=ANY=[@ANYBLOB='_'], 0x1) 2018/06/03 22:48:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14) fallocate(r1, 0x1, 0x9226, 0x7ff) r2 = msgget$private(0x0, 0x58e) msgrcv(r2, &(0x7f0000000040)={0x0, ""/217}, 0xe1, 0x3, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e22, 0x7aa, @loopback={0x0, 0x1}, 0x1ff}}, 0x6, 0xe5, 0x1, 0x10000, 0x41}, &(0x7f00000001c0)=0x98) fallocate(r1, 0x0, 0x0, 0xefff) 2018/06/03 22:48:33 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) shmget(0x3, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) 2018/06/03 22:48:33 executing program 2: r0 = socket$inet6(0xa, 0x8000009, 0x8002) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[{0x10, 0x0, 0x2}], 0x10}}], 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000001c0)={0xb, 0x5, 0x21a}) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x3ff, 0x9, 0x2, 0x0, 0x2, [{0x9, 0x3, 0x5, 0x0, 0x0, 0x2}, {0x5, 0x9, 0x76, 0x0, 0x0, 0x80}]}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x40) 2018/06/03 22:48:33 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = getpid() fcntl$setown(r1, 0x8, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xfffffffffffffff9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x80000000, 0x4, 0x0, 0x0, r3}, &(0x7f00000001c0)=0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) 2018/06/03 22:48:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000180), &(0x7f00000003c0)=""/128}, 0xf) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)={0x6, 0x0, [{0x4, 0x800000000000, 0x12, 0x6, 0x800}, {0xc0000000, 0x3, 0x8, 0x8, 0x9}, {0xb, 0x10001, 0x7a, 0x2, 0x480000000}, {0xc0000019, 0x10000, 0x100, 0x5, 0x100000000}, {0x8000000f, 0xf3, 0xffffffffffffb0de, 0xfc, 0x20}, {0xc0000001, 0x2, 0x9, 0x8001, 0x2}]}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200, 0x0) 2018/06/03 22:48:33 executing program 6 (fault-call:2 fault-nth:7): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:33 executing program 0: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) pause() accept$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x14) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x40000) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000740)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) [ 184.727583] RSP: 002b:00007fbb39c5ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.735301] RAX: ffffffffffffffda RBX: 00007fbb39c5f6d4 RCX: 0000000000455a09 [ 184.742564] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 184.749829] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 184.757104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 184.764367] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000006 2018/06/03 22:48:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000080)="e2629bcfada5eaec46d8dc4f7b0afea46156d1944a52d8283a34ca19d2b0b17822c3a8153083f1f742a79a0471014a3ecd0d2c1e9c282783efd1195a3b12a00e9cd33da431b49c526c46329fd100a01d966cde562cc76ea86891e850ec88ff25303c6ed3cc410ac71acb6be1b390a23695969a70a0e1f1da5dd0a0431c5ef5d22cac71f2b6016993", 0x88, 0x1, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}}, 0x80) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) 2018/06/03 22:48:33 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x1f000], 0x8000, 0x8, 0xddf}) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200201, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) setresgid(r4, r5, r6) 2018/06/03 22:48:33 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0xa, 0x200000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0x6, 0x0, 0x400, 0x9, 0x18}, &(0x7f0000000140)=0x98) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000002e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/06/03 22:48:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = open(&(0x7f0000000040)='./bus\x00', 0x40, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@local, 0x0}, &(0x7f0000000180)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getsockname$packet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x184, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {0x2}, [{{0x8, 0x1, r3}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffff7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6fa42dda}}, {0x8, 0x7}}}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x8000) truncate(&(0x7f0000000000)='./bus\x00', 0x5) r7 = semget$private(0x0, 0x4, 0x2) semctl$SEM_INFO(r7, 0x7, 0x13, &(0x7f0000000840)=""/4096) 2018/06/03 22:48:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101001) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 'client1\x00', 0x0, "6ebcfe09306b8957", "6eefc2f05eb76813c162f6b13cc374fc6f08ba7fa4ac95eca54d6136ea456475"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 185.029622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 185.151323] device bridge_slave_1 left promiscuous mode [ 185.156973] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.173216] device bridge_slave_0 left promiscuous mode [ 185.178934] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.212986] team0 (unregistering): Port device team_slave_1 removed [ 185.225312] team0 (unregistering): Port device team_slave_0 removed [ 185.235706] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 185.251375] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 185.280470] bond0 (unregistering): Released all slaves 2018/06/03 22:48:35 executing program 2: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x1e, 0x800000000004e20}, 0xfffffffffffffeee) 2018/06/03 22:48:35 executing program 6 (fault-call:2 fault-nth:8): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:35 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000), 0xffffffffffffffa8) r1 = gettid() socketpair$inet_sctp(0x2, 0xe7d1d1a959097db1, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={r3, 0xb4, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, [], 0x19}, 0x2}, @in={0x2, 0x4e20, @rand_addr=0x100000001}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x10}, 0x100000000}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x100000000, @remote={0xfe, 0x80, [], 0xbb}, 0x1}]}, &(0x7f0000000340)=0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e22, 0x3f, @empty, 0xa05}}, 0x10001, 0x7ff, 0x9, 0x5, 0x26}, 0x98) r6 = fcntl$getown(r0, 0x9) setpgid(r1, r6) 2018/06/03 22:48:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x480) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x6, {{0xa, 0x4e21, 0x40000000400000, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x3f}}, {{0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x108) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="0fc33764360f01c9650f01b666000000ea000000001001360f09660f38821ef2f30f01c9c744240000300000c7442402ab00c0fec7442406000000000f01142466bad10466ed66baf80cb8869db589ef66bafc0c66b8610066ef", 0x5a}], 0x347, 0x61, &(0x7f0000000580), 0x3e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/03 22:48:35 executing program 3: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000000d) 2018/06/03 22:48:35 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4180000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0xb00, 0x70bd2d, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/2) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="0e5374b52ff24ecb47906d4294602d2c6f8109a9e360428f2ba35c0315fab4a8d42ea8ecf45e787759db7ff282d6f2c9d1dffd2bf0bd49ef0c5d6c4aed4ae44133ccf6b81474444f4d2b", 0x4a, 0x7}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='show_sys_files']) 2018/06/03 22:48:35 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) fchdir(r0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x3230000000000, 0x9, 0x1, 0x4, 0x3f, 0x1, 0x2, {0x0, @in6={{0xa, 0x4e21, 0xffe0, @remote={0xfe, 0x80, [], 0xbb}, 0x1f}}, 0x3, 0xffffffffffffffc1, 0x3, 0x1, 0x75}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r1, 0x1f87}, 0x8) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000200)=0x80000) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r1, 0x4, 0x1, 0x0, 0x3ca8, 0x6, 0x7, 0x9, {r2, @in6={{0xa, 0x4e24, 0x8c, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff80000000}}, 0x8, 0x401, 0xad3, 0x6f, 0xffff}}, &(0x7f0000000300)=0xb0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r4) syz_open_procfs$namespace(r4, &(0x7f00000003c0)='ns/mnt\x00') write$tun(r0, &(0x7f0000000400)={@val={0x0, 0xfbfb}, @void, @ipv6={0x5, 0x6, "9c4f6a", 0xc4, 0x2c, 0x8, @mcast2={0xff, 0x2, [], 0x1}, @empty, {[@srh={0x32, 0xa, 0x4, 0x5, 0x3, 0x491, 0x3, [@empty, @empty, @remote={0xfe, 0x80, [], 0xbb}, @empty, @mcast1={0xff, 0x1, [], 0x1}]}], @udp={0x4e22, 0x4e21, 0x6c, 0x0, [@guehdr={0x1, 0x3, 0x5, 0x0, 0x100}, @guehdr={0x2, 0x9, 0x2, 0x100000000, 0x100, [0x80]}, @guehdr={0x2, 0x7ff, 0x3, 0x80000000, 0x0, [0x80]}, @guehdr={0x1, 0x0, 0x4, 0x4, 0x100}, @guehdr={0x2, 0x1, 0xc928, 0x9, 0x0, [0x80]}, @guehdr={0x1, 0xcd, 0x2, 0x10, 0x100}], "e750da5ca23ebe9e4fe23ebd26c76c74d1b07cd4e3d4927f2eea3fee2cc61e3cff30bddd9f387fcbb948894d6ca16b49785ddf532d3441a6400a89ad2756ccb0"}}}}, 0xf0) listen(r0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000500)={r0, 0x2}) socketpair$inet(0x2, 0x803, 0x211, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r5, 0x8, r4) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000580)=@in6={0xa, 0x4e22, 0x200, @local={0xfe, 0x80, [], 0xaa}, 0x7ff}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="81e5a07fabf2bff8329284c3bed02b1fd867a309af9c252c7793c87820164184974394112b10b122c6d11ff268851f9c376a683b8ec2f0c421d239079a4ef026ebc6190d10f00e583af354c10dd05c2a5a4ae54d9ab703bcf60b853e27317e017e150ffd66a661c3529d", 0x6a}, {&(0x7f0000000740)="4f671dc4c74f723441651d2b304ec9d74c2d879d0ca7cc9adc48121f3570cf682ff32558354f01064437a8e3f0e53530", 0x30}], 0x3, &(0x7f00000007c0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x20, 0x6, 0x6, 0x100000001, 0x3, 0x5, 0x3, r3}}], 0x50, 0x40}, 0x40000) r6 = shmget(0x1, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000880)=""/142) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000940)={0x2, 0x3f}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000980), &(0x7f00000009c0)=0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=0x8) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000a80)="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", 0x1000) r7 = syz_open_dev$usbmon(&(0x7f0000001a80)='/dev/usbmon#\x00', 0x8, 0x41) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) fgetxattr(r5, &(0x7f0000001ac0)=@known='system.advise\x00', &(0x7f0000001b00)=""/91, 0x5b) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000001b80), &(0x7f0000001bc0)=0xb) poll(&(0x7f0000001c00)=[{r0, 0x402}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000001c40)='/dev/sg#\x00', 0x6, 0x240000) 2018/06/03 22:48:35 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x2000c0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) clone(0x0, &(0x7f0000b6b000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000180)=""/90, 0x5a}], 0x6, 0x0) sendfile(r1, r1, &(0x7f0000000200)=0x10, 0x400000000010001) sendfile(r1, r1, 0x0, 0x40000008) r2 = syz_open_dev$usbmon(&(0x7f0000000740)='/dev/usbmon#\x00', 0x1ff, 0x400400) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000006c0)) [ 186.156695] ALSA: seq fatal error: cannot create timer (-22) 2018/06/03 22:48:35 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x8000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) personality(0xc50000f) ioctl$ASHMEM_SET_SIZE(r1, 0x40087705, 0x1) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, {0x800, 0x8, 0x6, 0x7, 0x3ff, 0x5}, 0x3f}, 0xa) syncfs(r0) r2 = gettid() ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000000c0)={&(0x7f0000000040)="9e8d3efbb50ade9255bc44d04a618d6bbf42a2dca4ac566c6d6fe2d8c4415f75a517eef9695f2da9ea10deff3b4eca862f30d84203d1e98ea5d43b37feeeadaaa104eb413f9ca0d2e0beb53ee745b771fa786f58cee9c8c121ca311d43f23d508a061801daf76c9990b49d47c655942a10a64397c766c51ec5a9e147d464ab48", 0x80}) 2018/06/03 22:48:35 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000d00)={&(0x7f0000ffe000/0x2000)=nil, 0x20, 0x3, 0x8c, &(0x7f0000fff000/0x1000)=nil, 0xfff}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460109ff090dc3da0f000000000300030001040000980000000000000040000000000000008a030000000000008100000005003800010008006d04060000000060020000000000010000000000000000000000000001000000000000000100000000000000ff030000000000000500000000000000e72d9822d57df4c4a99a28d8f6020dcee91315e114e6bf993fb9e7db9388d778af6eaae37c8a7679cef9cc3337c803eaa023a1523e52aafe2298c88aa44f8aead88a974a8308c829c629cd9b722bb7b011d59bdadf86899b7c8fafbf82e88d2ef4d7e2ce59d9cca3ace397664023c8888c345aafd7e0cb8d5631f5eae7f4765b52adb9019c1126e3cf0f57fb7707b6460619e9f66830bed99be24e68f61338b9dbb4eda96a1784e43fd61e6a7a4d4d389d4f89cceeaae1011d5eaa"], 0xd7) fcntl$notify(r0, 0x402, 0x80000000) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x11, 0x105, 0x8) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x581, 0xd91, "2629ccda0fa5c833751d584b1aba0517889c268c717338f2668f0d602e40021e6519f801b5a20834ce6b3cc1176977339fbdc07653b72eed80fbbad846b8b47f7492dd8e3513aaac4ba8b43d639d0180"}, 0xd8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='team0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/urandom\x00', 0x2401, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000002c0)={{0x1, 0x80000001}, {0x6, 0x5233}, 0x3fe00, 0x1}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@srh={0x0, 0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000003c0)={0x2, [0x0, 0x0]}, &(0x7f0000000400)=0xc) syz_mount_image$hfs(&(0x7f0000000380)='hfs\x00', &(0x7f0000000740)='./file0\x00', 0x5, 0x8, &(0x7f0000000c00)=[{&(0x7f0000000780)="0ccbe5258383350b265ff92106a3efcacebe51d61d24f9befafe0224c5e70cfa6d4970205bcf172adece330dd5827fd0744275abff31269f416cde2c8fd4e0af81f3e7c0fc4de3af8b4af94ea4050750e0dcfd176dfd3c0481fd7308d456d36907f8eb838da47dca7d108b2ce4078384cedf559d91db584684eb4ffa36feb433ea9967e2c43a9a267e9b3fb8f826c343d8fe7f59c804fe350f15eeaa48df9ff1eccacf78b24d8c1f3df5acff339c2960d61e", 0xb2, 0x101}, {&(0x7f0000000840)="2f9284d7ba651dae3726c29135f13b1522bcef4b3931cf6356958f88f0131e58652e6f73b25647fe9299d5dbaff93ebe91a86c0ac33408296488ae85198451a88c833d7b4012e719a8710b3fe0e270da488278ad4bc8994fab462e9d441d6043642815de85bd24a88bf58201bb5ffe1dc68ab1f942bbd14d14fe768cc40111d3448f60833b806c8669587a0e89221649222433a9bdd617b2b2c15bdf9b4ca69e82b32a59f2b0baf760e257431ca77fce4baba524dfa057b1daeca1eb4f133688fc6d88132987a7d0e0652b689220d425904b504e352412e26cee9da72a71f3168f33e9ad2cc0ba", 0xe7, 0xffffffff}, {&(0x7f0000000940)="8a7f67b50d27c07c5d39a11faed47c63cf8ef0f12ebd952802217fc528e37c30fc090633dfed2bf82b42397a9da938105ad5f935f175a4db9c3796e36dda087b02f6683a851e7a726286cac123d882741cdcc3392331ec01e3390950e2fa36dc9dc247895504dd39738b1baafda670f0d1088984971265c09a054d4f636bb05a215bce9f487d437e9afc43237081b71ad6637e3f306ed4985f8228a922d86db64f36e190e081d026829441cadd947809c0243952675bc9a2fdd7354591eac1ab", 0xc0, 0xfffffffffffff001}, {&(0x7f0000000a00)="ce7e07500116a582f31193b1", 0xc, 0x9}, {&(0x7f0000000a40)="bcb8162de16996d2ef07e39dca1d7bdf975208d38cb352201f30fdb617faa3683b8057b5bcec643438f1fd0c9db87f3dfd43224777", 0x35, 0x4}, {&(0x7f0000000a80)="2eb967e1c7469c79528deffc72f774b38c757e9fb25a1d6e67677ff73f05e713d7c45f0e067415c328d44f13ce20f9344ea35af5009be1a2ea1e69ad3e47da770b4541db39184e431677201c10606283080af7d0aadb28a6861e0b30471e44ba218b70994daddfefe285128df7d4bec8e2c9163094d5", 0x76, 0x3ff0000000000000}, {&(0x7f0000000b00)="c5411133d21ed269c076ab7fcf89026476fefce831adc2a7291642d3745dd1f368e9cef39f80abc0055252429de79e2ff4194d4306d389af4a0510c8d467dcd74869fb01507fc2b0ff336b0ca40bd56cf099fdc649c281ba280026f9f6552b8750233376f6ee20741f1dafd785cadc071469c9bbff47d6cdfe533e9f8e8d2ba2b804fe9ad68119eaa116c2df39789c29cedf935482b396b0afda8a5c8485", 0x9e, 0xf471}, {&(0x7f0000000bc0)="438df8ca478d3a0b26ba314dabae9e87b63e6482fd7b4cb9efb5735afc1e615b63749dd0624c6e9af4687fe3fbe7eccba7e505110d3f1ef8ac0a2b7695d2", 0x3e}], 0x80088, &(0x7f0000000cc0)={[{@umask={'umask', 0x3d, [0x30, 0x36, 0x34, 0x32, 0x36, 0x35, 0x30]}, 0x2c}, {@umask={'umask', 0x3d, [0x35, 0x32, 0x34]}, 0x2c}, {@session={'session', 0x3d, [0x32, 0x34, 0x0]}, 0x2c}]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r4, 0x50, "1efcffd485155bc00a36126a495d94d9e6e8de50ec296d58093b23a841d1228123810bbec2d6d026520eb5949787fa79716ed805ffd845dade3e91e984035bfc676e80eaea60d89d971d94e743df6009"}, &(0x7f00000004c0)=0x58) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) set_tid_address(&(0x7f0000000280)) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000340)=0xffffffff) bind$rds(r3, &(0x7f0000000d80)={0x2, 0x4e24, @rand_addr=0x9}, 0x10) [ 186.253292] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 2018/06/03 22:48:35 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x0, 0x1, 0xc549, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x2, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@vsock={0x28, 0x0, 0x2710, @hyper}, {&(0x7f0000000080)=""/62, 0x3e}, &(0x7f0000000100), 0x4}, 0xa0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0xffffffffffffffff) munlockall() 2018/06/03 22:48:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) socketpair(0x5, 0x1, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x398, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @empty, [0xffffff00, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'eql\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x11, 0x40, 0x0, 0x2}, 0x0, 0x140, 0x170, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x10001, 0x1, 0x0, [0x4, 0x0, 0x7, 0xf6, 0x9, 0x800, 0x101, 0x3, 0x3ee7, 0x1, 0x6, 0x4, 0x3, 0xff, 0x3, 0x1], 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d3, 0x9006, 0x10000, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffff, 0x3, 0xfff, 0x3}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x8, 0x1, 0xfffffffffffffffb, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x94e, 0x800, 0xd5, 'snmp\x00', 'syz0\x00', 0xf89}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f8) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/186) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100030100ff3ffe58", 0x1f}], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xf1, 0x200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) 2018/06/03 22:48:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bind$ipx(r1, &(0x7f0000000080)={0x4, 0x4, 0x81, "e64929964562", 0x401}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x20, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/06/03 22:48:35 executing program 3: lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e642f70636d4323442363009d0852db17cf71a34eaa6c40d2e9a600315f21fd389a0d9e0f13cd84806c15544f86cf82439f51f6f7fdfdcfa3729f057a2ec29ffdad2b19e2406327ca5657ef1d51deba87a0ac70b4b8b43282220a0216a7b40caab37967803c6d3ed2640a542b750cdb6e8d6f613a99e4a238fe9c1e9cbea6fea3381864005f2fe3427bf86dfa0eab4e298436405c2e964c5144971918c0ea17943f862a961dc922d6f81e2ea91548d0391a5e1afb0af5f78985505d43190ce5870358eb06b615e718"], &(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x12, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x800) r1 = socket$nl_generic(0xa, 0x3, 0x10) modify_ldt$write(0x1, &(0x7f00000001c0)={0xce74, 0x20001000, 0x400, 0x1000, 0x8000, 0x9, 0x101, 0x2101, 0x10001, 0x80000000}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x800, @mcast1={0xff, 0x1, [], 0x1}, 0x7}]}, &(0x7f0000000100)=0x10) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000003c0)=""/4096) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x401, 0x1, 0x100, 0x9, r2}, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x0, 0x20002}, 0x10) 2018/06/03 22:48:35 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10002, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r1, 0x7ff}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x100000, 0x30}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x3, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24}}, 0x0, 0x1ff, 0x71, 0x1, 0x83}, &(0x7f0000000140)=0x98) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000400)=0x2, 0x4) uselib(&(0x7f0000000440)='./file0\x00') ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xd617, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000480)={0x5, 0x0, 0x2, 0x2, 0x9, 0xc19b, 0x8, 0x10000, r1}, &(0x7f00000004c0)=0x20) getsockname(r0, &(0x7f0000000680)=@sco, &(0x7f0000000700)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', r3}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000380)={0xffffffffffff7fff, 0xc55, 0xffffffffffff0000, 0x100000001, 0x9, 0x88e, 0x7ff, 0x8, 0x80000000, 0x6}) 2018/06/03 22:48:35 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/06/03 22:48:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, '%cbc(aes)\x00'}, 0x58) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0xf20d, 0x7, 0x8, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'veth0_to_team\x00'}) [ 186.559617] IPVS: ftp: loaded support on port[0] = 21 [ 187.099696] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.106297] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.113519] device bridge_slave_0 entered promiscuous mode [ 187.140151] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.146558] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.153790] device bridge_slave_1 entered promiscuous mode [ 187.178969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.204804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.277288] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.309807] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.432639] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.439863] team0: Port device team_slave_0 added [ 187.466560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.473821] team0: Port device team_slave_1 added [ 187.501863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.531687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.560118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.589578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.856015] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.862494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.869206] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.875611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.822390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.916374] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.007060] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.013281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.020627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.112330] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.652531] FAT-fs (loop6): bogus number of reserved sectors [ 189.658474] FAT-fs (loop6): Can't find a valid FAT filesystem [ 189.677372] FAULT_INJECTION: forcing a failure. [ 189.677372] name failslab, interval 1, probability 0, space 0, times 0 [ 189.689070] CPU: 0 PID: 14033 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 189.696377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.705724] Call Trace: [ 189.708315] dump_stack+0x1b9/0x294 [ 189.711940] ? dump_stack_print_info.cold.2+0x52/0x52 [ 189.717146] ? kernel_text_address+0x79/0xf0 [ 189.721553] ? __unwind_start+0x166/0x330 [ 189.725701] should_fail.cold.4+0xa/0x1a [ 189.729760] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 189.734862] ? graph_lock+0x170/0x170 [ 189.738659] ? save_stack+0x43/0xd0 [ 189.742291] ? kasan_kmalloc+0xc4/0xe0 [ 189.746180] ? __kmalloc+0x14e/0x760 [ 189.749890] ? __list_lru_init+0xdd/0x790 [ 189.754296] ? find_held_lock+0x36/0x1c0 [ 189.758363] ? __lock_is_held+0xb5/0x140 [ 189.762445] ? check_same_owner+0x320/0x320 [ 189.766766] ? rcu_note_context_switch+0x710/0x710 [ 189.771694] __should_failslab+0x124/0x180 [ 189.775933] should_failslab+0x9/0x14 [ 189.779745] kmem_cache_alloc_node_trace+0x26f/0x770 [ 189.784840] ? mark_held_locks+0xc9/0x160 [ 189.788984] ? __raw_spin_lock_init+0x1c/0x100 [ 189.793570] __kmalloc_node+0x33/0x70 [ 189.797381] kvmalloc_node+0x6b/0x100 [ 189.801193] __list_lru_init+0x559/0x790 [ 189.805254] ? list_lru_destroy+0x4c0/0x4c0 [ 189.809570] ? mark_held_locks+0xc9/0x160 [ 189.813740] ? __raw_spin_lock_init+0x1c/0x100 [ 189.818318] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 189.823334] ? __lockdep_init_map+0x105/0x590 [ 189.827826] ? lockdep_init_map+0x9/0x10 [ 189.831881] sget_userns+0x73a/0xf00 [ 189.835599] ? get_anon_bdev+0x2f0/0x2f0 [ 189.839657] ? test_bdev_super+0x50/0x50 [ 189.843716] ? destroy_unused_super.part.11+0x110/0x110 [ 189.849197] ? alloc_vfsmnt+0x771/0x9d0 [ 189.853189] ? mnt_free_id.isra.27+0x60/0x60 [ 189.857598] ? kasan_check_read+0x11/0x20 [ 189.861742] ? graph_lock+0x170/0x170 [ 189.865537] ? cap_capable+0x1f9/0x260 [ 189.869421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.874957] ? security_capable+0x99/0xc0 [ 189.879106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.884645] ? ns_capable_common+0x13f/0x170 [ 189.889064] ? get_anon_bdev+0x2f0/0x2f0 [ 189.893127] sget+0x10b/0x150 [ 189.896229] ? test_bdev_super+0x50/0x50 [ 189.900318] ? fuse_ctl_add_conn+0x280/0x280 [ 189.904723] mount_single+0x3a/0x170 [ 189.908435] fuse_ctl_mount+0x2c/0x40 [ 189.912244] mount_fs+0xae/0x328 [ 189.915615] ? mpi_free.cold.1+0x19/0x19 [ 189.919682] vfs_kern_mount.part.34+0xd4/0x4d0 [ 189.924272] ? may_umount+0xb0/0xb0 [ 189.928197] ? _raw_read_unlock+0x22/0x30 [ 189.932360] ? __get_fs_type+0x97/0xc0 [ 189.936252] do_mount+0x564/0x3070 [ 189.939786] ? lock_downgrade+0x8e0/0x8e0 [ 189.943941] ? copy_mount_string+0x40/0x40 [ 189.948190] ? check_same_owner+0x320/0x320 [ 189.952508] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 189.957541] ? __check_object_size+0x95/0x5d9 [ 189.962048] ? __might_sleep+0x95/0x190 [ 189.966056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 189.971603] ? _copy_from_user+0xdf/0x150 [ 189.975785] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 189.981336] ? copy_mount_options+0x285/0x380 [ 189.985839] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 189.991380] ksys_mount+0x12d/0x140 [ 189.995008] __x64_sys_mount+0xbe/0x150 [ 189.999022] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 190.004062] do_syscall_64+0x1b1/0x800 [ 190.007950] ? syscall_return_slowpath+0x5c0/0x5c0 [ 190.012873] ? syscall_return_slowpath+0x30f/0x5c0 [ 190.017992] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 190.023380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.028226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.033427] RIP: 0033:0x455a09 [ 190.036604] RSP: 002b:00007f744a13dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 190.044305] RAX: ffffffffffffffda RBX: 00007f744a13e6d4 RCX: 0000000000455a09 2018/06/03 22:48:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x402, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'tunl0\x00', 0x1100}) syz_read_part_table(0x0, 0x0, &(0x7f0000000180)) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a31738a6bbb5166f8802653240e0fc120cf2ef8385edf290bc3cbdcc8aedf1e77495bbf280e81255f3d8692663698d2dd072d0dd2b1b74a74940004616528a97a870cc38252b55616b1ad31620f43d90c8b9178f0ca5d7e3527cf3909f81090ff384d782e7d4e5e50ce94ade802d648318eb186775a6d92a878dd589a3bd902de0ad9714e1630fbb4b9530bc76d5fc1ba6cf0ec6f94d0e418decc90048038f2486f6be2749ce5c3f4a4cda5e7825aad88c43ae22fc92ef6ccdcbb"], 0x57) ioctl$KDDISABIO(r1, 0x4b37) 2018/06/03 22:48:38 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffbe6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c1000/0x4000)=nil, 0x4000, 0xffffffffffffffff, 0x10, r0, 0x400000) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)='\x00') mmap(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socket$inet6(0xa, 0x80007, 0xe26) 2018/06/03 22:48:38 executing program 1: r0 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0xe9df, 0x0, 0x10003, 0x3ff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x0, r2, 0x2, 0x9}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) getsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x92, r2, 0x10003, 0x400}) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000040)) getsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/06/03 22:48:38 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) setsockopt(r0, 0x101, 0x80000000, &(0x7f0000000200)="7fb3c648ccde1959c6c5552793f07a61e9df3b4dd9e1b997fe58b6d931ebf14927fb8d503ca15700e7b14b733e17e4f8ae218149953197e7e3a55b21c123ea45aa8dec5a67dd2c59e9cb465f0bf389702f895b27afeceee8eb034ef357431b3662bc80a7452995bcb9dfe50a94dd540aebf2eba62b302ed07dc351d5dad9f9c32137da16f16fd06afe94146c43efadce59cd3431ebdc88", 0x97) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000d40900000000004b", &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) 2018/06/03 22:48:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) listen(r0, 0x0) r1 = socket(0xa, 0x20000000001, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='net/tcp6\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r3, 0x10, 0x70bd27, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffc00}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x108}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$nl_crypto(0x10, 0x3, 0x15) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/229, 0xe5}], 0x3, 0x0) 2018/06/03 22:48:38 executing program 7: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0xa, 0x1, 0x0) r2 = socket$kcm(0x29, 0x4000004000f, 0x0) ioctl(r2, 0x10000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x70, 0xa0, 0xe8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0x0, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x2, &(0x7f0000008000), &(0x7f0000000240)=ANY=[]}, 0x78) 2018/06/03 22:48:38 executing program 6 (fault-call:2 fault-nth:9): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) [ 190.051569] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 190.058838] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.066248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 190.073629] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000008 [ 190.149413] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 190.180484] kernel msg: ebtables bug: please report to author: Entries_size never zero 2018/06/03 22:48:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x4, 0x2) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0xffffffffffff, 0xfffffffffffffffd) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cipher_null)\x00'}, 0x6b) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = accept4(r2, 0x0, &(0x7f0000000100), 0x0) sendto$unix(r3, &(0x7f00000003c0)="80", 0xfffffffffffffec9, 0x0, 0x0, 0x37) recvfrom$ipx(r3, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0x3d1) 2018/06/03 22:48:39 executing program 2: mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x2, 0x2050, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0xaef1, &(0x7f0000000180)="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", 0x15c) sendto$inet(r0, &(0x7f00009f5000), 0x0, 0x0, 0x0, 0x0) 2018/06/03 22:48:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/174) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840030000000b63000011634840"], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100011, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x80, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @request_death={0x400c630e, 0x4, 0x2}, @increfs_done={0x40106308, r2, 0x3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100), &(0x7f0000000140)=[0x20]}}}, @increfs={0x40046304, 0x3}], 0xf9, 0x0, &(0x7f00000002c0)="3045c91e5fe80cca4992ec36c564048c8509048b550b999d5bb0c1323ce4dc83851560f93a7374bb85a637141154e4ce51bcdaa9af5960971799352769dd906ab1eb5b7f25f8d84ee69f308e4acafba57a24ea7a7350cbccbe21f3994dc2752ae2d724b8e42e6661a5f2efa3076cc5f763c336fa7ab2bf76b2fede397fc85efb26065a06ba3cd6b7be198b0fc1296d168a1f542533ee9a8ddf3ee189136ed1ff3c02ddfdccfb69bdfb835f0fc76ecfc31819b43a2ba4c6c820f34af69974896fc58d4d00b041ff552996e21c78e37d0eb90704d8a287b52880b7dca650571011f2c88f4b0f22927672ac3936caf9709c106e0a13af7343d971"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) 2018/06/03 22:48:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @multicast1=0xe0000001, r1}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x200, 0x0, 0x7a3, 0x9, 0x3}, &(0x7f0000000380)=0x98) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="e00000a0d21414aa00000000000000f9c51b8f796e85f311337d83df700a461fd4f191172cb22dc2700b6a899822e8bf4bdb7ac14d9466255c060fc0b89fdda01f308294642b8723452893d937f1a95670cf1df00ce5e61e850225fea771fa3f980464049fe4903969af3bceee1bc4981a451c52383ffe0a9869c05ccc"], 0x10) 2018/06/03 22:48:39 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x40041) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x101, 0x3, [0x1000, 0x6, 0x6]}, &(0x7f00000003c0)=0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0x1ff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x3}}, 0xb5f9, 0x8001, 0x40, 0x200, 0x10001}, &(0x7f00000004c0)=0x98) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@quota={'quota\x00', 0x18, {{0x30}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e23, @loopback=0x7f000001}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x4e24}, 'veth1_to_bridge\x00'}) 2018/06/03 22:48:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='#xf'], 0x3) [ 190.376566] binder: 14072:14074 BC_FREE_BUFFER u0000630b00000003 no match [ 190.408165] binder: 14072:14074 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 22:48:39 executing program 2: r0 = socket$inet(0x10, 0x200000100000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x200002, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xed3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r2) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001380)=""/176, 0x1f5}], 0x2, &(0x7f00000014c0)=""/136, 0x88}, 0x0) clock_gettime(0x0, &(0x7f00000012c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f00000044c0), 0x0, &(0x7f0000000080)=""/102, 0x66}}, {{&(0x7f0000004580)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005700)}}, {{&(0x7f0000005740)=@nfc, 0x80, &(0x7f0000005b80), 0x0, &(0x7f0000005bc0)=""/177, 0xb1}}], 0x3, 0x0, &(0x7f0000001700)={0x0, r3+30000000}) [ 190.451510] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 22:48:39 executing program 6 (fault-call:2 fault-nth:10): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) [ 190.492387] binder: 14072:14074 Release 1 refcount change on invalid ref 1 ret -22 2018/06/03 22:48:39 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffa888, 0x0, 0x8}}}}}}, &(0x7f0000000100)) socketpair(0xa, 0x80a, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000080)) 2018/06/03 22:48:39 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x3, 0x8}) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000280)=""/4096, &(0x7f0000000040)=0x1000) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0) 2018/06/03 22:48:39 executing program 7: capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = socket(0x10, 0x2, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f7980584303d01f0549a89d78dc4af89ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ad3657818feb0279188b92b2e6b035cde4c66c6b00081bd106f6adfe58108a8be89d3695670374e304c071de17635f3034de8c2372e07000000000000007d656f") sendfile(r1, r1, &(0x7f0000000080), 0x800) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 190.533793] binder: 14072:14074 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 190.541712] binder: 14072:14074 BC_INCREFS_DONE u0000000000000000 no match [ 190.553320] device bridge_slave_1 left promiscuous mode [ 190.558995] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.559645] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.593255] device bridge_slave_0 left promiscuous mode [ 190.598978] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.643410] binder: 14072:14074 transaction failed 29189/-22, size 0-8 line 2856 [ 190.662818] binder: 14072:14074 BC_FREE_BUFFER u0000630b00000003 no match [ 190.670690] binder: 14072:14074 transaction failed 29189/-22, size 0-0 line 2856 [ 190.681141] binder: 14072:14103 Release 1 refcount change on invalid ref 1 ret -22 [ 190.689605] binder: 14072:14103 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 190.697289] binder: 14072:14103 BC_INCREFS_DONE u0000000000000000 no match [ 190.704888] binder: 14072:14103 transaction failed 29189/-22, size 0-8 line 2856 [ 190.732121] IPVS: ftp: loaded support on port[0] = 21 [ 190.741582] team0 (unregistering): Port device team_slave_1 removed [ 190.745542] binder: undelivered TRANSACTION_ERROR: 29189 [ 190.761890] team0 (unregistering): Port device team_slave_0 removed [ 190.775751] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 190.793996] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 190.838091] bond0 (unregistering): Released all slaves [ 190.860063] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.883847] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.910305] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.935067] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.953180] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.968100] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.993794] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 191.017428] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 191.041966] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 191.762228] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.768695] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.777435] device bridge_slave_0 entered promiscuous mode [ 191.815801] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.822384] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.830312] device bridge_slave_1 entered promiscuous mode [ 191.867269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.907500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.020496] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.063302] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.241713] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.248910] team0: Port device team_slave_0 added [ 192.277901] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.285423] team0: Port device team_slave_1 added [ 192.321100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 192.328071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.343434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.366955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 192.374151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.382118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.403107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.410292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.418429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.440476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.447593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.455757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.693502] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.700009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.706785] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.713171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.720465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.311357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.579430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.663697] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.748335] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.754566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.761865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.839664] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.331115] FAT-fs (loop6): bogus number of reserved sectors [ 194.337256] FAT-fs (loop6): Can't find a valid FAT filesystem [ 194.353475] FAULT_INJECTION: forcing a failure. [ 194.353475] name failslab, interval 1, probability 0, space 0, times 0 [ 194.365091] CPU: 1 PID: 14383 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 194.372556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.381904] Call Trace: [ 194.384484] dump_stack+0x1b9/0x294 [ 194.388112] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.393297] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 194.398483] should_fail.cold.4+0xa/0x1a [ 194.402541] ? is_bpf_text_address+0xd7/0x170 [ 194.407042] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.412158] ? unwind_get_return_address+0x61/0xa0 [ 194.417092] ? __save_stack_trace+0x7e/0xd0 [ 194.421405] ? graph_lock+0x170/0x170 [ 194.425217] ? find_held_lock+0x36/0x1c0 [ 194.429277] ? __lock_is_held+0xb5/0x140 [ 194.433349] ? check_same_owner+0x320/0x320 [ 194.437681] ? rcu_note_context_switch+0x710/0x710 [ 194.442615] __should_failslab+0x124/0x180 [ 194.446864] should_failslab+0x9/0x14 [ 194.450673] kmem_cache_alloc_trace+0x2cb/0x780 [ 194.455336] ? __kmalloc_node+0x33/0x70 [ 194.459310] ? __kmalloc_node+0x33/0x70 [ 194.463287] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.468298] __memcg_init_list_lru_node+0x17d/0x2c0 [ 194.473316] ? kvfree_rcu+0x20/0x20 [ 194.476959] ? __kmalloc_node+0x47/0x70 [ 194.480929] __list_lru_init+0x456/0x790 [ 194.484984] ? list_lru_destroy+0x4c0/0x4c0 [ 194.489299] ? mark_held_locks+0xc9/0x160 [ 194.493440] ? __raw_spin_lock_init+0x1c/0x100 [ 194.498028] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 194.503044] ? __lockdep_init_map+0x105/0x590 [ 194.507534] ? lockdep_init_map+0x9/0x10 [ 194.511588] sget_userns+0x73a/0xf00 [ 194.515294] ? get_anon_bdev+0x2f0/0x2f0 [ 194.519359] ? test_bdev_super+0x50/0x50 [ 194.523412] ? destroy_unused_super.part.11+0x110/0x110 [ 194.528853] ? alloc_vfsmnt+0x771/0x9d0 [ 194.532815] ? mnt_free_id.isra.27+0x60/0x60 [ 194.537219] ? kasan_check_read+0x11/0x20 [ 194.541351] ? graph_lock+0x170/0x170 [ 194.545149] ? cap_capable+0x1f9/0x260 [ 194.549036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.554561] ? security_capable+0x99/0xc0 [ 194.558715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.564254] ? ns_capable_common+0x13f/0x170 [ 194.568654] ? get_anon_bdev+0x2f0/0x2f0 [ 194.572705] sget+0x10b/0x150 [ 194.575798] ? test_bdev_super+0x50/0x50 [ 194.579848] ? fuse_ctl_add_conn+0x280/0x280 [ 194.584246] mount_single+0x3a/0x170 [ 194.587960] fuse_ctl_mount+0x2c/0x40 [ 194.591761] mount_fs+0xae/0x328 [ 194.595129] ? mpi_free.cold.1+0x19/0x19 [ 194.599180] vfs_kern_mount.part.34+0xd4/0x4d0 [ 194.603771] ? may_umount+0xb0/0xb0 [ 194.607385] ? _raw_read_unlock+0x22/0x30 [ 194.611520] ? __get_fs_type+0x97/0xc0 [ 194.615398] do_mount+0x564/0x3070 [ 194.618930] ? lock_downgrade+0x8e0/0x8e0 [ 194.623067] ? copy_mount_string+0x40/0x40 [ 194.627294] ? check_same_owner+0x320/0x320 [ 194.631630] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 194.636652] ? __check_object_size+0x95/0x5d9 [ 194.641155] ? __might_sleep+0x95/0x190 [ 194.645139] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.650668] ? _copy_from_user+0xdf/0x150 [ 194.654808] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.660344] ? copy_mount_options+0x285/0x380 [ 194.664830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.670359] ksys_mount+0x12d/0x140 [ 194.673978] __x64_sys_mount+0xbe/0x150 [ 194.677959] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 194.682978] do_syscall_64+0x1b1/0x800 [ 194.686858] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 194.691696] ? syscall_return_slowpath+0x5c0/0x5c0 [ 194.696631] ? syscall_return_slowpath+0x30f/0x5c0 [ 194.701557] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 194.706923] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.711765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.716955] RIP: 0033:0x455a09 [ 194.720129] RSP: 002b:00007f218e839c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/06/03 22:48:43 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x4) ftruncate(r0, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x4}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fadvise64(r0, 0x0, 0x1f, 0x4) 2018/06/03 22:48:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x408080, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/164, &(0x7f0000000100)=0xa4) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000180)) 2018/06/03 22:48:43 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x7fffffff}, 0x2) rt_sigprocmask(0x2, &(0x7f00000000c0)={0x3b36bb91}, &(0x7f0000000100), 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0xfffffffffffffffb}, 0x4) prctl$void(0xd) rt_sigprocmask(0x2, &(0x7f0000000180)={0x8}, &(0x7f00000001c0), 0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000280)={r2, 0x3}) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0)={{0x6, 0x1}, 0x9}, 0x10) r3 = getuid() ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000300)={0x5, 0x3, 0x1, 0x7, 0xc34}) fcntl$setstatus(r1, 0x4, 0x800) connect$rds(r0, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000380)) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000003c0)={0x1, 0x3}) setfsuid(r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000480)={r4, 0x8}, 0x8) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/191, 0xbf}], 0x2, &(0x7f0000000640)=""/227, 0xe3, 0x2}, 0xff}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/90, 0x5a}], 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x5}, {{&(0x7f0000000840)=@alg, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/213, 0xd5}], 0x1, 0x0, 0x0, 0x1}, 0x3f}], 0x3, 0x40000000, &(0x7f0000000ac0)) gettid() ioctl$TIOCNXCL(r0, 0x540d) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) futex(&(0x7f0000000b00)=0x2, 0x9, 0x2, &(0x7f0000000b80)={r6, r7+10000000}, &(0x7f0000000bc0)=0x1, 0x1) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000c00)) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000c40)={@loopback}, &(0x7f0000000c80)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000cc0)={r5, 0x3}, 0x8) accept4$inet6(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000d40)=0x1c, 0x800) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000d80)={'irlan0\x00', 0x400}) 2018/06/03 22:48:43 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x40, {0x2, 0x4e21, @broadcast=0xffffffff}, 'lo\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair(0xc, 0x8000f, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKRRPART(r2, 0x125f, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/uts\x00') bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00003c1000), 0x0) r6 = accept$alg(r4, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003640)=[{{&(0x7f0000000680)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/92, 0x5c}], 0x1, &(0x7f0000000800)=""/4096, 0x1000}}, {{&(0x7f0000001800)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1, &(0x7f0000002e00)=""/90, 0x5a}}], 0x2, 0x0, &(0x7f00000037c0)={0x0, 0x1c9c380}) 2018/06/03 22:48:43 executing program 4: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x422482) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0xa336, 0x7, 0x6, 0x5, 0x63, 0xffff}) 2018/06/03 22:48:43 executing program 6 (fault-call:2 fault-nth:11): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:43 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) 2018/06/03 22:48:43 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001140)='stat\x00') connect$l2tp(r1, &(0x7f0000001180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x4, 0x1, 0x4, 0x1}}, 0x2e) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000011c0)) socketpair(0x4, 0x7, 0x5, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000001200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001280)="28f26aacac9a6eb2747e4e8d103759eb0b666a68c80331858990ee286b73ebb649dc8f9be6baedcdd4b5c9984c18dc6261ab72", 0x33}, {&(0x7f00000012c0)="a51c54c8b945c94a4cabb107ff649fbf2dd59956e7cdad8393d088e2c2fb0588905d59d10299b7c8ec5237536595a1ac7c835106d159e0be1128a3958d971a988e0c858565b078b191e49cafd516716de71fbc70a2453a1ae50aba6352c25d4ec4fa86d0fb446aa779bf40d2084adc993f92b3797eb73e4b0f280cb944c41a6f3e892c88ca039035561b7e3266e953a7a606e89bc81be125", 0x98}, {&(0x7f0000001380)="3c2f0c70d14066cf0e6a6e38d3a1bf469efb7690148dff9abdb82e4e4e12ae897e4727367d09abb96a2780bb67258b90e81d8e3cf82eccacca39d6442355", 0x3e}, {&(0x7f00000013c0)="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", 0xfd}, {&(0x7f00000014c0)="747cd3ca3dfa86c50bad4d597156a76aaa47cd95b69a0ff465200f743e336bc0648b5b943f36f1cdc752683ff479d5f5725f096d0c61f176d7b4cd8ea659ab5efb274c0ec0742d6324cfe2682ff7fa3f50886436c1ab064399695a531812d25f5b9b348a0fcd7046d706392e6fb93257c15457e3bd26995df26c1179faa149bc2d59b0090403cdc912a01d77ed1695bffc3b9bde5c", 0x95}, {&(0x7f0000001580)="deb49e55aa6fd16b28e8d307cd936d2a16dc8ff7acd1b09f41c81d41866449e9dd884beaa1c4f137b8b434ac7c9d0a271f137de4066b5c2caf2ed8d48693a8efd980ea672abe96f3134845a4102165792cab9c167495b794cd71cc7aea68f5f9fb86826f0e22a135a8380731a8c1ffdd93e872f024a3c12ba214a7", 0x7b}], 0x6, &(0x7f00000016c0)=[@rights={0x20, 0x1, 0x1, [r2, r1, r1]}], 0x20, 0x4000}, 0x80) fchdir(r1) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000001740)) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000001780)) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000001800)) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000001880)=@req={0x28, &(0x7f0000001840)={'tunl0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}) syz_open_dev$ndb(&(0x7f00000018c0)='/dev/nbd#\x00', 0x0, 0x40000) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000001900)={'bridge_slave_1\x00', {0x2, 0x4e20, @multicast2=0xe0000002}}) mkdir(&(0x7f0000001940)='./file0\x00', 0x90) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001980)={{{@in=@multicast1, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000001a80)=0xe8) accept4$bt_l2cap(r2, &(0x7f0000001ac0), &(0x7f0000001b00)=0xe, 0x80800) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000001b40)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={r2, 0x7, 0x1, 0x9, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001c00)) syz_open_pts(r3, 0x4c4c00) syz_mount_image$f2fs(&(0x7f0000001c40)='f2fs\x00', &(0x7f0000001c80)='./file0\x00', 0x1, 0x1, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="37485dacb40116f6e4591bd48aaadae73821beb6fe2784475ea9628f1757c22c3e14ce66a234b1b3d3c71e8aa241d58dd5123d649bbf6e5255a083ca1ec5d8a81b51922af17744241c37f59d6af4991bcdf932fa9e625510ec24feeb5ea611a13e7ce162d8dc0f32764b586116dff4d1f6d00012c05e7d6259b71ae3f3838cb44b887cb7177d33efe63f4e01a30f618e421de53ae74e25106d0bbd6d8f90f323128ef8f4cc89f687d54b9215395a6c0aa6a2af9bd3f45a3d656702046713f662fc554652", 0xc4, 0x1}], 0x300000, &(0x7f0000001e00)={[{@noacl='noacl', 0x2c}, {@alloc_mode_def='alloc_mode=default', 0x2c}]}) clock_gettime(0x7, &(0x7f0000001e40)) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e80)="fffca7fe325fef4bb1a8e11b61e9886d55be1b72", 0x14}], 0x1, &(0x7f0000001f00)=[@op={0x18, 0x117, 0x3}], 0x18}, {0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="30cb1065489548589e07ebacaad3639127cde79f3887e23bea3a21518a9161277bde90bfbfda778d60b769c6c0d6e04b76f7cf6d63d7d125ef0e38b50465f1590ca816b0c058952d1b0c00cc2c517a9aedb0eb3222021f732e444b08c704e484b56724fae0afe275617f0ac3a9959af8373e05ae40105ec7ca87408cd7ecfef1aa5e0baba3f22744", 0x88}, {&(0x7f0000003000)="d03c81038713dd274c39232c58887f73612d0a6f9e6b16257a3ab11943cccfe323bf665056ef33dca8a72262b81aa10653accba6816c8d0cdfac3b0b89a0687059a325465fa65e5cdd8b2a562064a65eee6799a69e9c140728e136283dda5d4354e698bc4d726accb87db390329eeb68574a80c33146c6f3964136ef2c5cd12fe19485756c91e316c1e0", 0x8a}, {&(0x7f00000030c0)="98443f3b901e86090b073b796b84fef17525fe67d182afd6bcf6fed0b0714f9973ccfbad2d4ac72523168e095170000982ee9b3977489a2f923410cf609f89ee2b880204de8acfdb52c374496f9905d792b1663ade1046cd57fd11452674d624640237e26726f5d68cd7ce393a53c644812d604a429d8884ad0e131758a04bd055e02c550383711dc70877874d962d6d3dce84470c09ca", 0x97}, {&(0x7f0000003180)="34fb9483ab286334478b7e20b87ab794ab0847897ad5ff90", 0x18}, {&(0x7f00000031c0)="f9b4cecf307ad771e8c24a0bf0e8e9194fa5eb96ae5a732badd5dcf2b5fb8f819eac03850b448781a6e820d6001aa7686780215bca328a01028974b0c511fef60081bc1d62479d611c90cf398682ce24c71170492ce77e7e152d24ce11a07bb7e52eed4b04610fb2b6d4a910b5434c78f63325283f876a6be2cc6193c9c305a18de32c9e4ed5d0de2e78ef600081f29895471c8644b8c3002135a834d247c990edb0885d326d7a915ce9a820e7137deb878c68a1a8f5d2dba104e54f4db1c5baa1a827fcd52102cf9ea79d2b9769703c99ff46037addbab72ac818f9e1fd71ed2d212fd4ecb7b5b963ba6f994ce06b13d050d40daf73cd9b1f8f645b0b", 0xfd}, {&(0x7f00000032c0)="c69542ca4d14afcbe90df5ca8b33c65a3d3d868cbbce2124357d93653d32352174ea8b26ef1dc1389b78e7f9084b3d7a03e3cbb77224775aacfbe09a3a19cce98b8b26e672b1b96667a9a9acd668e0b2054aac4d629fcfd4aa40c8cbdbc226ea3f7d6a37b7a9d245db5ca0577bef7547d9a54cc794e9a07617db970bd14e90a090ccdccbe275b2f136245f80f2c568ae6ef8d764efd0", 0x96}, {&(0x7f0000003380)="c47570aede8c5c5221792acc92f3d59cdac201083fcd168704200b36926939a9f4fde1e799950d12e4bd0a3b3e5e9ef4a38b13547fc21aad73e8ec6f4d1fecaf0b210fa8a6ad8605a9b4e29a7696aeee8917c95106246aff75cbb8f00b27af2cff29fcbf472bfe47a6f1e096a164ac8412c1946589c00e11782ebb38a0d9ec7e052361bb0f0c6126a57fdb0e1068dd353c8d1ddf3692136277776d", 0x9b}, {&(0x7f0000003440)="b72639bfe80e14664519c2c210ec96a58a5872ef30a709fe6e615768ab44a09e075dc1adf0247fac671dddacb9197b7ddc7640bc6d8ad4bcc3ab4039e46900e5111cfe", 0x43}, {&(0x7f00000034c0)="38930d767ff6e586a8d2d3d871221c00fb6e0bebf6f80711ee37951500b3f3c0980f4503c45faeefb5f5c6376ef5b85445a935615a801933ea73f9797154b107e6d019e048ce6c320e573bf479ec5fc8a6f19ddde2850817e3327bc5c809d670eda61d42c7bb3a56148abd22f0cbde84106fa8279f1e9af1d068de2e5aae0fbebffd244eedfaed2654162379a14189e8d11da65ba8e9ce335a823f9737872617a7e3b23a85c8b22055b80dc2dcbb1cad", 0xb0}], 0xa, &(0x7f0000003640)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xc0, 0x117, 0x2, 0xa5, "16c03304008f98a741e9fb6cdf9d7957a86147b12d9212e4f9451858f3927f950214d70528edaa7592b54ed347cfa3baafb373c25a1a3245d4499e01acbd50d3c707f2e5202ac50b591ea749b776daa941de4bf183d9b03d1bf64a321e1dfc9a3588d7d581842ef761e94f7b675d9c6d6f7726b6c9a95b3c1794960b19368120216b5c4b99fe846aa11dccbe4cb0515f61c08f272273b8faa240dc6a90c7f6d377402e7e72"}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6c, "85f135b412bb045b52beb4414e33effc047ac198c4bd635bb4ca347111c7ffcb3bd5f11bf85de67f5c22953e6ad06bb3b36d8ca7d86f98e0de8bda13396b27a6cce8f8b19e90a2d8fa71e8dc2c55673ad97d2752a23e3b7437dcacab2956ac3a2a327acc4889b26999286b08"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1b8, 0x800}], 0x2, 0x4008040) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000003880), &(0x7f00000038c0)=0x4) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) init_module(&(0x7f0000003900)='f2fs\x00', 0x5, &(0x7f0000003940)='f2fs\x00') ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000003980)={0x7fffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000039c0), &(0x7f0000003a00)=0xc) faccessat(r2, &(0x7f0000003a40)='./file0\x00', 0x1, 0x1300) [ 194.727846] RAX: ffffffffffffffda RBX: 00007f218e83a6d4 RCX: 0000000000455a09 [ 194.735102] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 194.742358] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.749615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 194.756888] R13: 00000000000004d1 R14: 00000000006fc438 R15: 000000000000000a 2018/06/03 22:48:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0xa, &(0x7f0000467000/0x2000)=nil) 2018/06/03 22:48:43 executing program 5: r0 = socket$inet6(0xa, 0x100000000000003, 0x6358) ioctl(r0, 0x2, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="f6"], 0x1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000001300)='z', 0x1, 0x10000}], 0x1000, &(0x7f0000001500)) 2018/06/03 22:48:43 executing program 0: timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x1c, 0x0, @thr={&(0x7f00003b6000), &(0x7f00001a2fa8)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000337ff2)='timers\x00') setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f000036b000)=""/100, 0x64}], 0x1, 0x6800000000000000) 2018/06/03 22:48:43 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/06/03 22:48:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) [ 195.194297] device bridge_slave_1 left promiscuous mode [ 195.199993] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.217936] device bridge_slave_0 left promiscuous mode [ 195.223626] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.258984] team0 (unregistering): Port device team_slave_1 removed [ 195.271767] team0 (unregistering): Port device team_slave_0 removed [ 195.282141] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 195.302377] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 195.332668] bond0 (unregistering): Released all slaves 2018/06/03 22:48:44 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000028000100000083a4cd78655528ff65ffc15abb83d31732a79f90c30000000000000000f5bf47b3e27919c303e00177d3b024d6a927748c1231ccb00763bfd953581b72c19ccb354048f81b659f145aaa98cb73ca6401f2748cd176ce58bc5fccd0ab95ff26dda0af1aaee008cb7a7361fe28db4a8b6e07f1c9", @ANYRES32=r1, @ANYBLOB="000004000000000000000000"], 0x24}, 0x1}, 0x0) 2018/06/03 22:48:44 executing program 2: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpgrp(0xffffffffffffffff) r5 = getpid() write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc8, 0x5, 0x5, 0x1, 0x40, 0x0, 0x3e, 0x7, 0x2c, 0x38, 0x1ad, 0x6, 0x1f, 0x20, 0x1, 0x80000001, 0x0, 0x20}, [{0x70000000, 0x4, 0x8, 0x9d, 0x8, 0x2, 0x1, 0x7}, {0x7, 0x342, 0x8161, 0xfffffffffffffff9, 0x8000, 0x8, 0x6, 0x5fcf8528}], "dc77ee20ed639062637c1302b29a9d27b2d823d183d9792907674618e80e76d2841388523f8f79088a2c1e4d1e243c08ce9c8e7df8451ebc08581cb4f75ceb55821d5bd128f3c51327bc9010829b9a26cfdd1f2996810b6ae8a16533036177d35f37a04194061d0f37b7224e0d578988f4ca10eae16543d0e58fc5db14247103a7a43346e8025f88d006f745dcba", [[], []]}, 0x306) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000000000)={r3, r2}) 2018/06/03 22:48:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x803, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FRA_SRC={0x14, 0x2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x48}, 0x1}, 0x0) sysfs$1(0x1, &(0x7f0000000000)='veth1_to_team\x00') 2018/06/03 22:48:44 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) listen$netrom(r0, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x2) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000040)=""/129, &(0x7f0000000100)=""/45, &(0x7f00000001c0), 0x3000}) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/06/03 22:48:44 executing program 6 (fault-call:2 fault-nth:12): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:44 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) socketpair$inet6_sctp(0xa, 0x1000000001, 0x84, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x3, 0x59}, &(0x7f0000000240)=0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 2018/06/03 22:48:44 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x840, 0x0) fchmodat(r0, &(0x7f0000000200)='./file0\x00', 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000100)={0x1d}, 0x10) setsockopt(r1, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xfffffffffffffc01, 0x101, 0x2, 0x5, 0x8000, 0x3, 0x101, 0x400, 0x9, 0x6, 0xf853de8, 0x4, 0x5}, {0x9, 0xfffffffffffffffb, 0x1, 0xfffffffffffffff9, 0x80000001, 0x8, 0x100000001, 0x8, 0x8, 0x8, 0xc02, 0x20, 0x5}, {0x8, 0x100000000, 0x7, 0x825, 0x8, 0x8, 0xfffffffffffffff9, 0x0, 0xc25d, 0x1, 0xfff, 0xfffffffffffffffe, 0x2}], 0x3}) bind$can_raw(r1, &(0x7f0000000380)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10f347b11b8fb1a9, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 'sit0\x00'}) 2018/06/03 22:48:44 executing program 0: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffef3, 0x800) setsockopt(r0, 0x5, 0x7, &(0x7f0000000280)="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", 0x1000) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x20000000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="c9799b4505bff43c9a792b530f0fdabc04edaa58ebd51677eeac5f1ed6b96f944ca842f95ffe3f02c40a36343aa5e304f54cd0c23f0999a7b58473cf4ed3d8a915", 0x41, 0x8000, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x100}, 0x1c) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x3) 2018/06/03 22:48:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x8, 0x3, 0x10001}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x7, 0x0, 0x707000}}) 2018/06/03 22:48:45 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000bd0f8a)={@random="cd5c0b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "ffffe8", 0x30, 0xffffff88, 0x0, @ipv4={[], [0xff, 0xff]}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x30b, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c54512", 0x0, 0x0, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}}}}}}}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa1e1, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast=0xffffffff}, 0x3, 0x4, 0x2, 0x4}}, 0x2e) 2018/06/03 22:48:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xbbf5, 0x0, 0x0, 0x1}, 0xffffff45) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001180)='/dev/hwrng\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001340)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001d00)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001e00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001f00)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000002000)=0xe8) getdents(r0, &(0x7f0000001480)=""/177, 0xb1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002040)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000002140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002180)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000002280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000022c0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000023c0)=0xe8) recvfrom$packet(r0, &(0x7f0000001380)=""/181, 0xb5, 0x0, &(0x7f0000001440)={0x11, 0x3, r2, 0x1, 0x4, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002600)={&(0x7f0000001240)={0x10}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x18c, r1, 0x102, 0x70bd28, 0x25dfdbfc, {0x3}, [{{0x8, 0x1, r2}, {0x170, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xcc00000000000000}}, {0x8, 0x6, r6}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) ioctl$TIOCSBRK(r0, 0x5427) r7 = open(&(0x7f0000001280)='./bus\x00', 0x40040, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001140)='fou\x00') r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") io_submit(0x0, 0x2000000000000061, &(0x7f00000002c0)) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000011c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="1c00003100", @ANYRES16=r8, @ANYBLOB="000027bd393131f712f07000fddbdf25010000000800afd8f2fed5b93a7a80743990b3e37366866399176d6219ff535a46798cc8c351db0dc6f5bee4174a1c3065856412ced6efbb65"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) open_by_handle_at(r7, &(0x7f0000000040)={0xfffffffffffffdd2, 0x2, "b3f48218fbd9297391c4fd745474f88bee6da336b1769c3459579adb3a56e6bdc17da7ab80732dee44ccaa02fd6a5c288c114fedd3a40134d9710f27382e8e295add837c5350e3f238c9da6c4f0eac866f3670f7fe4bbbd5fa1a6c8ed992b6e0ccfd179314e455fecc852cce280d8db80c10090002231c32f5881aa220517ea2bbcd1954d637948a"}, 0x0) sysinfo(&(0x7f0000000100)=""/4096) 2018/06/03 22:48:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}, 0x4, 0x7, 0x632c2d3c, 0xff, 0x28}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e24, 0x100000001, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, [0x2, 0x851, 0x3, 0x1, 0x8, 0x1, 0xa9, 0x1, 0x5, 0x8, 0x8, 0x80000001, 0x800, 0x8001]}, &(0x7f0000000380)=0x100) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x400) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x6, 0xffffffff80000001, 0x4, 0xffffffffffffffff, 0x9, 0x7a2, 0x8, 0x3f, 0x0, 0x50c94afd, 0x400000, 0x0, 0x3}, {0xffffffff, 0x8, 0xfffffffffffffffd, 0x4, 0x1f, 0x5, 0x8, 0x1a, 0x0, 0x6, 0x7, 0x1, 0x7cd}, {0x2, 0x9, 0x40, 0x400, 0x4, 0x6, 0x8, 0x7, 0x7, 0x1, 0x8, 0x8, 0x71}], 0xce}) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000640)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/06/03 22:48:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='comm\x00') read(r0, &(0x7f0000000080)=""/124, 0x7c) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffa) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 2018/06/03 22:48:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000780)={@multicast2, @dev}, &(0x7f00000007c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002940)={'team0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003000)={{{@in=@multicast1, @in6}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000003100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005880)={{{@in6, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000005980)=0xe8) fstat(r0, &(0x7f0000000000)) sendfile(r0, r1, &(0x7f00004db000)=0x48000000, 0xff) 2018/06/03 22:48:45 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001e00)={&(0x7f0000000040)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000180)=""/194, 0xc2}], 0x3, &(0x7f0000001b00)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1000, 0x4}, &(0x7f00000002c0)=0xd45, &(0x7f0000000300)=0x45f6, 0x2, 0x20, 0x9, 0x2, 0x10, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0xff, 0x1000}, &(0x7f0000000340)=0x4, &(0x7f0000000380)=0x6, 0x2, 0x7ff, 0x1, 0x7, 0x8, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0xaa}}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x1}, &(0x7f00000003c0)=0x8001, &(0x7f0000000400)=0x8, 0x80000001, 0x7f, 0x0, 0x7, 0x0, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x10000}, {&(0x7f0000000440)=""/4096, 0x1000}, &(0x7f00000016c0)=[{&(0x7f0000001440)=""/49, 0x31}, {&(0x7f0000001480)=""/192, 0xc0}, {&(0x7f0000001540)=""/28, 0x1c}, {&(0x7f0000001580)=""/22, 0x16}, {&(0x7f00000015c0)=""/37, 0x25}, {&(0x7f0000001600)=""/68, 0x44}, {&(0x7f0000001680)}], 0x7, 0x30, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001740)=""/147, 0x93}, &(0x7f0000001800), 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001840)=""/215, 0xd7}, &(0x7f0000001940), 0x3}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0xffffffff}, &(0x7f0000001980)=0x3, &(0x7f00000019c0)=0x7fffffff, 0xfd1, 0x3, 0x1, 0x10001, 0xa, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x10001, 0x1}, &(0x7f0000001a00), &(0x7f0000001a40)=0x7ff, 0x7ff, 0x7b3, 0xc3c, 0x8001, 0x1, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x8fb8}, &(0x7f0000001a80)=0x4, &(0x7f0000001ac0)=0x61, 0x0, 0x1, 0x7, 0x70baf9ca, 0x8, 0x8}}], 0x2d0, 0x4000001}, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) close(r1) 2018/06/03 22:48:45 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4000, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x812, 0x4) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={[], 0x7f50, 0x3, 0x0, 0xffffffffa4e74b96, 0x876, r2}) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000000c0)=0x100000000401, 0x9) 2018/06/03 22:48:45 executing program 7: clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0) [ 196.557162] IPVS: ftp: loaded support on port[0] = 21 [ 196.967927] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.974369] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.981626] device bridge_slave_0 entered promiscuous mode [ 197.008592] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.015083] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.022281] device bridge_slave_1 entered promiscuous mode [ 197.048529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.074787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.150530] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.178643] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.291935] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.299242] team0: Port device team_slave_0 added [ 197.323856] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.331102] team0: Port device team_slave_1 added [ 197.358696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.388474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.418212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.425339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.434239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.457755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.723921] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.730357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.737077] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.743473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.708748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.801616] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.896116] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.902366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.910235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.997682] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.539942] FAT-fs (loop6): bogus number of reserved sectors [ 199.545879] FAT-fs (loop6): Can't find a valid FAT filesystem [ 199.564366] FAULT_INJECTION: forcing a failure. [ 199.564366] name failslab, interval 1, probability 0, space 0, times 0 [ 199.575777] CPU: 1 PID: 14775 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 199.583071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.592432] Call Trace: [ 199.595046] dump_stack+0x1b9/0x294 [ 199.598670] ? dump_stack_print_info.cold.2+0x52/0x52 [ 199.603856] ? __save_stack_trace+0x7e/0xd0 [ 199.608185] should_fail.cold.4+0xa/0x1a [ 199.612259] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 199.617367] ? save_stack+0x43/0xd0 [ 199.620993] ? kasan_kmalloc+0xc4/0xe0 [ 199.624891] ? kmem_cache_alloc_trace+0x152/0x780 [ 199.629758] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 199.634950] ? __list_lru_init+0x456/0x790 [ 199.639177] ? sget_userns+0x73a/0xf00 [ 199.643064] ? graph_lock+0x170/0x170 [ 199.646866] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 199.651621] ? do_mount+0x564/0x3070 [ 199.655337] ? ksys_mount+0x12d/0x140 [ 199.659127] ? __x64_sys_mount+0xbe/0x150 [ 199.663270] ? do_syscall_64+0x1b1/0x800 [ 199.667325] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.672686] ? find_held_lock+0x36/0x1c0 [ 199.676743] ? __lock_is_held+0xb5/0x140 [ 199.680810] ? check_same_owner+0x320/0x320 [ 199.685131] ? rcu_note_context_switch+0x710/0x710 [ 199.690063] __should_failslab+0x124/0x180 [ 199.694295] should_failslab+0x9/0x14 [ 199.698088] kmem_cache_alloc_trace+0x2cb/0x780 [ 199.702747] ? __kmalloc_node+0x33/0x70 [ 199.706713] ? __kmalloc_node+0x33/0x70 [ 199.710680] ? rcu_read_lock_sched_held+0x108/0x120 [ 199.715733] __memcg_init_list_lru_node+0x17d/0x2c0 [ 199.720746] ? kvfree_rcu+0x20/0x20 [ 199.724367] ? __kmalloc_node+0x47/0x70 [ 199.728353] __list_lru_init+0x456/0x790 [ 199.732412] ? list_lru_destroy+0x4c0/0x4c0 [ 199.736729] ? mark_held_locks+0xc9/0x160 [ 199.740881] ? __raw_spin_lock_init+0x1c/0x100 [ 199.745537] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 199.750547] ? __lockdep_init_map+0x105/0x590 [ 199.755054] ? lockdep_init_map+0x9/0x10 [ 199.759112] sget_userns+0x73a/0xf00 [ 199.762816] ? get_anon_bdev+0x2f0/0x2f0 [ 199.766877] ? test_bdev_super+0x50/0x50 [ 199.770936] ? destroy_unused_super.part.11+0x110/0x110 [ 199.776317] ? alloc_vfsmnt+0x771/0x9d0 [ 199.780286] ? mnt_free_id.isra.27+0x60/0x60 [ 199.784687] ? kasan_check_read+0x11/0x20 [ 199.788830] ? graph_lock+0x170/0x170 [ 199.792622] ? cap_capable+0x1f9/0x260 [ 199.796504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.802040] ? security_capable+0x99/0xc0 [ 199.806183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.811712] ? ns_capable_common+0x13f/0x170 [ 199.816113] ? get_anon_bdev+0x2f0/0x2f0 [ 199.820164] sget+0x10b/0x150 [ 199.823260] ? test_bdev_super+0x50/0x50 [ 199.827328] ? fuse_ctl_add_conn+0x280/0x280 [ 199.831746] mount_single+0x3a/0x170 [ 199.835461] fuse_ctl_mount+0x2c/0x40 [ 199.839264] mount_fs+0xae/0x328 [ 199.842637] ? mpi_free.cold.1+0x19/0x19 [ 199.846701] vfs_kern_mount.part.34+0xd4/0x4d0 [ 199.851287] ? may_umount+0xb0/0xb0 [ 199.854908] ? _raw_read_unlock+0x22/0x30 [ 199.859054] ? __get_fs_type+0x97/0xc0 [ 199.862942] do_mount+0x564/0x3070 [ 199.866476] ? lock_downgrade+0x8e0/0x8e0 [ 199.870637] ? copy_mount_string+0x40/0x40 [ 199.874871] ? check_same_owner+0x320/0x320 [ 199.879203] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 199.884215] ? __check_object_size+0x95/0x5d9 [ 199.888717] ? __might_sleep+0x95/0x190 [ 199.892685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.898220] ? _copy_from_user+0xdf/0x150 [ 199.902376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.907917] ? copy_mount_options+0x285/0x380 [ 199.912419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.917952] ksys_mount+0x12d/0x140 [ 199.921594] __x64_sys_mount+0xbe/0x150 [ 199.925579] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 199.930593] do_syscall_64+0x1b1/0x800 [ 199.934484] ? finish_task_switch+0x1ca/0x840 [ 199.938978] ? syscall_return_slowpath+0x5c0/0x5c0 [ 199.943919] ? syscall_return_slowpath+0x30f/0x5c0 [ 199.948867] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 199.954239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.959096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.965214] RIP: 0033:0x455a09 [ 199.968399] RSP: 002b:00007f1fea733c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.976117] RAX: ffffffffffffffda RBX: 00007f1fea7346d4 RCX: 0000000000455a09 [ 199.983380] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 2018/06/03 22:48:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/06/03 22:48:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6669000000000bfe"], 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0xffffff17) 2018/06/03 22:48:48 executing program 5: r0 = memfd_create(&(0x7f0000000000)="000002000000000000000cac22f2b6", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x2, 0x0) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0x80, &(0x7f00000002c0)={0x6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x3f, 0x6, 0x6, 0x0, 0x0, 0x5, 0x7, 0x6, 0x0, 0x100, 0x6, 0x56d7857d, 0x3ff, 0x5, 0x8]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r3, 0x5d, "62201a67cc4d4a0e42fee692678ed4d7744516cdd0315194bc4b16c2a0db35aa49c0495bd4e09c0ec662286959f365fea3eb774c787037e28ef42b71225f2ea134070753a0e3a7f9b8a3c49ada65c5a5eecb5dca89138175af50799ce5"}, &(0x7f0000000200)=0x65) 2018/06/03 22:48:48 executing program 3: r0 = timerfd_create(0x7, 0x80000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r4 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f000002cff6)='./control\x00', 0x0) statx(r4, &(0x7f0000000080)='./control\x00', 0x5000, 0x0, &(0x7f00000000c0)) fcntl$setstatus(r2, 0x4, 0x2801) syz_open_pts(r2, 0x200) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000fd6000)='z', 0x1) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xb57b, 0x6, &(0x7f0000000540)=[{&(0x7f00000001c0)="699c0f49da1c5292f2c414e4e5a8e2460cfbb5cdecfa643002c94ee5f59f7b11b2a6d77806d5fae5290bd0ca9f27e51d9f68810d722c93eacce4c3c05f598a339a403470cb89df18c7cd48d3abfa3bd6abd87647ce8bfb3ea33e7f0c5e6ef04522a36d4c73934e0273a41d6fc3b0ab8d9ae063e03570f2aa22f07ae125fbdb396f7bddefb460c30992d5448d8085e20849655b03ccdbb657ea1134992c7fb811f10258900b61a092574c36b00872f45a91295e7ee814d14e3aa28d1cfe3a", 0xbe, 0x80000001}, {&(0x7f0000000280)="991249e1dbc2bfba414e2f460b3c8488778cbc32c1788f6f1d0c974aed93466f24042bcda6ec3db2154543c6ac73c9b39282bf318dce45f997f315318bfa1ec5311c45bd45a3bbe19d66e7d6ac4e451bfe1900fba9e304cd51deb1b89268eda19c8a9118d1650eb1fa2f1732fae2500e6cfe592059d51359e98bf94933dd7c4754e878ac16cdfd7166b7cbf0e6e9d5b08f4041f402c3eace856c8b6cd192efe4d920d1", 0xa3}, {&(0x7f0000000340)="29327daf50a2f6f5e103cc84973a9b0913aa55b526b7d50e625ef61b9f726a98ffdc8d37b39d91aebdc110ff7c46527a971336dc938bc178c2f32cc872a2575340a82c65dc631a1d6e9352417ee53b150942c0b74137815cc3d6607650d2e67a93d4c788021c849d1d315dc567a0ef5ca45f58915ea11e0642018a2f3ba54f1476af0f995371dbd10e31ce7cfe8920937c5dabd9b572a9d01586532227f222c774bd40ca602129253b9fbaea75c622922e403c8e2b43652ff2d5723c60cdcbea81a3ce4e5399738f85c0", 0xca, 0x4}, {&(0x7f0000000440)="86bfcfe911e413a4ce7a584f7752b69824d9bf6384846697477a3e48b11c8630d054db3ac1052743810455d8e86bcc149167403abe8d5315dcea1fcd980630677ccf09f5b5269cdb1eedd49724bf20b8a87b2c6227534bc0da4721b77bf9fd9d333f11fd023d7ca9768b09e3aa768129266f897daa1e86001c00723826e0929d76e41678d970b11c9012b0c2042e91c9afeaa6a1ecb2292c7fb45141", 0x9c, 0x3}, {&(0x7f0000000100)="b2b73c62df8d30f276ea45ed82f8", 0xe, 0x3}, {&(0x7f0000000500)="5875f15336245cba5e61067807a0a5b4116e295a687f85707d7b24a6bb29c2ca43f70bb713702061814868c80122f704bb3c6e1d7b7ca92f0770", 0x3a, 0x1}], 0x2200058, &(0x7f0000000600)='/dev/ptmx\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 2018/06/03 22:48:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x200, 0x4) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000b07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/06/03 22:48:48 executing program 6 (fault-call:2 fault-nth:13): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x58, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)={0x1, 0xc, [0x8000, 0x400, 0x40]}) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) read(r0, &(0x7f00000000c0)=""/8, 0x8) sendto$inet(r0, &(0x7f0000000500)="078fd1c9a5c5f3c4b10b3c04aed824d52976da04b17457afe303e6b8dba91cb1477c239848be2d2e224a86f6cdbf4bf01fc229ef3705d8a6fe5e54f8b954590f7e6fc6a121b4014ecfd25a5e2e90debd10ae3823ed3fd35a6e5f674d279a634ad5e4cb73ce7f24a089f1f2491dfd1e91e8f43923f720d7ee4c4a25e3b3b20983e3fd0467572499e051f5f7a0c5e0e5855cbbd8af32c27cce6f925eb51977a24be2e5b98798cce2c309ca5fbc8819388db51f3714e16c36980f3bd777e1a11dd006a065453c614b10ac944cc03bd3d6e1b4859809961becfae62df24a40f311cffc7a64c33f6d79f0886e8690c878fd09c696ba7e18857e1f34b0e5e24fd9d7843d75f4a184c326d070aea3cea7ef30d51a30540fa1053b31127c7d00e08cb9380e2e9d13acca75c85c8aed6855117ad840bbc6364f496126ef5a822791332180e8b2633a765ce7d0a40edd026d470b52f923a95a7a803a8f259e792a9324590e25aac295f38716cddc75844968b10175648f805967b1a695ebeda47ab5251d668e46c37b8270a837c5867b5666f3a26b322dce3b67d546bfa64c8ffb5ba9416890db50e12d93868ade46fde9b6118e1380d2f28d87952bb8302c96fc39e1d86d8f6d197a3a3716f535627fb8303ae7c1ae023f8c664c24aff775b54c063be14a58e987dffd68a1ae3c8f142d27e89fbbc6f6b9b48f6d88872e301eefedd832345d4a297829de9e5834800fd005d86d0bdb825a90d30cc5b33e434082fb17abe3353242cfa0155e8a6c31a5e2494cc604018da44180001334ee783846e6ab843c0a9c9e3fee5c4e2651970a50cc8a7da23be2530daf105384f71228d3f7d82f12e1caed4f1f6e45eb9a62a32802b8f98285ffae73094b37fad1c32e60f3846248f18827c81894dfc9df72e3713a00163d28b835fa815b17a6961a7e34abc00321dbf8ceefef6823169201abbd8c39665217c9ff3e2100edf4e9469325831a5b63f84b46c10cac35b5a92376b3f95873c061c990119a122563405b46336a3abecabfb36997b1002d75a5ee167b2decc03d063098b9a2793710409b452ea4ca3382a07f7e5181713091518eeda6092666e854955e0ae55f77ae940cf7f07122a973ab40c896f11f1c71478a047b55d2f85f68cd3cd9ea8c0f45b75e7be5d55a1cc37f6650e3af", 0x345, 0x40011, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000100)={0x80, 0x80000000, 0x6637e972, 0x0, 0x0, [], [], [], 0xfff, 0xfffffffffffffff7}) 2018/06/03 22:48:48 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000380)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev\x00') sendfile(r0, r2, &(0x7f0000000040)=0x603, 0x4) getresuid(&(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)=0x0) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x1c, 0x7, @thr={&(0x7f0000000080)="a5baa6829846492bda64b45c6f81da9527fce55a91efa0cecffdc95aba852c907f64ab45ed981fd52c36", &(0x7f0000000140)="621b0797a6b628d1f237fd72c2e9d31baa422781fee54af84b4294931cfee18024aa07c69a5b7011a69b146a9202bd90da0715a52a8888bfbc543df2f6a8e30ec0d018af6059ccbd489a5e10ed09ff7ae98517b4a827f708ca563d53f2641a37311fe144fe33c2"}}, &(0x7f00000001c0)) [ 199.990650] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.997939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 200.005208] R13: 00000000000004d1 R14: 00000000006fc438 R15: 000000000000000c [ 200.089109] ceph: device name is missing path (no : separator in /dev/loop3) [ 200.101961] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 2018/06/03 22:48:49 executing program 2: r0 = socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x6, &(0x7f0000000000), 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000)=r0, 0x36) 2018/06/03 22:48:49 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x5, 0x15, 0x0, 0x6}) r1 = socket$inet6(0xa, 0x1000000000000, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [0x1f, 0x1, 0x0, 0xfffffffffffffffd]}) 2018/06/03 22:48:49 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_emit_ethernet(0x7ffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaabb08014400001c00030000000090787f000001ac14141e44ed01eaae2bd77d"], &(0x7f0000000000)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x80000) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) [ 200.150972] ceph: device name is missing path (no : separator in /dev/loop3) 2018/06/03 22:48:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x600) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) 2018/06/03 22:48:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x200000000b, 0x80, 0xad, 0xa37, 0x1, 0x1, 0xfffffffffffffffd}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100)="0bad", &(0x7f0000000440)=""/4096}, 0x18) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x9}, 0x4) 2018/06/03 22:48:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0xa5aa, 0x8001, 0x0, 0x2, 0x7f, r2}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) 2018/06/03 22:48:49 executing program 6 (fault-call:2 fault-nth:14): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) sendmsg$alg(r1, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000985000), 0x0, &(0x7f0000164000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c46ff0400040000000000070001"], 0x10) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/250, 0xfa}], 0x1) [ 200.403059] *** Guest State *** [ 200.406448] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 200.415383] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 200.424311] CR3 = 0x0000000000000000 [ 200.428117] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 200.434168] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 200.440222] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 200.446956] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 200.455052] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 200.463093] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 200.471143] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 200.479175] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 200.487231] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 200.495274] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 200.503326] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 200.511370] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 200.519425] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 200.527452] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 200.533950] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 200.541489] Interruptibility = 00000000 ActivityState = 00000000 [ 200.547788] *** Host State *** 2018/06/03 22:48:49 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x3f, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000080)={0x0}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x2, 0x3, 0x40, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r1, r2, 0x9}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0xffffffffffff0000, 0x0, 0x10003, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000180)={r4, 0x8}) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000)) [ 200.551061] RIP = 0xffffffff811f744c RSP = 0xffff8801b19b7390 [ 200.557150] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 200.563610] FSBase=00007efff39b0700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 200.571510] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 200.577436] CR0=0000000080050033 CR3=00000001af66a000 CR4=00000000001426e0 [ 200.584520] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 200.591262] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 200.597384] *** Control State *** [ 200.600911] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 200.607646] EntryControls=0000d1ff ExitControls=0023efff [ 200.613169] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 200.620145] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 200.627112] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 200.633850] reason=80000021 qualification=0000000000000000 [ 200.640211] IDTVectoring: info=00000000 errcode=00000000 [ 200.645712] TSC Offset = 0xffffff91dc00305d [ 200.650076] TPR Threshold = 0x00 2018/06/03 22:48:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "87bb93c3f4842ef7090234ab6d126eec4e4b3176c1f3f0a8b2700d48cea7e2a674277fb38afcc2f2138b9721f7cdfd8e74a364db59ea3efafbded973d6ef20"}, 0x80) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '#\x00'}, &(0x7f0000000100)='-\x00', 0x2, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '-\x00'}, &(0x7f00000001c0)=""/87, 0x57) [ 200.653544] EPT pointer = 0x00000001b23d401e 2018/06/03 22:48:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) close(r1) 2018/06/03 22:48:49 executing program 1: r0 = socket$inet(0x2, 0x2, 0x81) getsockopt(r0, 0x88, 0xb, &(0x7f00000000c0)=""/148, &(0x7f0000000040)=0x2ae) [ 200.714578] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 22:48:49 executing program 4: syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001440)={[{@iocharset={'iocharset', 0x3d, 'none'}, 0x2c}]}) syz_mount_image$hfs(&(0x7f0000000580)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x4e, 0x1, &(0x7f0000000000)=[{&(0x7f0000001480)="70c301a1fd16d2b4fc20147cfb457df0725d2883020f307e0df2ba1c13415864c4aef197e3ff9f55cf6bb863e3b453e61a80ab287d3c72396aef5303a644a2885ad04accf29d7b131d5fcaeb6eebe1a6f6ca38af596bb92399df688dae97aa122fcca46d35948a67058189c55f03c6225beafd89765d9ba7ea090c55b6e16af822cf8d57d150e52964129f884531554304d6e6574a741e2f58fd6d2dc6ef776833604eb34ed30497d07dfabf15bfbcd68b0d5ef7da5e9f06f43deeaaca1071a1e301201d587b5db1d72edc9cb4acfa5012e54719b32d32829c40dacf05eae9c2efbe74a98c2b5ecfd15c8dca1cf069b9042134e52c4ff0b788fe1f26a0bff7e8aec9f522501b30a18a281afe3b76eba99ea10f9ba70803af30b64fefe31551cff559529536bed1753b20c6c3b8a73b496a5cd78f5d147ac98f88cec10a7ca65547042f22021b5847c8c625175bc4d65a5a6b7e3d62e6dc89adb2edc3c28fb41295e047809ac6e6305598071364e589fb8a1ef9c30102ea6b45d88ab2cd4d1c2d6618c225f5c089b59dd86caca982099f1c00df08b13c7a85cea2274086d08c512405c74c6ea86fdc03df2e4341abf75b1d583b0dec6e4c6e5889fcfeaed7c4705dff8bbf12c912561f17496a9439e5fbb261838f6ac4d97d352faa244b49bc71715558b6685f749fb7469e57c96b85a07ad5f362e0915023a6fa0bae524d9062dac11ccdefdc38f5bb73b3cfe2104a33b352a5f1eda23d2b184a162bcefb0c45eddce0e6602199bfe7b8627016e0f736752c0c94304c748d5f0b985624e735a805e6cdc88d288856946d28609856eef8b3316050c6249940cfa6d4e6a8052f471e5c0c7b53349ad8a9c22fe8083f802670be634a90cb44f32310b51b55bd4a4ea97bb5dcc3a058b9d6fd3c6d67213337ae1140406267f9f3a4f0db13f14b0b637067cdd2a52d5098e5998e962b6776821b5db420b827cc09bb6b6ddcdaecbd2627c2c570a277d551efe14f5c0274f91f5a5b89011cae70fd602c6dff4bff3107cb40b954e050ee3e8fd4b8f056a08dc04758ada22b868fcd9c2573644741d3b801c8894135e42820a1a0b9216d0e241c6f39b9f72b8fe32d33a91e7de054b22e35d36ffe6c4a531459f4e6cad8c84c1e2a34f5941492a336ffc288675bffa2e6f5ead598bf8f1b46e9ecd5b4468da039ca39cbfa177ee01054b494c820903e9cc1a853b06bf6c62368eaa4105d94aecde82df8b38457e4ca8ef9b113fd590e7580c3539a0861418014e9d36dc29106b4ab800a12f13d69e741a4bf47e90e767b3cdd34425bbaafc1bac90837d7c7a666cfeea42fb981b6fe4ad25c5025e07a0c6262dd4fe69e5821a1c37fd2c264e747442085c6728ce21a2a7a941ca91fa260371d817ec2a6630dd5cdd91681549e4e08ab486a915bd5bce1b6143ec0e2f1b2c60fa51b4a9a6392adca69b50f3e9cf1113cd675af825380aa9e9f67f9327f821bfaf8cbc03ee602447c14b3b6c550648fb863dac346c8884404193214943abe7482ea5ef489315b7d9d1a52d3e09f1cbce84cb6290fb2c240f59a2802d7f07bfbe606bbd750749b84078377d96ac4f1ee67994153a922de6e7f15730c6ad99ca9c91458d51d16cc83f069c8f3f48f83a18c5783e67defa08bac3ff754f73a0c9a7949983b7a93fe556904589dd80629ad9c2efa67f4fa7f688eb0b13c060fc4c2db6af764535960c079ba648fa507eacac6ad6e1b2b927b3157ded48f0cb291c3fafd4867cb45b81867e7fc3ddd575172785de3e6bb9a07feb1e0ca618db80eb5d67dee97e1f3bb566f4c40a537640d0f7a305d4317a31efe1aa743a2cd65c3b3d6ac78ec84d44362f9faa2dcf251dadda4fc1579313b462fb17c5fb2e7cd1ba4490d442ab185575dfcf470d2a2558116212516e48356ce81f0026193a799a1e44529819a512f5463f916083627f35fb4b4de324aba7ea845a38564cb8b98f9c55e65068ba7be7bd3554aee3c588804d09f5d28eb7954158f0c58c5c795db856d7725161202c3d88c61618585f5310445667361171c8ae7b2ea3225e8dc74c8d2014d99f12d1863690d9e0e45ebd4f7f1bb8fee4e491ee859728cb8be9d1a87ad1d60b5cf5caba66405c4a06596c05e11ce0def86d0b3875cd8aed10ab458932ea6bbb99d957d54d106e8b79208f387fd5a06366f4edf3d8db3c072212043c770edca17fc9b3845e17eec69a78a14a9e4399d1f04ce9fffbdf616a3c17e5389f75e23bebcdc3f101308c7feb45136d6c6edb39e9f006d660e723ab552c4541b91bb3c6fb047160498eaa612a02f98aaddbbbbd904edd2d9f20261103ab5a90e5aad809e7131bdc22559563b2a1cf028b22938284d53300280ed875e837616fd87bbfd52b11dd5d1b3a95f2ca567b2976eb92d4f26c5c403ce2789645d76702ceb4c214bb18cb80fef36610c8facce63306b42a043140c86e27f81aa781e877dc00513650b6515a1d8c33a7fac4e21bc1304a14632befc3653a3fd19989fa25bd75a66496919cf08f161304caa10dd062f5da122ad9814e6e382b824bea1ccb56367516a8ac9aea0b747184f17280a0d8d1d5be5428e176a9dbf537b765a1bd8a4e28204eb4a87b866a5f3548018d0c5025542097a56e43ec1f4d3298b6c60ebac44db4b8092bbc4d55bb3e0ecb7d16396c11980875466151e402d48df05f34c808a33a75ed93034d3eca53e028c8f87b357c3f9d0ac77ed73a1b90823f8379571bf6d62dad2ab8dfe745d5900d9f82d1eacd1e2d608eb56c2b60bf3d33f0897dd983bc8a1561928fde530c08b50d625e1c97f6c052f35fdb2749b2d9828a693c19672ce48028fe0db2c6dbd030123571d1e2dffde607aa4ae3189011588d38e34391bb449f5978998b429830ec9a4e7c14bbc7e65f40182f3248618281ed9b0077cf79350c6fb7ef38291fd109399bd70f255a0b4a8b1081244ffd6ed32afb82bedd32b41ee357b706160b91137b82ca6b1d208d59ed2e4901577fd09d9acff6cbd0ee09ff8abb545aaac65317ef35d45b27b4b9a5fd0487795cdd4002f7e425160d8151cbf9a48930baad5d2f4afd8861eaa3876fdd8ed2bea9066bd561687e6d6167fd610bd8bf53b9f6d5a59cefe83255e0c634838b9003929b01e54f589e95b1c822aec0c844068c8ac226be9e652987140b673300c2b5ff56a76355f31d36168f09dc3f25a5708b0c549895058bcfabfbf21780410cd628af13419feaa131a70df1db3312e4e0d5d2e69c81f41486288427a0ef966b1211886f97ff68f34e3966d0a1d03f0b8543016c5f682091b491d3aa75c4cddfd742c091c971159c384586105c94a8acc4cc4ac240eefc2bdcc3405ea3e25881f6d7bf959b49290870dfa3c22a4a7c345c061210ee6dfdb5c0de0bc78b3de8e38fdce6a06fd3457c4971d051448ff88908fe5e4fc0b3d0b5fac451ba4332a3707e7872030eecd53bb08229682fdb63e931e3f117f8d1b18dc28df90d5ba4e7f80c8642bdaba457b425e71de9f1e0c0e15b3191667f0b88b4b02dba3d790022bc46eb1a8b116b86a718540cf19e6a704f9d09df8f706bc1288965b389d15b065fc1111d3bd811ec2182a5d9991cd0603842abc8bca2d471c56e4fc46e7080af4e45900306e725ffdda842a29999436f64be1e1a4d7cfa5d758b34f9c9d401bb5655382c83e6b8a449f8d17653c373c270a6b32300a3fef2e78f18436c1806ef8bc554dd934f89d24fbd9817dfb81c7bd3d49f089c3fd9b54db438b5f3024279ae7ccd98a40e797e65853a030827332d110c9fadffe9fbba5491938d1adc65111cc8f66d317abc368f932d88709d9af9a9968a09957e91b73058e11f83454e246540a1b48eb2b8c87d6ea087f89817093292c2e96a9ce178b2dbda90b3e706684a4e2871a46e5320aec2318f76371d896366e44849d61ef3e881cbdb6cdf1d4d3ee89375a4e0e8da2e99e1532485ba1a6a19c7f6b2d8b7fa2e87737c0e1ca87063daedadae0bfb7307873672733f38d4b5cad06239c5758b2954bc4e09ccaa06156414b57d936007839c0a4ec5f909a72be1519cc528fc4473e5e4d39dd41470a8a955c664909e90349e9d0a1eaf3afbc061984b7a2543ae686841bfb8bf4e878df56cfea09ba8cd03771b1967d3315dfef18e39e81c2f1b230768d478dce512f463dd217770ff97e2aa27b3e9bf8511d5e903c8ae2066e80352d38c2c52f61ce081462f94dea79a280ffca349cdc182807b62b292fca07e895b7a68132670fa990f8973594dd25dc224bc3be543ef8f71389c7832583f192b7323ebc2b8ea9e07dbd8f75726ab5ab47abb240b4833068f12d9bb6e76a276acbc92febed96da216f05c759257206c2005956d6dfedd89cb956c542ca994b023353163eb8361e51ba0e55b73a55c2ca38d51bddc744ce9931f339435d9548890f94f9420210f69783cfe9d64d7052dd719bf8de06e445cb3546202793912640e74630b8a9f5e79416074af2290252146ab1adb58fc2eb3359c0faa7baaf91e584860e4fd698e97a3371e122090b06904047dbca7fcaf65b9b786ddd56663d7270aed93cbf09f00d72ac6a71827f2a6a59b7ab34448dec9f17f89e25f6e93e55e60b5ffa58c37700f4e0406c11c6b1603b36e729f5643820728bd795d44f836ef65b1c7185a550c4867a5cde2fe8ecebc58fb94896da2843491d56e75e8dddba3958a3e79596ca85720d7586e273f2fd55d348b86c5d2a044d9d9c71273dfd3480aa65944645727c7e41710b27fda338254b4b7ab090cc55c0fe93f2192a934ae6f68ce8cf9c17bd23684d8851eb38322825c6429da3b69733033b1662cd123a54a85cd9a98dea827a102101e74ac19eb44f6d63ab364044411c2be74a81b4e7602f91497f30234175a518d4ddbb28cba628736ee0710ba88f4c3d33b2ce5345ef8e81b90cc6d480f0f8deb7e74069875b414fc32f6ec6f727f6630cc6bc66b1ee75b336282c06cbf5e7e3a8df83b975c698a2dd2e6da36718d87ec22e0278e1d6c97e75f746947e5d45a24ea4cecead117199b769d6c2ae55c3043fe59d692218fd517f77f8a83058ab17a4d1d8305dba038c40c4aebed13b9e36a450ea5c87b5fb557b207c07bafce4d2304e4c19207f4369b9d23f3c860645c5968f198f5a6a640876085a714a124f73065cced6daf69836416c000408ebbe1f34f2785503fb5810b3d878c5259dfb5c6189698f1394aa7f3bc7812aa4d93f52ec9a334df4f1ca8d259aca88fa5296d4653d0c4cecbd7b0d598e4ec95534aee9766a26453760a06b767ed6088f7878238ba404abc5e0e86d879d519209c7111f72480d8151cd8bf9f9b91602dcfe72e98c0e18d1d1629c2b42f91460608cef8e9e5771693dfcd5e8787518e8d7d9fafb88ce3593b929b294fd3feda230f7cb23f9b5e2403f5beaad58c15ae3355abf3587bf1008c3d9c431960d6497c029f7d10d8d0f2d176919fee5043baeb3b27c0a486b024b98be9d254ae0589c7946d379a77fd1bb0f7b9cb4ee5e2204c3006324f47e7c0454ea24ad9e50319dbb686936d2943a890f339980ccd736857616614402a8e576aad743117d11037c12c2396c839f869e0fbef93fc68139fda8e54a4b7ae93e6b72403d453db6661f49f9e689ee90d15732e24964dcf5a50cecbe82373a61a2586d5c27e20819356d3c92b38f8558b73f006e3dc1161588d40c19e81207bd0aab35a03aefa530fa5b43f92959330ec3003100f4e5aa731c56d505a4c46c597f3d10", 0x1000, 0xda}], 0x0, &(0x7f0000000140)={[{@creator={'creator', 0x3d, "2027fce1"}, 0x2c}, {@umask={'umask', 0x3d, [0x31, 0x31, 0x35]}, 0x2c}, {@dir_umask={'dir_umask', 0x3d}, 0x2c}]}) modify_ldt$write(0x1, &(0x7f0000000040)={0x91, 0xffffffff, 0xffffffff, 0x80, 0x10, 0x100, 0x9, 0x9, 0x800, 0x400}, 0x10) 2018/06/03 22:48:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000140)="9a2ce71d977fba383c034ada2d6d13b64faf6d387b1c400ba83c76ca596b80a8770f68356ced373f604e3830f587e77b19cedf1ec5248459dada34829c12c42df36260a7db41bcb174bac669e08a9c7d554631a3883f6abe10608a51101a7c329c017afb95363b6f451ef679f77c2579b2ce030d5f440c9cf80530e18c6d51c82a40982ca85ad6cb7757e216faa60e916b67bd3ba2a253", 0x97) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000200)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f00000000c0)=""/56, 0x38}], 0x2, &(0x7f0000000700)=""/71, 0x47}, 0x0) [ 200.784340] device bridge_slave_1 left promiscuous mode [ 200.789963] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.838858] device bridge_slave_0 left promiscuous mode [ 200.844464] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/03 22:48:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000000000000003, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x880) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000084}]}) 2018/06/03 22:48:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x27, 0x1aff, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/06/03 22:48:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2c0000, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000080)={0x8b8, {0x2, 0x4e23}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x84, 0x2e6, 0x2, 0x4, 0x5, &(0x7f0000000040)='bpq0\x00', 0x9d82, 0x101, 0xfffffffffffffbff}) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000010001900000007000000068100022b0506000100010100ff3ffe58", 0x1f}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000040), 0x5942a11d005b8d89) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000100)={{0xff, @multicast1=0xe0000001, 0x4e22, 0x4, 'sed\x00', 0x3a, 0x9, 0x8}, {@loopback=0x7f000001, 0x4e23, 0x10007, 0x800, 0x401, 0x8}}, 0x44) [ 200.932949] validate_nla: 2 callbacks suppressed [ 200.932958] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 200.959807] hfs: unable to load iocharset "none" [ 200.965137] hfs: unable to parse mount options [ 200.972150] team0 (unregistering): Port device team_slave_1 removed [ 201.014289] team0 (unregistering): Port device team_slave_0 removed [ 201.029348] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 201.047344] hfs: unable to parse mount options [ 201.060751] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 201.092633] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 201.130054] *** Guest State *** [ 201.133492] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 201.142412] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 201.151333] CR3 = 0x0000000000000000 [ 201.155131] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 201.161270] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 201.162782] bond0 (unregistering): Released all slaves [ 201.167543] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 201.179772] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 201.188124] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 201.196452] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 201.204854] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 201.207338] hfs: unable to load iocharset "none" [ 201.212934] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 201.212953] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 201.217759] hfs: unable to parse mount options [ 201.225757] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 201.225776] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 201.254539] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 201.262607] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 201.270814] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 201.277309] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 201.284879] Interruptibility = 00000000 ActivityState = 00000000 [ 201.291175] *** Host State *** [ 201.294432] RIP = 0xffffffff811f744c RSP = 0xffff8801b483f390 [ 201.300488] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 201.306956] FSBase=00007efff398e700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 201.315023] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 201.321115] CR0=0000000080050033 CR3=00000001af66a000 CR4=00000000001426f0 [ 201.328185] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 201.334899] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 201.340998] *** Control State *** [ 201.344526] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 201.351228] EntryControls=0000d1ff ExitControls=0023efff [ 201.356719] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 201.363680] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 201.370378] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 201.377085] reason=80000021 qualification=0000000000000000 [ 201.383464] IDTVectoring: info=00000000 errcode=00000000 [ 201.389065] TSC Offset = 0xffffff91dc00305d [ 201.393429] TPR Threshold = 0x00 [ 201.396831] EPT pointer = 0x00000001b23d401e [ 202.061535] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.068117] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.075915] device bridge_slave_0 entered promiscuous mode [ 202.112800] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.119263] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.127132] device bridge_slave_1 entered promiscuous mode [ 202.164891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.202851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.314876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.355929] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.524326] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.532185] team0: Port device team_slave_0 added [ 202.569299] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.576692] team0: Port device team_slave_1 added [ 202.614567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.648944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.688422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.695902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.707978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.728416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.735560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.743599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.977909] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.984320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.990990] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.997460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.004745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 203.487174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.870992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.954600] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.039179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 204.045385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.052522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.136191] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.634957] FAT-fs (loop6): bogus number of reserved sectors [ 204.641292] FAT-fs (loop6): Can't find a valid FAT filesystem [ 204.656804] FAULT_INJECTION: forcing a failure. [ 204.656804] name failslab, interval 1, probability 0, space 0, times 0 [ 204.668220] CPU: 1 PID: 15158 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 204.675499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.684843] Call Trace: [ 204.687446] dump_stack+0x1b9/0x294 [ 204.691078] ? dump_stack_print_info.cold.2+0x52/0x52 [ 204.696277] ? __save_stack_trace+0x7e/0xd0 [ 204.700593] should_fail.cold.4+0xa/0x1a [ 204.704643] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 204.709750] ? save_stack+0x43/0xd0 [ 204.713368] ? kasan_kmalloc+0xc4/0xe0 [ 204.717252] ? kmem_cache_alloc_trace+0x152/0x780 [ 204.722086] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 204.727262] ? __list_lru_init+0x456/0x790 [ 204.731485] ? sget_userns+0x73a/0xf00 [ 204.735361] ? graph_lock+0x170/0x170 [ 204.739149] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 204.743896] ? do_mount+0x564/0x3070 [ 204.747601] ? ksys_mount+0x12d/0x140 [ 204.751394] ? __x64_sys_mount+0xbe/0x150 [ 204.755539] ? do_syscall_64+0x1b1/0x800 [ 204.759593] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 204.764952] ? find_held_lock+0x36/0x1c0 [ 204.769096] ? __lock_is_held+0xb5/0x140 [ 204.773169] ? check_same_owner+0x320/0x320 [ 204.777485] ? rcu_note_context_switch+0x710/0x710 [ 204.782420] __should_failslab+0x124/0x180 [ 204.786647] should_failslab+0x9/0x14 [ 204.790439] kmem_cache_alloc_trace+0x2cb/0x780 [ 204.795099] ? __kmalloc_node+0x33/0x70 [ 204.799062] ? __kmalloc_node+0x33/0x70 [ 204.803033] ? rcu_read_lock_sched_held+0x108/0x120 [ 204.808052] __memcg_init_list_lru_node+0x17d/0x2c0 [ 204.813058] ? kvfree_rcu+0x20/0x20 [ 204.816676] ? __kmalloc_node+0x47/0x70 [ 204.820639] __list_lru_init+0x456/0x790 [ 204.824696] ? list_lru_destroy+0x4c0/0x4c0 [ 204.829020] ? mark_held_locks+0xc9/0x160 [ 204.833164] ? __raw_spin_lock_init+0x1c/0x100 [ 204.837741] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 204.842757] ? __lockdep_init_map+0x105/0x590 [ 204.847264] ? lockdep_init_map+0x9/0x10 [ 204.851360] sget_userns+0x73a/0xf00 [ 204.855091] ? get_anon_bdev+0x2f0/0x2f0 [ 204.859148] ? test_bdev_super+0x50/0x50 [ 204.863198] ? destroy_unused_super.part.11+0x110/0x110 [ 204.868555] ? alloc_vfsmnt+0x771/0x9d0 [ 204.872528] ? mnt_free_id.isra.27+0x60/0x60 [ 204.876938] ? kasan_check_read+0x11/0x20 [ 204.881078] ? graph_lock+0x170/0x170 [ 204.884869] ? cap_capable+0x1f9/0x260 [ 204.888749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 204.894284] ? security_capable+0x99/0xc0 [ 204.898425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 204.903955] ? ns_capable_common+0x13f/0x170 [ 204.908363] ? get_anon_bdev+0x2f0/0x2f0 [ 204.912437] sget+0x10b/0x150 [ 204.915544] ? test_bdev_super+0x50/0x50 [ 204.919594] ? fuse_ctl_add_conn+0x280/0x280 [ 204.923990] mount_single+0x3a/0x170 [ 204.927699] fuse_ctl_mount+0x2c/0x40 [ 204.931491] mount_fs+0xae/0x328 [ 204.934861] ? mpi_free.cold.1+0x19/0x19 [ 204.938916] vfs_kern_mount.part.34+0xd4/0x4d0 [ 204.943487] ? may_umount+0xb0/0xb0 [ 204.947103] ? _raw_read_unlock+0x22/0x30 [ 204.951237] ? __get_fs_type+0x97/0xc0 [ 204.955113] do_mount+0x564/0x3070 [ 204.958660] ? lock_downgrade+0x8e0/0x8e0 [ 204.962808] ? copy_mount_string+0x40/0x40 [ 204.967041] ? check_same_owner+0x320/0x320 [ 204.971357] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 204.976372] ? __check_object_size+0x95/0x5d9 [ 204.980867] ? __might_sleep+0x95/0x190 [ 204.984843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 204.990382] ? _copy_from_user+0xdf/0x150 [ 204.994527] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 205.000187] ? copy_mount_options+0x285/0x380 [ 205.004687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 205.010219] ksys_mount+0x12d/0x140 [ 205.013846] __x64_sys_mount+0xbe/0x150 [ 205.017811] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 205.022820] do_syscall_64+0x1b1/0x800 [ 205.026702] ? finish_task_switch+0x1ca/0x840 [ 205.031189] ? syscall_return_slowpath+0x5c0/0x5c0 [ 205.036110] ? syscall_return_slowpath+0x30f/0x5c0 [ 205.041049] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 205.046406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.051267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.056448] RIP: 0033:0x455a09 [ 205.059623] RSP: 002b:00007f6e9efc2c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.067317] RAX: ffffffffffffffda RBX: 00007f6e9efc36d4 RCX: 0000000000455a09 [ 205.074576] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 2018/06/03 22:48:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, @multicast2}, &(0x7f0000000180)=0x82, 0x800) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000080)={@multicast1=0xe0000001, @empty, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r4, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) getpid() fcntl$setown(r0, 0x8, r2) process_vm_writev(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/20, 0x14}], 0x1, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/10, 0x7ffff000}], 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x7) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)) tkill(r2, 0x16) exit(0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/06/03 22:48:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x2061}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x400) accept(r0, &(0x7f0000000280)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="800000002400030028bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="f1ffe0ff080004001400400008000e006e82000008000100636271001c000200180001003101140100000060fbffffff040000000400000008000100636273001c0002001800010005f95362f2b626f31565a17621cab2c9206616a1090000008000000001800000000000000c00080008000200e20000025ae2c7d58a914ba046efcb601eb42330e60bc324e92bd87c43c7e5f36e59d1a3c52936d60a6fddc4033b39ca6f791f2df54653d7509ff45fd39f4bc94d77ae87e17d64d655c52e0d1f53e1c3c89e9e39b1c909d3cfa9"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) 2018/06/03 22:48:54 executing program 6 (fault-call:2 fault-nth:15): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0xb8}, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x128, 0x0, 0x128, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback={0x0, 0x1}, @empty, [0x0, 0xffffff00, 0xff, 0xff0000ff], [0xff, 0xff, 0xffffff00], 'vlan0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x5}, 0x0, 0xc8, 0x128}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 0x4e21, 0x4e22, 0x4e21, 0x4e20, 0x1f2, 0x5, 0x6, 0x36, 0x4}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0xff000000, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffff00, 0xff], 'eql\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x9, 0x2, 0x2a}, 0x0, 0xc8, 0xf0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x5, 0x1, 0x1, [0x7ff, 0xd8, 0x3, 0x100000000, 0x0, 0xffffffff, 0x10000, 0xc21, 0xffffffffffffff96, 0x8, 0x1f, 0xffffffffffff21fe, 0x7fffffff, 0x0, 0x9, 0x40], 0x9}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0x9aa, 0x6, 0x1, [0x8, 0x7ff, 0x3, 0x4, 0xffffffffffffffff, 0x4, 0x1ff, 0xfffffffffffffff9, 0xe60, 0x1, 0x3ff, 0x62cc, 0x1, 0x2, 0x4, 0x6], 0xd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback=0x7f000001, 'nr0\x00', 0xffffffff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e8) 2018/06/03 22:48:54 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8915, &(0x7f0000000240)="0047fc2f07d82c99240970") membarrier(0x20, 0x0) r1 = semget$private(0x0, 0x1, 0x600) semctl$IPC_RMID(r1, 0x0, 0x0) 2018/06/03 22:48:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") setrlimit(0x40000000000008, &(0x7f0000000000)={0x4847, 0xfffffffffffff001}) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) r1 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000a31000)={0x19980330, r1}, &(0x7f0000000040)={0x0, 0x7, 0x8000, 0x4000, 0x9638}) mlock2(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) 2018/06/03 22:48:54 executing program 1: r0 = socket(0x10, 0x2, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/87) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x3, r2}) 2018/06/03 22:48:54 executing program 4: syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001440)={[{@iocharset={'iocharset', 0x3d, 'none'}, 0x2c}]}) syz_mount_image$hfs(&(0x7f0000000580)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x4e, 0x1, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0x1000, 0xda}], 0x0, &(0x7f0000000140)={[{@creator={'creator', 0x3d, "2027fce1"}, 0x2c}, {@umask={'umask', 0x3d, [0x31, 0x31, 0x35]}, 0x2c}, {@dir_umask={'dir_umask', 0x3d}, 0x2c}]}) modify_ldt$write(0x1, &(0x7f0000000040)={0x91, 0xffffffff, 0xffffffff, 0x80, 0x10, 0x100, 0x9, 0x9, 0x800, 0x400}, 0x10) [ 205.081836] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.089096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 205.096408] R13: 00000000000004d1 R14: 00000000006fc438 R15: 000000000000000e [ 205.161616] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 205.201733] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 2018/06/03 22:48:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14}, @in=@dev={0xac, 0x14}}}}, [@policy_type={0xc, 0x10, {0x8}}]}, 0xcc}, 0x1}, 0x0) socket(0xd, 0x6, 0xbd96) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x145082, 0x0) accept4$unix(r1, &(0x7f0000000240), &(0x7f0000000100)=0x6e, 0x804) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000002c0)={"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"}) 2018/06/03 22:48:54 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setresuid(0x0, r1, 0x0) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_open_dev$random(&(0x7f0000000140)='/dev/random\x00', 0x0, 0x50d200) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) ftruncate(r8, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @remote}, &(0x7f0000000100)=0x2) r9 = dup2(r4, r5) write$eventfd(r9, &(0x7f0000000000)=0x40, 0x8) setsockopt(r4, 0x7fff, 0x6, &(0x7f0000000040)="65c99bf4bc60a2f59d4b8147b7faaf6c7f80e0b70cf8d2bc5cc066341052bbf16341cf9de2f88e4ae7231a9df4e1a5d97093b5e8ecce7574e1fa85de7ef791abb353125b2869a590932c8af9a86ab77f364763ed1af6593829f84be65459c755c91ab5120ad352f301b4782796c39cd8f7cf524b2213c4", 0x77) tkill(r3, 0x15) ioctl(r9, 0x4, &(0x7f0000000280)="5b701fda03cb10eae720f6d70bb8d5f1ba18c6bb7e189358cde071707f961d1cc78a5aacafa32cfa7a99276f2840ef26fab6e95a2f85552f82c19294d0694cfb2664090d48a794ee429163cd05950ea5b930c8450cfc2d685922dee0f7feb21d7042ce16cf43d442771b8c040adba00abc3c264453ad68ea4c0f1848b9964890e2efab1283bda482e38f299c5fe7855ea118ca9d0eadba5215fdcd0be883561356bd29030a203b8861a7d178cc26355c978d68d6e235841ecff30a42f02357a58832c2602501bb112e02c724a783d10eb5de73f2d8da963836e54115a48971e49750c5b3d0844e14ea48") 2018/06/03 22:48:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept(r0, &(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, &(0x7f0000000140)=0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x80000001, 0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x7, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x360) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x800000001, 0x3}, &(0x7f0000000080)=0x10) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x3e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x180) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) [ 205.214311] hfs: unable to load iocharset "none" [ 205.219205] hfs: unable to parse mount options 2018/06/03 22:48:54 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "849a9f8d1d3b1ec99c4f3dfa58541dcfc3040d8e2f0eea30900925cf01bea609b10f7b1555266520a1817e0e22d7af8f55574f9575fab8109be87aa9ea3124d6c38603010d3883552c017e98148bf564c8b878f88a19a9979f3b0004743421c9711724836ac0f6ec93d92520348c2d770bcd538a237758e8524f412264c5f0057bc0ec3ff89fe2371e778f2d16d0014fce445c6d67d777b0b5335f34113212ecdad963159584a1912edca2af9b8d53eed44bf30000db34954b0482e170d83e12b67b9eafece9bedfdcdc97976ce3ad7029f9d3c1240bd3018b3dbbf681754c816f4b593647755ccd83f0abec3f361e593ab899390be78376d5d6"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000180)={0x303, 0x33}, 0x4) signalfd(r2, &(0x7f0000002640)={0x5}, 0x8) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:48:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r2, 0x5}, 0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x40, 0x4000) setns(r0, 0xfffffffffbffffff) fdatasync(r3) [ 205.274233] hfs: unable to parse mount options 2018/06/03 22:48:54 executing program 2: r0 = socket$inet6(0xa, 0x7, 0x80000000004e0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x8002) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x3, 0x2d}, 0xc) timer_create(0xfffffffffffffffe, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, @thr={&(0x7f0000001300), &(0x7f00000013c0)}}, &(0x7f00000023c0)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000780)) 2018/06/03 22:48:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x9, 0x315) r1 = socket(0x7, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000340)=@hci, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000001540)=""/84, 0x54}, 0x0) 2018/06/03 22:48:54 executing program 6 (fault-call:2 fault-nth:16): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) [ 205.556084] device bridge_slave_1 left promiscuous mode [ 205.561752] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.584197] device bridge_slave_0 left promiscuous mode [ 205.589900] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.650784] team0 (unregistering): Port device team_slave_1 removed [ 205.666251] IPVS: ftp: loaded support on port[0] = 21 [ 205.672930] team0 (unregistering): Port device team_slave_0 removed [ 205.683807] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 205.701934] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 205.736140] bond0 (unregistering): Released all slaves [ 206.490914] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.497453] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.505283] device bridge_slave_0 entered promiscuous mode [ 206.589124] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.595607] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.613190] device bridge_slave_1 entered promiscuous mode [ 206.653918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.713222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.836266] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.877578] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.049487] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.056700] team0: Port device team_slave_0 added [ 207.091459] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.098955] team0: Port device team_slave_1 added [ 207.135898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.169711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.198788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.238253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.486471] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.492882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.499543] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.505922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.513269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.287161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.386469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.472814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.558234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 208.564464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.571599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.651434] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.146016] FAT-fs (loop6): bogus number of reserved sectors [ 209.151939] FAT-fs (loop6): Can't find a valid FAT filesystem [ 209.168843] FAULT_INJECTION: forcing a failure. [ 209.168843] name failslab, interval 1, probability 0, space 0, times 0 [ 209.180262] CPU: 0 PID: 15496 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 209.187749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.197092] Call Trace: [ 209.199675] dump_stack+0x1b9/0x294 [ 209.203293] ? dump_stack_print_info.cold.2+0x52/0x52 [ 209.208473] ? __save_stack_trace+0x7e/0xd0 [ 209.212797] should_fail.cold.4+0xa/0x1a [ 209.216861] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.221957] ? save_stack+0x43/0xd0 [ 209.225571] ? kasan_kmalloc+0xc4/0xe0 [ 209.229445] ? kmem_cache_alloc_trace+0x152/0x780 [ 209.234278] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 209.239455] ? __list_lru_init+0x456/0x790 [ 209.243690] ? sget_userns+0x73a/0xf00 [ 209.247571] ? graph_lock+0x170/0x170 [ 209.251369] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 209.256136] ? do_mount+0x564/0x3070 [ 209.259837] ? ksys_mount+0x12d/0x140 [ 209.263627] ? __x64_sys_mount+0xbe/0x150 [ 209.267777] ? do_syscall_64+0x1b1/0x800 [ 209.271828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.277186] ? find_held_lock+0x36/0x1c0 [ 209.281238] ? __lock_is_held+0xb5/0x140 [ 209.285296] ? check_same_owner+0x320/0x320 [ 209.289624] ? rcu_note_context_switch+0x710/0x710 [ 209.294548] __should_failslab+0x124/0x180 [ 209.298777] should_failslab+0x9/0x14 [ 209.302577] kmem_cache_alloc_trace+0x2cb/0x780 [ 209.307230] ? __kmalloc_node+0x33/0x70 [ 209.311198] ? __kmalloc_node+0x33/0x70 [ 209.315157] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.320168] __memcg_init_list_lru_node+0x17d/0x2c0 [ 209.325176] ? kvfree_rcu+0x20/0x20 [ 209.328804] ? __kmalloc_node+0x47/0x70 [ 209.332768] __list_lru_init+0x456/0x790 [ 209.336817] ? list_lru_destroy+0x4c0/0x4c0 [ 209.341126] ? mark_held_locks+0xc9/0x160 [ 209.345264] ? __raw_spin_lock_init+0x1c/0x100 [ 209.349834] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 209.354851] ? __lockdep_init_map+0x105/0x590 [ 209.359334] ? lockdep_init_map+0x9/0x10 [ 209.363625] sget_userns+0x73a/0xf00 [ 209.367325] ? get_anon_bdev+0x2f0/0x2f0 [ 209.371375] ? test_bdev_super+0x50/0x50 [ 209.375421] ? destroy_unused_super.part.11+0x110/0x110 [ 209.380796] ? alloc_vfsmnt+0x771/0x9d0 [ 209.384772] ? mnt_free_id.isra.27+0x60/0x60 [ 209.389167] ? kasan_check_read+0x11/0x20 [ 209.393304] ? graph_lock+0x170/0x170 [ 209.397118] ? cap_capable+0x1f9/0x260 [ 209.401001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.406544] ? security_capable+0x99/0xc0 [ 209.410684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.416292] ? ns_capable_common+0x13f/0x170 [ 209.420710] ? get_anon_bdev+0x2f0/0x2f0 [ 209.424778] sget+0x10b/0x150 [ 209.427871] ? test_bdev_super+0x50/0x50 [ 209.431920] ? fuse_ctl_add_conn+0x280/0x280 [ 209.436333] mount_single+0x3a/0x170 [ 209.440045] fuse_ctl_mount+0x2c/0x40 [ 209.443853] mount_fs+0xae/0x328 [ 209.447228] ? mpi_free.cold.1+0x19/0x19 [ 209.451288] vfs_kern_mount.part.34+0xd4/0x4d0 [ 209.455988] ? may_umount+0xb0/0xb0 [ 209.459606] ? _raw_read_unlock+0x22/0x30 [ 209.463742] ? __get_fs_type+0x97/0xc0 [ 209.467616] do_mount+0x564/0x3070 [ 209.471146] ? lock_downgrade+0x8e0/0x8e0 [ 209.475279] ? copy_mount_string+0x40/0x40 [ 209.479501] ? check_same_owner+0x320/0x320 [ 209.483815] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 209.488843] ? __check_object_size+0x95/0x5d9 [ 209.493330] ? __might_sleep+0x95/0x190 [ 209.497294] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 209.502821] ? _copy_from_user+0xdf/0x150 [ 209.506967] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 209.512497] ? copy_mount_options+0x285/0x380 [ 209.516987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 209.522595] ksys_mount+0x12d/0x140 [ 209.526228] __x64_sys_mount+0xbe/0x150 [ 209.530197] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 209.535208] do_syscall_64+0x1b1/0x800 [ 209.539080] ? syscall_return_slowpath+0x5c0/0x5c0 [ 209.543996] ? syscall_return_slowpath+0x30f/0x5c0 [ 209.548920] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 209.554283] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.559116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.564290] RIP: 0033:0x455a09 [ 209.567461] RSP: 002b:00007fc4b9276c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.575161] RAX: ffffffffffffffda RBX: 00007fc4b92776d4 RCX: 0000000000455a09 [ 209.582416] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 209.589674] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/06/03 22:48:58 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x287, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)={'syz1', "495cd87798db7881ad943e9dea80bef8d67b0dddf3e53a76809bcb0780de0ab5b603f418956b313fb9b6a82245cdf746c0c3e2560b10c0bf456d8c5e489bdba15d7a4458fda4b82d2b02a7313e36ca598f7c9a1ccc1dfda00efd04"}, 0x5f) recvmmsg(r1, &(0x7f0000002800)=[{{&(0x7f00000026c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, &(0x7f0000002900)={0x77359400}) 2018/06/03 22:48:58 executing program 6 (fault-call:2 fault-nth:17): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:58 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") unshare(0x400) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x40) getsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/06/03 22:48:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262e8523bf012cf66f") fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x2}) 2018/06/03 22:48:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x700000000000, 0x100) ioctl(r0, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x1f, 0xffff, 0x9, 0x7}) fchmod(r2, 0x0) 2018/06/03 22:48:58 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000180)={0x303, 0x33}, 0x4) signalfd(r2, &(0x7f0000002640)={0x5}, 0x8) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:48:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/06/03 22:48:58 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0x1008) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r2, 0x3, 0x30}, &(0x7f0000000080)=0xc) sync() socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3, 0x1000, 0x3, 0x6}}) r3 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000001200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001240)='selinux\x00', 0x0) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000001280)='blacklist\x00', &(0x7f00000012c0)="7070703075736572766d6e6574302f76626f786e657430757365722aee747275737465642473656c696e7578656d31bc70726f6300") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00'}) [ 209.596929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 209.604181] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000010 2018/06/03 22:48:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$ax25(0x3, 0x3, 0xcd, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000180)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x9, 0x2) 2018/06/03 22:48:58 executing program 5: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0042fc2f07d82c99240970") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'wrr\x00', 0x16}, 0x2c) [ 209.849530] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 [ 209.905247] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 [ 209.996344] device bridge_slave_1 left promiscuous mode [ 210.002153] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.016757] device bridge_slave_0 left promiscuous mode [ 210.022333] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.059968] team0 (unregistering): Port device team_slave_1 removed [ 210.071989] team0 (unregistering): Port device team_slave_0 removed [ 210.082404] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 210.097615] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 210.126460] bond0 (unregistering): Released all slaves 2018/06/03 22:48:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f33"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)="db3fbc423a5f78a56d4fed9186268582c832a27947243fd2275df8e6ffd0d3d430e64852cf", 0x25, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r3, 0xdd1e) 2018/06/03 22:48:59 executing program 0: r0 = socket(0x11, 0x100000803, 0x1) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x100020000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xfca) r2 = fcntl$getown(r0, 0x9) r3 = fcntl$getown(r0, 0x9) kcmp(r2, r3, 0x1, r1, r0) 2018/06/03 22:48:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3f) 2018/06/03 22:48:59 executing program 4: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000100)) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000440)={{}, 'port0\x00'}) 2018/06/03 22:48:59 executing program 6 (fault-call:2 fault-nth:18): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:48:59 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000180)={0x303, 0x33}, 0x4) signalfd(r2, &(0x7f0000002640)={0x5}, 0x8) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:48:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0xaaaaaaaaaaaac01, 0x0, [{0xc0000001, 0x1, 0x0, 0x3ff}]}) getcwd(&(0x7f0000000140)=""/213, 0xd5) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_cmd={0x48}}) 2018/06/03 22:48:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1e9ebc71e583c4c8c5ef"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x2ed) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/03 22:48:59 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c850fbf012cf66fd6fd1473ac8d2eb4b0d70cd2ffe3b3385a419b82c542336c2c48cda567a9e921b15bbab6210fa7c770c9e9a6ccf69278630fbb3a455c6f35d2ecb705d26e9f3d3b3b60194fd1c32610f27bc6095c1e4876f307210d201cab2e99e57d5bae7c64f4d03f2842991356e3a308e7963ffbd7153caac4df69d9096cdcc35e779e6cc94486917a09b109d15a5216039ac8160090085b7149f03f73de9cafe3a3f98545fb2fa2364e363f2643bbd1dc7741e0872475b8810b12a338a6027f7b5424aaf48a000000000000000000000000000000") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000240)='./file0\x00') chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000140)='/\x00', &(0x7f0000000000)='./file0\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x7f}, 0x8) chmod(&(0x7f0000000180)='./file0/file0/file0\x00', 0x0) 2018/06/03 22:48:59 executing program 4: r0 = epoll_create1(0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x8}) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0x2) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x81}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x5, 0x7bdf955a}) 2018/06/03 22:48:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80401, 0x0) ioctl$KVM_GET_MSRS(r0, 0x40045569, &(0x7f0000000380)) 2018/06/03 22:48:59 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000140, 0x20000140, 0x20000140], 0x0, &(0x7f00000008c0), &(0x7f0000000140)}, 0x78) 2018/06/03 22:48:59 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x5}, 0x98) pselect6(0x40, &(0x7f0000000000)={0x100, 0x7fc, 0x3, 0x100, 0x1, 0x4, 0x0, 0x7}, &(0x7f0000000040)={0x7, 0x4, 0x7fffffff, 0x6, 0x3ff, 0x6, 0x7f, 0x8000}, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x6, 0x8, 0x7fff, 0xfffffffffffffffa, 0xbfc}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={0x6}, 0x8}) [ 210.963313] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 211.082697] IPVS: ftp: loaded support on port[0] = 21 [ 211.692496] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.698910] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.706148] device bridge_slave_0 entered promiscuous mode [ 211.732301] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.738720] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.746680] device bridge_slave_1 entered promiscuous mode [ 211.772012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.798209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 211.871493] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.899736] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.013252] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.020553] team0: Port device team_slave_0 added [ 212.046006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.053347] team0: Port device team_slave_1 added [ 212.077993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.110324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.137428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.144612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.153199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.173812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.180936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.189380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.423577] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.429991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.436663] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.443068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.450421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 212.831180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.331457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.419128] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.503467] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 213.509675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.516974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.596066] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.124861] FAT-fs (loop6): bogus number of reserved sectors [ 214.130789] FAT-fs (loop6): Can't find a valid FAT filesystem [ 214.145612] FAULT_INJECTION: forcing a failure. [ 214.145612] name failslab, interval 1, probability 0, space 0, times 0 [ 214.157114] CPU: 0 PID: 15853 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 214.164406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.173782] Call Trace: [ 214.176394] dump_stack+0x1b9/0x294 [ 214.180049] ? dump_stack_print_info.cold.2+0x52/0x52 [ 214.185251] ? __save_stack_trace+0x7e/0xd0 [ 214.189577] should_fail.cold.4+0xa/0x1a [ 214.193650] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 214.198750] ? save_stack+0x43/0xd0 [ 214.202368] ? kasan_kmalloc+0xc4/0xe0 [ 214.206246] ? kmem_cache_alloc_trace+0x152/0x780 [ 214.211174] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 214.216357] ? __list_lru_init+0x456/0x790 [ 214.220704] ? sget_userns+0x73a/0xf00 [ 214.224585] ? graph_lock+0x170/0x170 [ 214.228399] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 214.233164] ? do_mount+0x564/0x3070 [ 214.236876] ? ksys_mount+0x12d/0x140 [ 214.240687] ? __x64_sys_mount+0xbe/0x150 [ 214.244849] ? do_syscall_64+0x1b1/0x800 [ 214.248932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.254322] ? find_held_lock+0x36/0x1c0 [ 214.258390] ? __lock_is_held+0xb5/0x140 [ 214.262491] ? check_same_owner+0x320/0x320 [ 214.266813] ? rcu_note_context_switch+0x710/0x710 [ 214.271766] __should_failslab+0x124/0x180 [ 214.276035] should_failslab+0x9/0x14 [ 214.279849] kmem_cache_alloc_trace+0x2cb/0x780 [ 214.284522] ? __kmalloc_node+0x33/0x70 [ 214.288503] ? __kmalloc_node+0x33/0x70 [ 214.292477] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.297518] __memcg_init_list_lru_node+0x17d/0x2c0 [ 214.302530] ? kvfree_rcu+0x20/0x20 [ 214.306452] ? __kmalloc_node+0x47/0x70 [ 214.310447] __list_lru_init+0x456/0x790 [ 214.314505] ? list_lru_destroy+0x4c0/0x4c0 [ 214.318994] ? mark_held_locks+0xc9/0x160 [ 214.323140] ? __raw_spin_lock_init+0x1c/0x100 [ 214.327715] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 214.332725] ? __lockdep_init_map+0x105/0x590 [ 214.337236] ? lockdep_init_map+0x9/0x10 [ 214.341304] sget_userns+0x73a/0xf00 [ 214.345015] ? get_anon_bdev+0x2f0/0x2f0 [ 214.349087] ? test_bdev_super+0x50/0x50 [ 214.353142] ? destroy_unused_super.part.11+0x110/0x110 [ 214.358505] ? alloc_vfsmnt+0x771/0x9d0 [ 214.362496] ? mnt_free_id.isra.27+0x60/0x60 [ 214.366923] ? kasan_check_read+0x11/0x20 [ 214.371073] ? graph_lock+0x170/0x170 [ 214.374868] ? cap_capable+0x1f9/0x260 [ 214.378860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.384398] ? security_capable+0x99/0xc0 [ 214.388551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.394103] ? ns_capable_common+0x13f/0x170 [ 214.398504] ? get_anon_bdev+0x2f0/0x2f0 [ 214.402570] sget+0x10b/0x150 [ 214.405843] ? test_bdev_super+0x50/0x50 [ 214.409904] ? fuse_ctl_add_conn+0x280/0x280 [ 214.414312] mount_single+0x3a/0x170 [ 214.418027] fuse_ctl_mount+0x2c/0x40 [ 214.421835] mount_fs+0xae/0x328 [ 214.425302] ? mpi_free.cold.1+0x19/0x19 [ 214.429381] vfs_kern_mount.part.34+0xd4/0x4d0 [ 214.433963] ? may_umount+0xb0/0xb0 [ 214.437628] ? _raw_read_unlock+0x22/0x30 [ 214.441767] ? __get_fs_type+0x97/0xc0 [ 214.445647] do_mount+0x564/0x3070 [ 214.449179] ? lock_downgrade+0x8e0/0x8e0 [ 214.453318] ? copy_mount_string+0x40/0x40 [ 214.457545] ? check_same_owner+0x320/0x320 [ 214.461861] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 214.466870] ? __check_object_size+0x95/0x5d9 [ 214.471365] ? __might_sleep+0x95/0x190 [ 214.475351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.481167] ? _copy_from_user+0xdf/0x150 [ 214.485311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.490846] ? copy_mount_options+0x285/0x380 [ 214.495336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.500999] ksys_mount+0x12d/0x140 [ 214.504635] __x64_sys_mount+0xbe/0x150 [ 214.508602] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 214.513638] do_syscall_64+0x1b1/0x800 [ 214.517521] ? finish_task_switch+0x1ca/0x840 [ 214.522019] ? syscall_return_slowpath+0x5c0/0x5c0 [ 214.526961] ? syscall_return_slowpath+0x30f/0x5c0 [ 214.531916] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 214.537277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.542132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.547830] RIP: 0033:0x455a09 [ 214.551010] RSP: 002b:00007f359fae3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.558743] RAX: ffffffffffffffda RBX: 00007f359fae46d4 RCX: 0000000000455a09 [ 214.566009] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 2018/06/03 22:49:03 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x10000, 0x2, 0x100, 0x2}, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0), 0x4) 2018/06/03 22:49:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9e70200000f3266b80500000066b94c8d71280f01c164f5b848000f00d0baa00066b87b00000066efb8bc000f00d80f01d1b8e8000f00d83ed952d73e0f08", 0x40}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000580)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x55) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x4fa0d04a3a9262cf, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r4, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x7b}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187}, 0x17) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/03 22:49:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x420400, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000043b000/0x2000)=nil, 0x2000, 0x0, 0x28013, r1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000011c0)={0x3, 0x1, &(0x7f00000000c0)=""/26, &(0x7f00000001c0)=""/4096, &(0x7f0000000100)=""/30}) 2018/06/03 22:49:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x40}, @in6={0xa, 0x4e22, 0x2d8000000000, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, @in6={0xa, 0x4e22, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffc0}, @in6={0xa, 0x4e24, 0x100000000, @empty, 0x3}], 0x70) ioctl(r0, 0x8912, &(0x7f0000000280)="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") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 2018/06/03 22:49:03 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x80000400000002, 0x0) r2 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0xffffffffffffffe0, 0x6, 0x8, 0x4, "1a04cce6e489294a7f91998352f2f5d0f5bee05a0123711ea1016a9f3e46615760000e388da50a6b4a7ce300"}, 0x0, 0x0, 0xdf27, r2, 0x3, 0x67, "6c933ad3882ddeef683a30652a22ce61e947fd7913543782e52c836ab3d370e25b5030cc47b3885b0d00861b02d186993eb5c6af9a41eeb53c93074724c7dbf6", &(0x7f0000000040)='\':ppp0}securitybdev\x00', 0x14, [], [0xba32, 0x81, 0x0, 0x9b]}) ioctl(r1, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x50, r0, 0x0) socket$inet(0x10, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000000)=""/18) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)=""/250) 2018/06/03 22:49:03 executing program 6 (fault-call:2 fault-nth:19): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:03 executing program 2: add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0), 0x0, 0xfffffffffffffffb) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000003c0)={{0x6, 0x0, 0x401, 0x6, "6e02009032735714ad97cafa1d571466455db90a7243e3a29948ee273040e6cf4aa0cebf2a7f21c31e94894c"}, 0x1ff, [0x8, 0x6, 0xffffffffffff8000, 0x0, 0x3, 0x6, 0x1ff8000, 0x8, 0x800, 0x0, 0x62ae, 0x9, 0x9, 0x4, 0x4, 0x1f, 0x0, 0x3, 0x4, 0x0, 0x3f, 0x1, 0xfc00000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x5, 0xc8, 0x800, 0x2, 0x400, 0xffff, 0xc000000000000000, 0x400, 0x3ff, 0xfa7, 0x3f, 0x4, 0xd8d, 0x100000000, 0xf, 0x4, 0x0, 0xea6, 0x5, 0x4dc7, 0x2, 0x7, 0x5, 0x3, 0x8, 0x100, 0x0, 0x6, 0x21, 0x9, 0x3, 0x100, 0x6, 0x2, 0xfffffffffffffeff, 0x3, 0x7fff, 0x8, 0x676c, 0x7, 0x8, 0x0, 0xfffffffffffffffc, 0x7, 0x8, 0x0, 0xf25, 0x200, 0x2, 0x1, 0xd57, 0x100000001, 0x9, 0x7, 0x6, 0x1000, 0x3, 0x2, 0x5, 0xc5, 0x101, 0xc000000000000000, 0x4, 0x32, 0x40, 0x3, 0x7, 0x7f, 0x200, 0x9, 0x2, 0x10000, 0x5d, 0x100000000, 0x5, 0x800, 0x200, 0x8, 0x200000, 0x0, 0x81, 0xcf6, 0x2, 0x80000001, 0xfffffffffffff867, 0x16da7971, 0x2, 0x5, 0x6, 0xffffffffffffff9e, 0x0, 0x2, 0xdd0, 0x8000, 0x5, 0x5, 0x4, 0x401, 0x100000001, 0xfa, 0x1, 0x5]}) 2018/06/03 22:49:03 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000180)={0x303, 0x33}, 0x4) signalfd(r2, &(0x7f0000002640)={0x5}, 0x8) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 214.573402] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 214.580667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 214.587935] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000012 2018/06/03 22:49:03 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x4, 0x20, 0x3, 0x1, 0xffffffffffffffff, 0x0, [0xf203]}, 0x2c) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x2) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000002c0)=0x3, 0x4) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @rand_addr}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', r2}) setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000001800)=0x1000003, 0xfffffffffffffe29) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@nl=@unspec, {&(0x7f00000000c0)=""/202, 0xca}, &(0x7f00000001c0), 0x10}, 0xa0) 2018/06/03 22:49:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000280)=0x10000, 0x4) sendto$inet6(r2, &(0x7f0000000140), 0xe803, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/03 22:49:03 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x17e}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000004c0)={0x9, r2}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000280)={0x1e, &(0x7f0000000000)="2bb97e85bf014d12ef57c591643c95de8133a163f1757e06b53ba5e33345"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000003c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x3fd, &(0x7f0000000300)=""/187}, 0x48) 2018/06/03 22:49:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000600)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000800000000000000000500000029652c3563b7bbac000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/06/03 22:49:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)="62ff0f7600", 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="045b898f73", 0x1004, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xc) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2, &(0x7f0000000100)="0047fc2f07d82c99240970") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2018/06/03 22:49:03 executing program 4: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000c91000/0x1000)=nil, 0x1000, 0x1, r0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000040)={0x0, 0x1, 0xd2e, 0x775, &(0x7f0000000000)=[{}]}) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) [ 214.913358] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/03 22:49:03 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0xfc05) 2018/06/03 22:49:03 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000380)={"73647a5f64756e02000000000200", @ifru_names='rose0\x00'}) 2018/06/03 22:49:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x44000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000480)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000002c0)=r3) sysfs$2(0x2, 0xbc, &(0x7f0000000600)=""/19) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, {0x7ff, 0x1, 0x6, 0xc757, 0x0, 0x8}}, 0x8) fchdir(r0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000100)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000005c0)={0x0, &(0x7f0000000580), 0x0, r0, 0x9}) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/186) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x5}, &(0x7f0000000340)=0x32e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e23, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x8}}, 0x30000000000000, 0x6}, &(0x7f0000000440)=0x90) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0xfffffdfffffffffd) 2018/06/03 22:49:03 executing program 6 (fault-call:2 fault-nth:20): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xe, 0x0, 0x4, 0xfffffffffffff6c5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002000210000000000000000000200000000000000000000001100000008000b00000000005e00020000000000080017004e210000e5555a283b4365e8968318595aeb2f8fc7d1"], 0x38}, 0x1}, 0x0) [ 215.113820] device bridge_slave_1 left promiscuous mode [ 215.119954] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/03 22:49:04 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000080)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) r1 = socket$netlink(0x10, 0x3, 0x3d) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b05090001", 0x123}], 0x1) [ 215.163998] device bridge_slave_0 left promiscuous mode [ 215.169728] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.377758] IPVS: ftp: loaded support on port[0] = 21 [ 215.384893] team0 (unregistering): Port device team_slave_1 removed [ 215.396693] team0 (unregistering): Port device team_slave_0 removed [ 215.407862] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 215.426501] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 215.467209] bond0 (unregistering): Released all slaves [ 216.173060] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.179519] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.186967] device bridge_slave_0 entered promiscuous mode [ 216.227870] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.234431] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.241937] device bridge_slave_1 entered promiscuous mode [ 216.282308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.324223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.448564] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.492501] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.688871] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.696310] team0: Port device team_slave_0 added [ 216.726397] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.733612] team0: Port device team_slave_1 added [ 216.774527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.821611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.828809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.837349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.869310] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.876682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.888581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.926398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.933634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.942464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.205064] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.211486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.218187] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.224567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.231920] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.823219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.205613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.298952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.395316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.402111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.409844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.498107] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.052445] FAT-fs (loop6): bogus number of reserved sectors [ 219.058462] FAT-fs (loop6): Can't find a valid FAT filesystem [ 219.074781] FAULT_INJECTION: forcing a failure. [ 219.074781] name failslab, interval 1, probability 0, space 0, times 0 [ 219.086426] CPU: 0 PID: 16186 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 219.096578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.105924] Call Trace: [ 219.110398] dump_stack+0x1b9/0x294 [ 219.114048] ? dump_stack_print_info.cold.2+0x52/0x52 [ 219.121639] should_fail.cold.4+0xa/0x1a [ 219.127684] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 219.132815] ? print_usage_bug+0xc0/0xc0 [ 219.136873] ? graph_lock+0x170/0x170 [ 219.140669] ? lock_downgrade+0x8e0/0x8e0 [ 219.144813] ? radeon_card_posted+0x140/0x910 [ 219.149929] ? find_held_lock+0x36/0x1c0 [ 219.153992] ? __lock_is_held+0xb5/0x140 [ 219.158063] ? radeon_card_posted+0x140/0x910 [ 219.162562] ? check_same_owner+0x320/0x320 [ 219.166908] ? __might_sleep+0x95/0x190 [ 219.170879] ? rcu_note_context_switch+0x710/0x710 [ 219.175811] __should_failslab+0x124/0x180 [ 219.180064] should_failslab+0x9/0x14 [ 219.183871] __kmalloc+0x2c8/0x760 [ 219.187410] ? __kmalloc_node+0x47/0x70 [ 219.191660] ? __list_lru_init+0xdd/0x790 [ 219.195807] __list_lru_init+0xdd/0x790 [ 219.199782] ? list_lru_destroy+0x4c0/0x4c0 [ 219.204103] ? mark_held_locks+0xc9/0x160 [ 219.208266] ? __raw_spin_lock_init+0x1c/0x100 [ 219.212844] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 219.218665] ? lockdep_init_map+0x9/0x10 [ 219.222739] sget_userns+0x767/0xf00 [ 219.226451] ? get_anon_bdev+0x2f0/0x2f0 [ 219.230507] ? test_bdev_super+0x50/0x50 [ 219.234582] ? destroy_unused_super.part.11+0x110/0x110 [ 219.239961] ? alloc_vfsmnt+0x771/0x9d0 [ 219.244263] ? mnt_free_id.isra.27+0x60/0x60 [ 219.248698] ? kasan_check_read+0x11/0x20 [ 219.252843] ? graph_lock+0x170/0x170 [ 219.256649] ? cap_capable+0x1f9/0x260 [ 219.260539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 219.266089] ? security_capable+0x99/0xc0 [ 219.270265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 219.275808] ? ns_capable_common+0x13f/0x170 [ 219.280212] ? get_anon_bdev+0x2f0/0x2f0 [ 219.284269] sget+0x10b/0x150 [ 219.287384] ? test_bdev_super+0x50/0x50 [ 219.291468] ? fuse_ctl_add_conn+0x280/0x280 [ 219.295997] mount_single+0x3a/0x170 [ 219.299735] fuse_ctl_mount+0x2c/0x40 [ 219.303541] mount_fs+0xae/0x328 [ 219.306925] ? mpi_free.cold.1+0x19/0x19 [ 219.310993] vfs_kern_mount.part.34+0xd4/0x4d0 [ 219.315604] ? may_umount+0xb0/0xb0 [ 219.319236] ? _raw_read_unlock+0x22/0x30 [ 219.323384] ? __get_fs_type+0x97/0xc0 [ 219.327266] do_mount+0x564/0x3070 [ 219.330800] ? lock_downgrade+0x8e0/0x8e0 [ 219.335053] ? copy_mount_string+0x40/0x40 [ 219.339289] ? check_same_owner+0x320/0x320 [ 219.343612] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 219.348636] ? __check_object_size+0x95/0x5d9 [ 219.353138] ? __might_sleep+0x95/0x190 [ 219.357223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 219.362760] ? _copy_from_user+0xdf/0x150 [ 219.366981] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 219.372534] ? copy_mount_options+0x285/0x380 [ 219.377039] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 219.382606] ksys_mount+0x12d/0x140 [ 219.386238] __x64_sys_mount+0xbe/0x150 [ 219.390207] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 219.395260] do_syscall_64+0x1b1/0x800 [ 219.399144] ? syscall_return_slowpath+0x5c0/0x5c0 [ 219.404075] ? syscall_return_slowpath+0x30f/0x5c0 [ 219.409004] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 219.414377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.419564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.424748] RIP: 0033:0x455a09 [ 219.427922] RSP: 002b:00007f74739fbc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.435648] RAX: ffffffffffffffda RBX: 00007f74739fc6d4 RCX: 0000000000455a09 [ 219.442906] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 2018/06/03 22:49:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x602, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000000)="0f01f7660f017b000f00d00fc75f810fc7a5000066b9b10b00000f32f30a1cba400066edf20f58db66b9800000c00f326635010000000f30", 0x38}], 0x1, 0x0, &(0x7f0000000040)=[@cr4={0x1}], 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0x10e) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)) 2018/06/03 22:49:08 executing program 0: getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffffffffea9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000028000)={r0, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) 2018/06/03 22:49:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xa, 0x80800) ioctl$KDDISABIO(r1, 0x4b37) 2018/06/03 22:49:08 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000180)={0x303, 0x33}, 0x4) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6006f5260008110000000000000000000000040000000000ff029078000000000000000000"], &(0x7f0000775000)) 2018/06/03 22:49:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="64f30f593f66b8000000000f23c00f21f8663501000a000f23f80f01cb0f011866b8009800000f23c00f21f86635010008000f23f866b9800000c00f326635000400000f300f005e5b66b9800000c00f326635000800000f302665d022b800008ec0", 0x62}], 0x1, 0x7, &(0x7f0000000180)=[@cr0={0x0, 0x20}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="00907ea80494f7afdf0e384872c47e737eb41098932f8960fce5493e983d2e66591573394124c3572d30221e65b0ef85be7af2e7eb2c93186094bc276d632d2feb5d6f0d94f4efcbf744b5c03e342003e02601bb94bd1147d7c3ff6043016b2d3953d8d8fab11202c52a591986e02d51c5e8b6f930b5aef9bcd7c7a408d5942763c1b5d28fac166e95afb32df654a78baf"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/03 22:49:08 executing program 6 (fault-call:2 fault-nth:21): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:08 executing program 7: r0 = socket(0x19, 0x0, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xf1d, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x20001) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0xd}, @val={0x3, 0x0, 0x400, 0xd9e, 0x8, 0x7fff}, @ipv4={{0x8, 0x4, 0x30e1, 0x1, 0xcc, 0x65, 0xffffffffffffffff, 0x5, 0x0, 0x0, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0x7, 0xb, 0x6, [@empty, @dev={0xac, 0x14, 0x14, 0x20}]}, @end]}}, @udp={0x4e24, 0x4e23, 0xac, 0x0, [@guehdr={0x2, 0xffffffff, 0xf12a, 0x3, 0x100, [0x80]}, @guehdr={0x2, 0xf13, 0x7, 0xfffffffffffffffa, 0x100, [0x80]}, @guehdr={0x1, 0x8, 0x6, 0x1db, 0x100}, @guehdr={0x2, 0x4, 0xc6, 0x5, 0x100, [0x80]}, @guehdr={0x1, 0x1, 0x8001, 0x40}], "143292e1df1adab74fa43f5af1910e58012639583826734ccda761daa90895c392772d8d434f6c2c9f41e8e24b13a8ae9fafcc862537770d79b6012f77370f5cc6e7377ec753cbca8a337e986cf03e1d8b8694919aae79497ca513dbf8f62fa0f9abc211abbb90e13be812c3e133e3c772ac29bdb736200411d8fe0ea89b7bdfe670d8fb"}}}, 0xda) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f0000000680), &(0x7f0000000600)=0x7970e41e) [ 219.450183] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 219.457447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 219.464737] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000014 2018/06/03 22:49:08 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x5}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x6, [0x7, 0x80000001, 0xffffffffffffff01, 0x8001, 0x0, 0x6]}, &(0x7f0000000200)=0x10) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x4000) r3 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'ip6gretap0\x00', 0x800}) 2018/06/03 22:49:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000000001d0000f1ff"], 0x14}, 0x1}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x0, 0xd56f, 0x100000001, 0x8}, 0x10) 2018/06/03 22:49:08 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x612000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1f, 0x6, 0x3}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0xfffffffffffffffa}, &(0x7f0000000100)=0x8) setsockopt(r0, 0x65, 0x2, &(0x7f0000000000), 0x0) 2018/06/03 22:49:08 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000280)=""/152}) readahead(r0, 0x9, 0x5) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f696e746567fcdeb8cd2c646973636172643d2c00"]) accept4$alg(r1, 0x0, 0x0, 0x80000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) 2018/06/03 22:49:08 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)=ANY=[@ANYBLOB="1c000000130affff000020df4bce4713eec862000000000000000000"], 0x1c}, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0x1, &(0x7f0000000080)=[r1]) 2018/06/03 22:49:08 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x3) ioctl$int_out(r1, 0xc0385720, &(0x7f0000000100)) pread64(r1, &(0x7f0000000040)=""/11, 0xb, 0x0) 2018/06/03 22:49:08 executing program 2: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) modify_ldt$write(0x1, &(0x7f0000000080)={0x13, 0xffffffff, 0x4000, 0x0, 0x8, 0x100000000000, 0x2, 0xff, 0x2, 0x7ff}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0x0, 0x4000, 0x4, 0xf800000000000000, 0x400, 0x40, 0x14, 0x0, 0x10001}, 0x10) [ 219.789643] jfs: Unrecognized mount option "nointegüÞ¸Í" or missing value [ 219.800329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 219.877327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 219.958341] device bridge_slave_1 left promiscuous mode [ 219.965102] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.000611] device bridge_slave_0 left promiscuous mode [ 220.006322] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.074063] team0 (unregistering): Port device team_slave_1 removed [ 220.085559] team0 (unregistering): Port device team_slave_0 removed [ 220.096971] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 220.117125] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 220.145188] bond0 (unregistering): Released all slaves 2018/06/03 22:49:09 executing program 6 (fault-call:2 fault-nth:22): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:09 executing program 7: r0 = socket$inet(0x2, 0x1, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'overriderockperm'}], 0xa, "bff6cbb088253e3187faf67604ca1bd7e7d0f6ba1234f391d05bf80df31e790cdc51039bf3c4c1ed4004915d4ae19a514e32591a1326e7968d1c379e8c8c30417ff5e8fab125e534da"}, 0x65) 2018/06/03 22:49:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0247e22f05d02c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f00000000c0)=0xfffffffffffffff9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x0, [0x174]}) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1000, 0x404200) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) 2018/06/03 22:49:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xac2e, 0x2) 2018/06/03 22:49:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x7) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0xea111ea8e034b7ee) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000001c0)={0x2, 0xfffffffffffffff8, 0x4, {0x0, 0x989680}, 0x7, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x1, 0x5}, 'port0\x00', 0x34, 0x100040, 0x1, 0x10001, 0x4, 0x1f, 0xe2, 0x0, 0xe449cdf9af35edda, 0x9}) r2 = socket(0x11, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000)=0x369) 2018/06/03 22:49:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) recvfrom$inet(r0, &(0x7f0000000040)=""/54, 0x36, 0xe834b3a89ed869e7, &(0x7f0000000080)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) fallocate(r0, 0x0, 0x4b99, 0x5) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x4000003) madvise(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x9) sendfile(r1, r0, 0x0, 0xc08f) 2018/06/03 22:49:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006161000000000000616200000000000085120000010000009500000000000000bf100000009800005500000000000000950000000000559e"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0)={0xbd}, 0x1) 2018/06/03 22:49:09 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x81, 0x80000001, 0xd024}, &(0x7f00000001c0)=0x10) vmsplice(r0, &(0x7f0000002480)=[{&(0x7f0000002400)="b9", 0x1}], 0x1, 0x0) close(r1) dup2(r1, r0) [ 221.246587] IPVS: ftp: loaded support on port[0] = 21 [ 221.739235] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.745702] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.753139] device bridge_slave_0 entered promiscuous mode [ 221.784716] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.791215] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.798663] device bridge_slave_1 entered promiscuous mode [ 221.835100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.870700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.955513] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.990805] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.111416] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.118706] team0: Port device team_slave_0 added [ 222.144304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.151498] team0: Port device team_slave_1 added [ 222.177936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.206628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.234427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.262252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.512259] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.518688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.525393] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.531781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.426782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.522658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 223.616330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 223.622570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.630279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.712062] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.228981] FAT-fs (loop6): bogus number of reserved sectors [ 224.234971] FAT-fs (loop6): Can't find a valid FAT filesystem [ 224.252554] FAULT_INJECTION: forcing a failure. [ 224.252554] name failslab, interval 1, probability 0, space 0, times 0 [ 224.264674] CPU: 1 PID: 16553 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 224.271959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.281567] Call Trace: [ 224.284167] dump_stack+0x1b9/0x294 [ 224.287803] ? dump_stack_print_info.cold.2+0x52/0x52 [ 224.292994] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 224.298204] should_fail.cold.4+0xa/0x1a [ 224.302272] ? is_bpf_text_address+0xd7/0x170 [ 224.306777] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 224.311930] ? unwind_get_return_address+0x61/0xa0 [ 224.316877] ? __save_stack_trace+0x7e/0xd0 [ 224.321207] ? graph_lock+0x170/0x170 [ 224.325032] ? find_held_lock+0x36/0x1c0 [ 224.329121] ? __lock_is_held+0xb5/0x140 [ 224.333210] ? check_same_owner+0x320/0x320 [ 224.337548] ? rcu_note_context_switch+0x710/0x710 [ 224.342500] __should_failslab+0x124/0x180 [ 224.346761] should_failslab+0x9/0x14 [ 224.350586] kmem_cache_alloc_trace+0x2cb/0x780 [ 224.355271] ? __kmalloc_node+0x33/0x70 [ 224.359267] ? __kmalloc_node+0x33/0x70 [ 224.363283] ? rcu_read_lock_sched_held+0x108/0x120 [ 224.368335] __memcg_init_list_lru_node+0x17d/0x2c0 [ 224.373371] ? kvfree_rcu+0x20/0x20 [ 224.377011] ? __kmalloc_node+0x47/0x70 [ 224.381010] __list_lru_init+0x456/0x790 [ 224.385082] ? list_lru_destroy+0x4c0/0x4c0 [ 224.389412] ? mark_held_locks+0xc9/0x160 [ 224.393560] ? __raw_spin_lock_init+0x1c/0x100 [ 224.398140] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 224.403170] ? lockdep_init_map+0x9/0x10 [ 224.407241] sget_userns+0x767/0xf00 [ 224.410954] ? get_anon_bdev+0x2f0/0x2f0 [ 224.415039] ? test_bdev_super+0x50/0x50 [ 224.419109] ? destroy_unused_super.part.11+0x110/0x110 [ 224.424471] ? alloc_vfsmnt+0x771/0x9d0 [ 224.428435] ? mnt_free_id.isra.27+0x60/0x60 [ 224.432838] ? kasan_check_read+0x11/0x20 [ 224.436977] ? graph_lock+0x170/0x170 [ 224.440786] ? cap_capable+0x1f9/0x260 [ 224.444770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.450341] ? security_capable+0x99/0xc0 [ 224.454489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.460046] ? ns_capable_common+0x13f/0x170 [ 224.464462] ? get_anon_bdev+0x2f0/0x2f0 [ 224.468513] sget+0x10b/0x150 [ 224.471606] ? test_bdev_super+0x50/0x50 [ 224.475660] ? fuse_ctl_add_conn+0x280/0x280 [ 224.480058] mount_single+0x3a/0x170 [ 224.483764] fuse_ctl_mount+0x2c/0x40 [ 224.487562] mount_fs+0xae/0x328 [ 224.490925] ? mpi_free.cold.1+0x19/0x19 [ 224.494998] vfs_kern_mount.part.34+0xd4/0x4d0 [ 224.499583] ? may_umount+0xb0/0xb0 [ 224.503202] ? _raw_read_unlock+0x22/0x30 [ 224.507346] ? __get_fs_type+0x97/0xc0 [ 224.511232] do_mount+0x564/0x3070 [ 224.514784] ? lock_downgrade+0x8e0/0x8e0 [ 224.518953] ? copy_mount_string+0x40/0x40 [ 224.523189] ? check_same_owner+0x320/0x320 [ 224.527528] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 224.532559] ? __check_object_size+0x95/0x5d9 [ 224.537065] ? __might_sleep+0x95/0x190 [ 224.541055] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 224.546604] ? _copy_from_user+0xdf/0x150 [ 224.550812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 224.556361] ? copy_mount_options+0x285/0x380 [ 224.560857] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 224.566396] ksys_mount+0x12d/0x140 [ 224.570061] __x64_sys_mount+0xbe/0x150 [ 224.574046] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 224.579075] do_syscall_64+0x1b1/0x800 [ 224.582962] ? finish_task_switch+0x1ca/0x840 [ 224.587461] ? syscall_return_slowpath+0x5c0/0x5c0 [ 224.592393] ? syscall_return_slowpath+0x30f/0x5c0 [ 224.597323] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 224.602694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 224.607535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.612717] RIP: 0033:0x455a09 [ 224.615903] RSP: 002b:00007facfc8d4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.623608] RAX: ffffffffffffffda RBX: 00007facfc8d56d4 RCX: 0000000000455a09 2018/06/03 22:49:13 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=""/59, &(0x7f00000002c0)=""/193, &(0x7f0000000200)=""/163, 0xfdfdffff}) 2018/06/03 22:49:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x0) accept(r1, &(0x7f0000000280)=@nfc, &(0x7f0000000040)=0x80) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000240)=0x20000005) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={"643071300000000000000020001600", 0x3}) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddr={0x18, 0x16, 0x101, 0x0, 0x0, {0x18}}, 0x18}, 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish-generic)\x00'}, 0x58) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$llc(r3, &(0x7f0000000080)="57860e17f91a8bf2", 0x8, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 2018/06/03 22:49:13 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20b83, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x6, &(0x7f0000000100)=0x10001, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x7fff, 0x0, 0x5, 0x3, 0x0, 0x0, 0x100000001, 0x7, 0x4, 0x5, 0xfffffffffffffffc}, 0xb) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f0000000040), 0x4) dup3(r0, r1, 0x0) 2018/06/03 22:49:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2, 0x6, 0x2, r2}) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0x400}, 0x0, 0x100000001, 0x5, {0x3, 0x8}, 0x1, 0x6}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) r5 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x400, 0x80) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000080)={0x2, r3}) 2018/06/03 22:49:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x40000, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000200)="876ab03ea18c988db9af199e185db19e399205d11a0c3c9c1d29896adf3ae5ed7377b26a2a2d0d38c1f4e07dbca1275618e2b43b83541a29516c33701b2d8c807751d1e1771b60ea4764c5ecd3809d3c3f9b04e9d727c738bb139b3364d4d641c113ea8c7ce36633c917eb70d3fa85440b2ac2fb934003900b3b8dbc3d7002e8465462a5421a1d51317c8688bf28eaf8ff33490cab8a5255e45c4bcd94a4d916a8f0089416349521223dcbbe4b") r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000140)=0x44) 2018/06/03 22:49:13 executing program 6 (fault-call:2 fault-nth:23): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:13 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000532000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00004ee64e)}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000000c0)={0x2800, 0x0, 0x0, 'queue0\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f000082ef0a)=""/246) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) pwritev(r3, &(0x7f0000f65000)=[{&(0x7f0000000080)="80", 0x1}], 0x1, 0x0) 2018/06/03 22:49:13 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 224.630880] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 224.638146] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 224.645416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 224.652692] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000016 [ 224.719229] binder_alloc: 16558: binder_alloc_buf failed to map page at 20000000 in userspace [ 224.750080] binder: 16558:16563 transaction failed 29201/-12, size 0-0 line 2971 2018/06/03 22:49:13 executing program 5: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x450200, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)="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") r2 = dup(r0) accept4$netrom(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) [ 224.766913] irq bypass consumer (token 000000003c8ff241) registration fails: -16 2018/06/03 22:49:13 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 224.808521] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 22:49:13 executing program 4: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_fuseblk_mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file1\x00', 0xc000, 0x0, r0, 0x0, 0x0, 0x0) write$fuse(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, @fuse_notify_delete_out={0x1}}, 0x8) 2018/06/03 22:49:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20040, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000140)) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x5, 0x321780) setsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f00000002c0)="d34f559570221de53032fea0e9faa0593ea88ee3c5c8f3ec892e915700baa4326e80f41312d6e558912368c95edfc5d46e27b45c282a335b87475e4bf333f4c43307a23f4661227073afc7a2d35a1bd1ab15980e6619c9ddbed795d0099a38b0255cb06f32e1b39e398188258f2495c2a7cad2ab5c7fd6a8c1300bfbcc757cd602dd468da8f37d228d910a667b70b7fe70eb24ef81d939ebaaa9201d67948af278dd3ec58e229221442ddc9045875b1402a29b8dc385442b9aadfd6e2af525954099683ba685b7c2fc205432d979da26c58c8844fdb59a07b1f21565e47a1b4e5b36921e277ccabf0700000000000000207a0000000000000000000000b6a62acaf6b49e4c3a168e66b77a79cb3891a2516dbeb5d3b9be7b136712eb81799f91629f5b3072c4b45c758abf00e213e9f7989a19f371db44bf8e6fb776ac0a16086f8f96f5702e0a7419332fef4c8fe099e5909a4b17fbeaa1605d2b7523564f1c8f11fae08a26dcbf8eeaa3d42d18c21aa84ce48e779df8bdd207d366d38312a824708c905f9ad1eec7326531458240636dbe73d69754b906afbb9b39b018052864e8631e9c63e85f69be27781d32255e2b0cd6fac6d3bb6e7ef9a2338320914c5e05ee", 0x44c1c51fa113f341) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000000c0)=0x10000) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0xf, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) [ 224.845880] binder_alloc: binder_alloc_mmap_handler: 16558 20000000-20002000 already mapped failed -16 [ 224.857487] binder: 16558:16563 ioctl 40046207 0 returned -16 2018/06/03 22:49:13 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x6e, &(0x7f0000000180), 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x8200) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) [ 224.929334] binder_alloc: 16558: binder_alloc_buf, no vma [ 224.935407] binder: 16558:16578 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 22:49:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000040)="00040000000000000000", 0x7, 0x3, &(0x7f0000000080)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}}, 0x1c) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000200)) r2 = getpid() ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000000)={&(0x7f0000000100)="bed19777755ebc1b1d669d10a9d7de2671650984c10f4bd0727c2da1fe88691df12edd4be92f34e22e6c5967fe4c3d9e6f1a45afa07f41c8b8331fbf954e5e7a4d18e5e107a1bb012625b0f57b6c123d8e387df9a0057e712e155074fbe423ff5a22cd89caad9b7c2de906dfbde7341e49a4d7c7b70e643f6a555e000fdf6267e6d38b0184cb31c11132933caefe4aa6bea7a4cf7214d42db84a51167b16e44396904ac3c83f37c20d5fbf62763347967f116d3af4516d4fe6c87724cb736b067a71117bd8d3694b566b19057673c936c524c4", 0xd3}) 2018/06/03 22:49:13 executing program 6 (fault-call:2 fault-nth:24): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:13 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setgid(r2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={"7465616dfeeffd5f0100", 0x2}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2eddfe9a2d893c3, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000240)={0xf75a, 0x1ff, 0x40, 0x93, &(0x7f00000000c0)=""/147, 0x10, &(0x7f0000000180)=""/16, 0x5e, &(0x7f00000001c0)=""/94}) r4 = semget$private(0x0, 0x2, 0x98) semctl$SEM_STAT(r4, 0x7, 0x12, &(0x7f0000000000)=""/9) 2018/06/03 22:49:14 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000e40)={'team_slave_1\x00', 0x5}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x6, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), 0x0) 2018/06/03 22:49:14 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/190, &(0x7f0000000000)=0xbe) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="8100756994094bd7f1586f") epoll_create(0x1007007f) [ 225.097850] device bridge_slave_1 left promiscuous mode [ 225.103725] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/03 22:49:14 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005c1000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000631000/0x4000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x720c, 0x501001) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x5a, 0x4) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 225.205521] binder: undelivered TRANSACTION_ERROR: 29189 [ 225.216423] device bridge_slave_0 left promiscuous mode [ 225.216459] binder: undelivered TRANSACTION_ERROR: 29201 [ 225.222081] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.432451] team0 (unregistering): Port device team_slave_1 removed [ 225.445514] IPVS: ftp: loaded support on port[0] = 21 [ 225.445702] team0 (unregistering): Port device team_slave_0 removed [ 225.461325] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 225.479958] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 225.510661] bond0 (unregistering): Released all slaves [ 226.370549] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.377059] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.384629] device bridge_slave_0 entered promiscuous mode [ 226.425471] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.432000] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.439423] device bridge_slave_1 entered promiscuous mode [ 226.478049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.518747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.638591] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.680104] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.856330] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.863878] team0: Port device team_slave_0 added [ 226.901508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.908824] team0: Port device team_slave_1 added [ 226.943714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.950712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.960154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.001266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.008350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.016346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.040581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.047855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.056343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.078901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.086199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.094414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.357579] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.364087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.371171] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.377597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.385466] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.872151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.353646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.447301] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.537792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 228.544162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.551408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.637381] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.202547] FAT-fs (loop6): bogus number of reserved sectors [ 229.208484] FAT-fs (loop6): Can't find a valid FAT filesystem [ 229.226406] FAULT_INJECTION: forcing a failure. [ 229.226406] name failslab, interval 1, probability 0, space 0, times 0 [ 229.237818] CPU: 0 PID: 16897 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 229.245109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.254469] Call Trace: [ 229.257065] dump_stack+0x1b9/0x294 [ 229.260751] ? dump_stack_print_info.cold.2+0x52/0x52 [ 229.265958] ? __save_stack_trace+0x7e/0xd0 [ 229.270380] should_fail.cold.4+0xa/0x1a [ 229.274462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.279594] ? save_stack+0x43/0xd0 [ 229.283241] ? kasan_kmalloc+0xc4/0xe0 [ 229.287158] ? kmem_cache_alloc_trace+0x152/0x780 [ 229.292035] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 229.297247] ? __list_lru_init+0x456/0x790 [ 229.301492] ? sget_userns+0x767/0xf00 [ 229.305397] ? graph_lock+0x170/0x170 [ 229.309214] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 229.314161] ? do_mount+0x564/0x3070 [ 229.317879] ? ksys_mount+0x12d/0x140 [ 229.321696] ? __x64_sys_mount+0xbe/0x150 [ 229.325854] ? do_syscall_64+0x1b1/0x800 [ 229.329932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.335317] ? find_held_lock+0x36/0x1c0 [ 229.339398] ? __lock_is_held+0xb5/0x140 [ 229.343503] ? check_same_owner+0x320/0x320 [ 229.347857] ? rcu_note_context_switch+0x710/0x710 [ 229.352812] __should_failslab+0x124/0x180 [ 229.357080] should_failslab+0x9/0x14 [ 229.360899] kmem_cache_alloc_trace+0x2cb/0x780 [ 229.365594] ? __kmalloc_node+0x33/0x70 [ 229.369612] ? __kmalloc_node+0x33/0x70 [ 229.373722] ? rcu_read_lock_sched_held+0x108/0x120 [ 229.378760] __memcg_init_list_lru_node+0x17d/0x2c0 [ 229.383826] ? kvfree_rcu+0x20/0x20 [ 229.387481] ? __kmalloc_node+0x47/0x70 [ 229.392742] __list_lru_init+0x456/0x790 [ 229.396820] ? list_lru_destroy+0x4c0/0x4c0 [ 229.401220] ? mark_held_locks+0xc9/0x160 [ 229.405735] ? __raw_spin_lock_init+0x1c/0x100 [ 229.410325] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 229.415353] ? lockdep_init_map+0x9/0x10 [ 229.419431] sget_userns+0x767/0xf00 [ 229.423147] ? get_anon_bdev+0x2f0/0x2f0 [ 229.427228] ? test_bdev_super+0x50/0x50 [ 229.431285] ? destroy_unused_super.part.11+0x110/0x110 [ 229.436669] ? alloc_vfsmnt+0x771/0x9d0 [ 229.440675] ? mnt_free_id.isra.27+0x60/0x60 [ 229.445114] ? kasan_check_read+0x11/0x20 [ 229.449266] ? graph_lock+0x170/0x170 [ 229.453081] ? cap_capable+0x1f9/0x260 [ 229.456988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.462532] ? security_capable+0x99/0xc0 [ 229.466735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.472540] ? ns_capable_common+0x13f/0x170 [ 229.476979] ? get_anon_bdev+0x2f0/0x2f0 [ 229.481107] sget+0x10b/0x150 [ 229.484224] ? test_bdev_super+0x50/0x50 [ 229.488302] ? fuse_ctl_add_conn+0x280/0x280 [ 229.492753] mount_single+0x3a/0x170 [ 229.496494] fuse_ctl_mount+0x2c/0x40 [ 229.500323] mount_fs+0xae/0x328 [ 229.503789] ? mpi_free.cold.1+0x19/0x19 [ 229.507867] vfs_kern_mount.part.34+0xd4/0x4d0 [ 229.512464] ? may_umount+0xb0/0xb0 [ 229.516110] ? _raw_read_unlock+0x22/0x30 [ 229.520281] ? __get_fs_type+0x97/0xc0 [ 229.524180] do_mount+0x564/0x3070 [ 229.527719] ? lock_downgrade+0x8e0/0x8e0 [ 229.531869] ? copy_mount_string+0x40/0x40 [ 229.536129] ? check_same_owner+0x320/0x320 [ 229.540485] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 229.545517] ? __check_object_size+0x95/0x5d9 [ 229.550101] ? __might_sleep+0x95/0x190 [ 229.554087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.559630] ? _copy_from_user+0xdf/0x150 [ 229.563901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.569454] ? copy_mount_options+0x285/0x380 [ 229.573998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.579555] ksys_mount+0x12d/0x140 [ 229.583192] __x64_sys_mount+0xbe/0x150 [ 229.587177] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 229.592326] do_syscall_64+0x1b1/0x800 [ 229.596233] ? finish_task_switch+0x1ca/0x840 [ 229.600752] ? syscall_return_slowpath+0x5c0/0x5c0 [ 229.605714] ? syscall_return_slowpath+0x30f/0x5c0 [ 229.610654] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 229.616051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.620912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.626101] RIP: 0033:0x455a09 [ 229.629310] RSP: 002b:00007fc39fdc1c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.637022] RAX: ffffffffffffffda RBX: 00007fc39fdc26d4 RCX: 0000000000455a09 [ 229.644297] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 2018/06/03 22:49:18 executing program 5: unshare(0x60000000) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffffffff, 0x20001000, 0x400, 0x3, 0x7f, 0xfffffffffffffffb, 0x7127, 0xffff, 0x401, 0x275}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r2}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x420000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0xfffffffffffffff9, 0x4) 2018/06/03 22:49:18 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) r0 = getpgid(0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0xc3, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000005c0)={0x0, 0x0, 'client0\x00', 0xffffffff80000004, "052643585dcf91ac", "06b97268241d3fabfdb96c8bd4e473543d595b249dae3e6d937d1ccbd763ec25", 0x6, 0x8000000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000680)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x0, @time}) r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x10, 0xfff, 0x4}, &(0x7f0000000500)=0x18) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000140), 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000540)={r3, 0x4, 0x1, [0x40]}, &(0x7f0000000580)=0xa) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x6, 0x8000) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000300)={0x2}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x200) io_setup(0x800, &(0x7f0000000000)=0x0) io_getevents(r5, 0x3, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}) 2018/06/03 22:49:18 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="23f596c52b39106ec413e4a88fe10100002b00", 0x3) fcntl$addseals(r0, 0x409, 0x9) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x200000011, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/118, 0x76}], 0x3, 0x0) 2018/06/03 22:49:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x8c8f, 0xa, 0x100000001, 0x0, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x5adbb3e6}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000000), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'eql\x00', 'yam0\x00', "746502000000000020000000000800", 'veth1_to_team\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb0, 0xb0, 0xe0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth0\x00', 'gre0\x00', 'bond_slave_0\x00', 'dummy0\x00', @random="221f1cf52862", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "c08e36751842cab380434dc086c938639570fbfa40dce636424fa87c9ad03f9063959cccf655bd32af6f9623f131fb264cb97297cd6b8dc712f5baf56e808e9c"}}}}]}]}, 0x300) 2018/06/03 22:49:18 executing program 4: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003500)={[{@session={'session', 0x3d}, 0x2c}]}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, r1, {0x0, 0x10}, {0xffff, 0xfff2}, {0xffff, 0x8}}, [@TCA_RATE={0x8, 0x5, {0xfffffffffffffff9, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}]}, 0x34}, 0x1}, 0x800) 2018/06/03 22:49:18 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x121400, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:18 executing program 6 (fault-call:2 fault-nth:25): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) close(r0) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x10003, 0x7742) io_setup(0xfbac, &(0x7f0000001580)) [ 229.651564] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 229.659187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 229.666455] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000018 2018/06/03 22:49:18 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x566, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x3, 0x1, 0x1000, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) mount(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='gfs2meta\x00', 0x0, &(0x7f00000000c0)) 2018/06/03 22:49:18 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001700)='/dev/dsp#\x00', 0x1, 0x81004) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x404) syz_mount_image$gfs2(&(0x7f0000001f00)='gfs2\x00', &(0x7f0000001f40)='./file0\x00', 0x4, 0x7, &(0x7f0000001600)=[{&(0x7f0000000240)="ac6d437091fad7bea467a5", 0xb, 0x1}, {&(0x7f0000000280)="fa9877d54986d037ac129f48b2625614e3862bef56557be9cb59242a9d83c08e1f416812c33141e6b4d32d94de0880a2c88f2a45ee61f443ea29c400da5a75174e0abb8afd44d6e9b3ed0e6bb3f49e07a3847b2d4335c1036d154f245115af504b3a8130132eb9dde286fd", 0x6b, 0x2}, {&(0x7f0000000300)="d55329909ca98f1ddf1cd9ffbb736cc915f1ae9687f31a444bb19d84ccfcc54c4f079f912035057aba6ed0529788f55eca8cc7267f90b3ecb8bb0864d31b6109e8af063d761f2bcd42e0ff38c06482af9d9bca0d68a84ae2908d92fc5304d2d0a9bc5a10a4430e3a3c128282cb8dbe9a5fb9f4596c6a238eb5b41359868bb89faf6a12ae660f78dfe018ea74e48d801e7929bee4896fdc917c02d5f37634f7f83807b63a21e1585bedd94fe008d276c08e703da8ba0e65b1a0c1e884762926c63b47a4f7c42e176a1dfcfb82b491b9b65f52bc6bbde0c116701476b7af", 0xdd, 0x6}, {&(0x7f0000000400)="d82b8df61090271725b020612818de570474a7e0b074e271f0a6b90b1853d2932d781474b45741e7ae40cc59f9c4eedf4ac394775433d4121d336fdf08d61925c2c1f618fc720d53671d09966bea6d0ddb7666daab875f09011205b695ba76bc9b04d4f7ff090b1fad53fcdccf3190320f2148b0479ecdd8cf7da5fd9d0389e7be8daf00d2e2fe02a48fa85cd27b76de56f5097b4c1cca3db9da4cb8218f6fd5f1e1476d817908faee673ad2", 0xac, 0x20000}, {&(0x7f00000004c0)="ed3fda9ce4a1cea805e902153a5550171264d7e5cf54c8", 0x17}, {&(0x7f0000000500)="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", 0x1000, 0x95}, {&(0x7f0000001500)="1ea7cdec4c300cc1f7bc22d105c087030db5231d027ff543bf3d93bb8b9dc9e878af33c1b488d235ed080cdb08be85de0ac9eda1be4d33febf9eaabb5b1ac3898ace3a13af2ed234d1a76fbd50ec5847193e3ed43043787f9170f217c1d12c25795311ef8ca19ddf855b8810c447e084bdb0cf2f03cb5477e2c0d6a68ff8ec7a4933df83db052ddb02330ce1904f6025232117323aa24650c1c909de56c939863fae991af6c6ca0e3141b28e4a700a012c434471a88b1d54f23de2bc7af02fed9defcb0087520aadef0ae719468b9badd929faa7d793e6dafa75fe701c6c7126578d1e", 0xe3, 0x1f}], 0xfffffffffffffffc, &(0x7f0000002040)=ANY=[]) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001f80)="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", 0x1000}], 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0, 0xbf}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000016c0)={r1, 0x80000, r0}) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xdc, 0x8000, "6837a64bf14e2d491f27dc3a09bafc2cc3217459dcd730721fac07cc21cb54a35bc8079712fd64e6bbd775bbe9909f796426e6198b2132f7cec515f5f54333b46b9c0c0333142a6f25e12dc1a2c9993c9aa69d1d053ce546a5a50da49a31c06d2ea05cab30d4de55664b1d5263a4ef29c16e28a78308e3d2911bd08af8d045e5991a53eb4bf47f465887006d741293555800abcc22fbe464373ee18e2a3658812b62f40f1cfc87db035dea5345da0eb34700384b9d64699908755ff984fa2ce91b84ca88ec7c71c7a836d35be3fa615282ce81b3"}, &(0x7f00000001c0), 0x1000) [ 229.736235] hfs: unable to parse mount options [ 229.744923] IPVS: ftp: loaded support on port[0] = 21 [ 229.774958] hfs: unable to parse mount options 2018/06/03 22:49:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) connect$ipx(r1, &(0x7f0000000040)={0x4, 0x100000, 0x9, "02f0fb779d4b", 0xfffffffffffff001}, 0x10) syz_open_dev$mice(&(0x7f0000000f00)='/dev/input/mice\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000081000000"], 0x18) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) [ 229.908594] gfs2: gfs2 mount does not exist 2018/06/03 22:49:18 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x0, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000400)={@remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0x3, 0xffffffffffffffff, 0xff, 0x100, 0xfffffffffffffffa, 0x0, r5}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x6, 0x1f, 0x9, 0x0, 0xf}) ioctl$KVM_X86_SET_MCE(r3, 0xaead, &(0x7f0000000140)) [ 229.961864] gfs2: gfs2 mount does not exist 2018/06/03 22:49:18 executing program 6 (fault-call:2 fault-nth:26): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:18 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x23, &(0x7f0000000080)={0x400002}, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x32100, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x8000, 0x10001, 0x0, 0x2, 0x0, 0x6, 0x1000, 0x7, 0x6, 0x5, 0x20, 0x2, 0x5000000, 0x6, 0x0, 0x9, 0x9, 0x2, 0x311, 0x3ff, 0xe5b, 0x200, 0x10000, 0x8, 0xc5, 0x5, 0x10000, 0xc7, 0x0, 0x3, 0x4, 0x800, 0x1, 0x4, 0x7, 0x8, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4008, 0x6, 0x80000001, 0x1, 0x5, 0x9, 0x9}) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='security./proc/seff/nOt/pfkey\x00'], &(0x7f00000002c0)=""/194, 0xc2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) setsockopt$packet_buf(r2, 0x107, 0x17, &(0x7f0000000480)="77c2a28231687677fdc6976bca68077e4671f924ceef070e84cf887765a20cbe68527b345959c764d170cc065f4956dd673de28d0bcfef5acc8eeceb5d637bd934a67da35400ce5b8a7deb3eb0742f3e106774b401423c097758ab3d794a57dff3a2f508e86980817c86502549cdeb366a75a72acc09e97a2b2020907eb909abe16ed7718f047ec27620", 0x8a) sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000001c0)=0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000440)={0x40000000, 0x1, 0xd}) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="3a020203000000007306ff01000004000000000000000000"], 0x18) [ 230.193082] device bridge_slave_1 left promiscuous mode [ 230.198826] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.219715] device bridge_slave_0 left promiscuous mode [ 230.225445] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.306539] team0 (unregistering): Port device team_slave_1 removed [ 230.312123] IPVS: ftp: loaded support on port[0] = 21 [ 230.320778] team0 (unregistering): Port device team_slave_0 removed [ 230.332548] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 230.350707] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 230.386494] bond0 (unregistering): Released all slaves [ 231.182049] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.188504] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.195853] device bridge_slave_0 entered promiscuous mode [ 231.235015] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.241490] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.248827] device bridge_slave_1 entered promiscuous mode [ 231.288296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.326712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.467282] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.509957] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.695556] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.703056] team0: Port device team_slave_0 added [ 231.733198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.741202] team0: Port device team_slave_1 added [ 231.779991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.815548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.843684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.878873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.224958] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.231412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.238244] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.244644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.252692] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.928162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.544996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.633809] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.721066] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.727598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.735428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.821769] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.352391] FAT-fs (loop6): bogus number of reserved sectors [ 234.358335] FAT-fs (loop6): Can't find a valid FAT filesystem [ 234.374799] FAULT_INJECTION: forcing a failure. [ 234.374799] name failslab, interval 1, probability 0, space 0, times 0 [ 234.386127] CPU: 1 PID: 17232 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 234.393409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.402790] Call Trace: [ 234.405386] dump_stack+0x1b9/0x294 [ 234.409022] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.414264] ? __save_stack_trace+0x7e/0xd0 [ 234.418592] should_fail.cold.4+0xa/0x1a [ 234.422669] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.427801] ? save_stack+0x43/0xd0 [ 234.431445] ? kasan_kmalloc+0xc4/0xe0 [ 234.435338] ? kmem_cache_alloc_trace+0x152/0x780 [ 234.440180] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 234.445372] ? __list_lru_init+0x456/0x790 [ 234.449603] ? sget_userns+0x767/0xf00 [ 234.453488] ? graph_lock+0x170/0x170 [ 234.457296] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 234.462057] ? do_mount+0x564/0x3070 [ 234.465781] ? ksys_mount+0x12d/0x140 [ 234.469580] ? __x64_sys_mount+0xbe/0x150 [ 234.473738] ? do_syscall_64+0x1b1/0x800 [ 234.477801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.483185] ? find_held_lock+0x36/0x1c0 [ 234.487266] ? __lock_is_held+0xb5/0x140 [ 234.491347] ? check_same_owner+0x320/0x320 [ 234.495682] ? rcu_note_context_switch+0x710/0x710 [ 234.500622] __should_failslab+0x124/0x180 [ 234.504861] should_failslab+0x9/0x14 [ 234.508661] kmem_cache_alloc_trace+0x2cb/0x780 [ 234.513340] ? __kmalloc_node+0x33/0x70 [ 234.517311] ? __kmalloc_node+0x33/0x70 [ 234.521283] ? rcu_read_lock_sched_held+0x108/0x120 [ 234.526305] __memcg_init_list_lru_node+0x17d/0x2c0 [ 234.531330] ? kvfree_rcu+0x20/0x20 [ 234.534953] ? __kmalloc_node+0x47/0x70 [ 234.538922] __list_lru_init+0x456/0x790 [ 234.542994] ? list_lru_destroy+0x4c0/0x4c0 [ 234.547324] ? mark_held_locks+0xc9/0x160 [ 234.551479] ? __raw_spin_lock_init+0x1c/0x100 [ 234.556059] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 234.561095] ? lockdep_init_map+0x9/0x10 [ 234.565179] sget_userns+0x767/0xf00 [ 234.568894] ? get_anon_bdev+0x2f0/0x2f0 [ 234.572956] ? test_bdev_super+0x50/0x50 [ 234.577038] ? destroy_unused_super.part.11+0x110/0x110 [ 234.582429] ? alloc_vfsmnt+0x771/0x9d0 [ 234.586424] ? mnt_free_id.isra.27+0x60/0x60 [ 234.590841] ? kasan_check_read+0x11/0x20 [ 234.594992] ? graph_lock+0x170/0x170 [ 234.598796] ? cap_capable+0x1f9/0x260 [ 234.602704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.608260] ? security_capable+0x99/0xc0 [ 234.612421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.617958] ? ns_capable_common+0x13f/0x170 [ 234.622378] ? get_anon_bdev+0x2f0/0x2f0 [ 234.626436] sget+0x10b/0x150 [ 234.629533] ? test_bdev_super+0x50/0x50 [ 234.633610] ? fuse_ctl_add_conn+0x280/0x280 [ 234.638048] mount_single+0x3a/0x170 [ 234.641786] fuse_ctl_mount+0x2c/0x40 [ 234.645580] mount_fs+0xae/0x328 [ 234.648948] ? mpi_free.cold.1+0x19/0x19 [ 234.653032] vfs_kern_mount.part.34+0xd4/0x4d0 [ 234.657624] ? may_umount+0xb0/0xb0 [ 234.661249] ? _raw_read_unlock+0x22/0x30 [ 234.665391] ? __get_fs_type+0x97/0xc0 [ 234.669275] do_mount+0x564/0x3070 [ 234.672816] ? lock_downgrade+0x8e0/0x8e0 [ 234.676964] ? copy_mount_string+0x40/0x40 [ 234.681194] ? check_same_owner+0x320/0x320 [ 234.685526] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 234.690542] ? __check_object_size+0x95/0x5d9 [ 234.695058] ? __might_sleep+0x95/0x190 [ 234.699068] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.704627] ? _copy_from_user+0xdf/0x150 [ 234.708784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.714326] ? copy_mount_options+0x285/0x380 [ 234.718820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.724375] ksys_mount+0x12d/0x140 [ 234.728030] __x64_sys_mount+0xbe/0x150 [ 234.732022] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 234.737068] do_syscall_64+0x1b1/0x800 [ 234.740972] ? syscall_return_slowpath+0x5c0/0x5c0 [ 234.745902] ? syscall_return_slowpath+0x30f/0x5c0 [ 234.750831] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 234.756196] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.761077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.766260] RIP: 0033:0x455a09 [ 234.769445] RSP: 002b:00007febfc574c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.777265] RAX: ffffffffffffffda RBX: 00007febfc5756d4 RCX: 0000000000455a09 [ 234.784529] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 234.791792] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/06/03 22:49:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2=0xe0000002}, 0x0, 0x0, 0x2}}, {&(0x7f00000002c0)=""/43, 0x2b}, &(0x7f0000000300), 0x10}, 0xa0) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}, 0x283}], 0x400000000000284, 0x20004bc0) 2018/06/03 22:49:23 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x11e}) 2018/06/03 22:49:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0xb6, &(0x7f0000000040), &(0x7f0000000100)=""/182, 0x200}, 0x28) 2018/06/03 22:49:23 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002300)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c, &(0x7f0000002100), 0x345, &(0x7f0000002240)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000}}], 0x20}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x54e, @mcast2={0xff, 0x2, [], 0x1}, 0x8001}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)="d1bd1899801cead2bd50a147973bd1b2db1ecd506c240aea3a6ab11d8f73d2bce6ac9dac4585e0386478bf7ee6c89eaea336ccb42cd9f07425dd73c4b1092fbe20cfd1ffd720ba8356c2a977e9d134f4f21346f0cc574ea66619a645e20499cdf79d771740770f1f2140c03c2d66de87d607fe7dce18547068be5909bbad0be1198e29daa22de615a4a00548", 0x8c}, {&(0x7f0000000140)="3e95a7c3da578d99aaefc9342dd86511dae7cab42df195db1ff5ff9780182f", 0x1f}, {&(0x7f0000000180)="4c3d0fd1c3ef7d468889eb045cda8470bd50e2cfa18b20438fc5092894611c1d5eff7af2d7f8cd5716f665c01d8f6356e196fe1c26f978148b834ef27ca8a74f04535c93630fa4e60ff9bf2e564804cba17803dc894ccd4e73d3694568c9be1a9c5ef74bb78043237a91c1d25786ed4e095d6dfae4c12cec0b2163c689d6e34b9316736b0d", 0x85}, {&(0x7f0000000240)="18fafa2556561fa984644d625b4c4b84918cdbd98a38cf425f66714eb149ce0d64b64b033cac4a086b99ce48f0e372efbe0f1f6a3d62f69c02c8aa042e69239ea75b2fae51e75022113220b5aa9a2dc0436166ded9bb561d1a00ebcd284e8e9e189002d8f3d479c67b9849323b9cf90fcb12664132f36fd0db43ef48fa9eebb9a90ffc0e1b50a1a6b42759fb77233f23d79f50edbd7429e0e4ba142d4a0d83182b127e20d6b6814d7a80d9d8ae98549c2257e452f03e09ce14ca11d50e839aad7a56c88cc64a28e520995b32503558178c4f8f7b3cb4a76e4d998daf6d5230769a57", 0xe2}], 0x4, &(0x7f0000000380)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @local={0xfe, 0x80, [], 0xaa}}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}], 0x98, 0x24008805}, 0x80) 2018/06/03 22:49:23 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = socket$packet(0x11, 0x3, 0x300) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={r1, r3, r4}, 0xc) ptrace$setregset(0x4200, r1, 0x0, &(0x7f0000000100)={&(0x7f0000000040)}) 2018/06/03 22:49:23 executing program 6 (fault-call:2 fault-nth:27): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:23 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="0efd1924037161dc2dd8382726e0bdee111d9e26cd5f0cc4ae474b2da4ff310a09d75d3ecd2876bf05ffb121da23c5567d6b1515ef62bb175a07934d647fdc5f3472d56deac3", 0x46}, {&(0x7f0000000980)="083c42f9cb8c7f91a0de57c69a84becdf45ea0ff6e0f68670bbe9eb86102cb38384e9ea5abe53baac687d02aff753cd0581f8363db15b8283c62db14b765d4f48dcfd98f5936f63993061ca1dce9560eb76e7858a0b2c232ce8537863151cf642ffd4c18d354f272e226b88a229fae15427c96a440ad5174832478b73797", 0x7e}, {&(0x7f0000000a00)="c0465bd117dd9a0b8b2862be525e3ef1d4c48d88904771ad27c0deb070d9d992ee57377e5e12989f049e5ff741c648ec04b99deed2ee4208665b1a541c5dd651da7eccfb3ba1c06038b3bbc81f3c894a071f3b63529936ff5696660e535d80af1bc36b904bfd37c740e9c40d8451b75d4d706d1d902b58580bade0917dda99e1988697", 0x83}], 0x3, &(0x7f0000000ac0)=[{0xf8, 0x3a, 0x9, "d7345607e80a73a1f80831dbf147fced6134c9278166ef9678a7b0e30a8619955250e4541f954b446a0e94d541c11aab2bfc6ebfd40379cccd0bc3a6a0320349af3bb6904e1c180d9a21adae999c0ba323c5e26b52e7832bce67817b2a2babd39405ec7ecb72ada788ba5139c57ac8ab67cdbc95c4cc7ff53a2d5101199b7bdab78c94d77e40b97b9f581770562996cc22f59c3ce3efcffb0e1d77145c021e701bf6b3e808dfa2d9225c28e6b59e63a139221947a9118d6858721eb4ab167ea5398d6653f4f6677fb29394c323ed427e7694a9bfe4145cd5c8eb0e8ec6457fa7ca41028d8870"}, {0x18, 0x0, 0x1, "56444c36a510b10a"}, {0x110, 0x0, 0x3, "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"}, {0xa8, 0xff, 0xa6, "e39f4cde01da024bf88cbe4c5f196b8958dcde29d502f9c27791a71acb2448f181a82030e69f8bde551b27b8cdd3e7a6a0249de8e16b421ca62966eda2c7bcb305251068a6965a3b680bbdb75b0d9ad9008ec4960d35cf448272cc991fbf6002fdbba19fd016f14b712182fd3a3fa5e959576e9344bd30a64d2180c7ef2273206ebbc2f7e72483e37f701b02ea7fc043716cb043"}], 0x2c8, 0x4000000}, 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:23 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000780)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0xfffffffffffffe8e) r4 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x8da, 0x80) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x10000040, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e21, 0x33e, @loopback={0x0, 0x1}, 0x10000}}, 0x9fa, 0xfffffffffffffffa, 0x0, 0x0, 0x80}, 0x98) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000440), &(0x7f0000000600)=0x4) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)=""/96) syz_open_procfs(r8, &(0x7f00000003c0)='net/snmp6\x00') recvmmsg(r5, &(0x7f0000000900)=[{{&(0x7f0000000280)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/255, 0xff}], 0x1}}, {{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x2, 0x0, &(0x7f0000001380)={0x77359400}) [ 234.799595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 234.806864] R13: 00000000000004d1 R14: 00000000006fc438 R15: 000000000000001a 2018/06/03 22:49:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d088cdd5c859e87548b173ee03d60bd3ee2c37b0efd0b568ec6ad6741d34683ed9a28ac586db3acfbccd006e48216f53ac4fdda6aebb6eab8f2307f347b5312b0d8614f8099ed3e066603b16fbd9ca50bd4a48b67f2e8b2e5778463b9394405eaaf6792235c2fe483e08ed3a6a2ed0b284689fd5bfe22244b330"]) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="ee67727eb44dadf904bc948611c1d88799f6a496c0a29913233e16013d9eb25c3e08f2f53beecbf406eb736e41b52d1a72834dddf0e50aba616ff2c7a2e169cf516d049a9088a896eb9479eaf9d14572a901d83f9affab0f5d8a1900db18f7b98d4f905900d48919126d1ca35935347bd4d026987879f09cb519b295c506d5a83b04c42233353cd1b114097d245ea7cb1ec7d4d8291a9c65499a6b84e62a216baae9", 0xa2}], 0x1, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404d062bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/03 22:49:23 executing program 5: r0 = socket$inet6(0xa, 0xa, 0xf1) ioctl(r0, 0x8912, &(0x7f0000000100)="0004002f07982c99240970b9e3ad8296fdfccb") r1 = socket(0x4, 0x1, 0x101) sendmsg$kcm(r1, &(0x7f0000001040)={&(0x7f00000005c0)=@nfc={0x27, 0x1, 0x2, 0x1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000640)="f5589f0cb1e7295d6d488fe5fe5f9047d6b35ef7bb154b2bcfbe2c2d96b074414a43103f4551422b3291ffb20ca0387090cc9eefff92c33bf327f5aeac8c19a28ccfac82", 0x44}, {&(0x7f00000006c0)="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", 0xfb}, {&(0x7f00000007c0)="9fda2fca6a01001d9a379968d15577cc3ed3e49dafd18086ae09447c1824bfdb2ffe7f0a22f6802dfab0fa114a617ac8cdae6b758cfcb041978ddeb73333474573f2175e072dc0c727c3f01d9314938cea", 0x51}, {&(0x7f0000000840)="86d04dff8f37372c78bd77516a829dc587fa365bb10d022ac36e4f1643dcd049062b7587da27613b0c554cd1df1fece53ea1e4f891c39e07a3bd1402ae376923e601c53c5b1f372e86d931684091ecc6fccac7ca5b427ca35572ff68b278118f5948bc2bb1f37750c2c2bf3a1b606f1f82e82444db673417340eca5c520e57e19dafac9b75b390cebba1711071bd74438a6bf953178f09fafc7a09da1e0b525a6d091f4265f2f07cb2745c59816df4d2bdbce562bc", 0xb5}, {&(0x7f0000000900)="b032147e098a8e2fadaab489ff1321ab77dd5e29f4837d", 0x17}, {&(0x7f0000000940)="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", 0xfc}, {&(0x7f0000000a40)="2853e3c5f517fd9bba3452ccf44e0d6e0b48f75d1282e3dd2b624d9d7b1efe741cb61c13acc17c7492ae26f041073a8d681df81ef6425d8960bfbca66751711174d02154534cbea60d1daee9212fffe9008290e16dfebecd2ae5d794834a8d5c07c0f97e21d5b544616a9d6e08fe670b14d951d421477079b0268fef487f201cd2f221eddbdb516765f18fe8e3b2196794328dd98b377a649e19aaca7897660b6aaaec910f084c1559b6019985cd696338c6cd2b5b691c8f3ee0f66ce064c17940990a4f66a3d18fe3a16feda6a069dda6", 0xd1}], 0x7, &(0x7f0000000bc0)=[{0x88, 0x19f, 0x6, "541940bfabb3bbd494e22551d825c52bd61b3c873368206c71897c254eef850ddd4099dad055d5066d99c8ea1870b2c6028f606acb8d6a76d6c4dd650b82b195b3f1b02912ecd828dc5678992a50cf8ac03c5512b46cf045238349c3742e6026d9de80b3b3753993d33ab0f1dfa1be1f84aa53666e691e"}, {0x58, 0x11, 0x7, "8d8842d384cc67b637a4183ae2d2a6b29adaa2cf9a60699dc52ce0c20d86fcab816fd18495a740ff6e8fc07ec426d2264450114a4f0644f89cf3a9f9cefe48a52005"}, {0xf8, 0x10b, 0xabc3, "f24b944ca270a66966443732e376cd271038d304483b8aebfae22f180a1f5593ffb41e790918a68bb7f1951c727f149932d15b2081addba4041b4fb6f8ba3e39122bab5854ed9e4605431e6eb83f98c87b0064106a8a0708407cf62b0980a958f07aef4e8ab7ce07afaa5fca3d6c7821cbdee3aae0ed38d60a98aa4d3857860d040b185ae841900ebbe57bb68cd0fcde2e9b967c45e15f1cba872d70c928ff247b7bd847a17185d408ff6b43c8c308f4a2e57ac25002289e70b87026eb13b86ede9f9f0a25b1af2eb454b2c216aefe89c2c5469c1f442c0f908d07331a5075a3f4"}, {0xf8, 0x85, 0x5, "329039f7f37a979ccff05d23f3e1bd22a9e2ce81d8868e04a71c46c8fba36164b63225ddda716d6a01e7d11107d54c359aee8ba779e5591a74c2ebb17be92aae3826f247b5ed8ff9cb707d971ba0d44836d91447270c5d929be64cf44fce93e71c0324e926a33ab3a5694754479fc9ebd71b785f95a65cce2cf9c9e8ffac5c5aed82c0436340e19320199b70779d50ff331b12bed4a9331fe5989e2cf9dc23c068800ffe611e4bd7059bfd65a29d0acc8fb19527b449d81eb0ad02cc8e440353bfb8ae0d01bb15b217f7478c41a2c8555b3875cef73245e58dde6c9f743595d532"}, {0x28, 0x10a, 0x4, "89d70b0bcc4ced667d8949fe1a58508c3571"}, {0x60, 0x117, 0x1, "2b65a3488a3b3656c7c1d44f587c9ecefe0a390e489fccbf62d0cfc8110f60c961887483fd009fbb9b4689d8d877b5133c0462506fd633b60f4220eb3728e8b6deb01b02eb1f0baaa973"}, {0x10, 0x118, 0xfd}, {0x78, 0x113, 0x1, "2cf5acaf7f095bd268f7690539e51735bbf0dd244cd3ae987ed2ac61a543899769aaa40ab7e4c4cb2ec5677a4316c0f882b9eaabc6a553620cbac37f48b544902fc9b5ccc03ca24748931b7aa7ba21290d779fc5a3e103a9c00bc30c27791028195943a9b8b642"}, {0x98, 0x10c, 0x4, "f10a9f6ae6fff736a06c05c2d35a41addbdd26d2c6b577371e83ce2db97bc9593a29380aad2144bc87c1581ce945ac24df7b603ab0a9eff960849ff3a76d2b175519ec9deb785189a77a1e8bc9c9f13df6611f0033d77f010ff3ab76893ea7b0ae6bef1238a23851b262d14a45129a9dbe5133813172e1fcde66d05fb8c3e001a09ae5eda783ff"}], 0x478, 0x40000}, 0x400d0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)="69726c046e41a0003006000000ff00") r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x80001) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x1, 0x1, {0xa, 0x4e22, 0x2, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="2080b2945d7347d341c794e5b30f5ff3f791e11fcbb64aee9a2720cf84179e1e8aaa32c67eb4461e4b8a337b94d5cc8346fc059b1d707b6f4aebca162928a54edae47d920add91532c4ed54ee735d9a44c6eda255f9ae2a1245a6ee57d1dcb96415dcbf1ec15f7898525ccf3a0593aa4fbaf175a91c797f14a84b8ee4836fcd3bcf2f979a01bfb00efb560eeb17cc9b13f9121665787a851ccb1fef41064d9d9fd6297c9f33b119279153f9380c2371608d680ea", 0xb4}, {&(0x7f0000000280)="f812dfdcb494d18d9ffb773bcde27b20102c7a75c294f0b03332fea31cbbd61f3cc69e91ef6a1dac1fcc31ffbf736b4e12197f51bb54151aa4cacadab68ee64bb17739050e6bb75719a0ec22b555d907cbdf19cd20724b578a227c8391ce5ac8f8d4f8c7173afbfc844b919044ceda2544f9906ca56c10891f92ea9c9d7d29ff084da2c957ab00948099639c6b2c75d75429dd696c77412c53a9955c0563a16124b8e29390b5", 0xa6}, {&(0x7f0000000340)="b870a1483a374d80ab3f135862589a95c8b8e1d3bd36933499caad9d7a376ac59f27c93466a2027510fdef2feccf6203d43252045617634f77d7c06a6fdd7d04b2bc7581ad25b8aee73a807a6c0e60e743c071a8b92caf0f87420dff66b206ad991bbaf661cd109c76a5f864d995248b441a8128a523b9b6efad71aaf1ea906568fc0071210b6467ba33", 0x8a}], 0x3, &(0x7f0000000400)=[{0xe8, 0x104, 0x1000, "493383a4e2941290951af8035ddc5d9363a0576fff7594799aaa9fcb79dddb39d1bd9a42f291a6f323ca529d1cc6c95b863c02222c9837528d739c35b89314acc45b1c92627405e7bde78f8501eb2f38a6c50df6a589eddcb7b2eafc925055a1687618deec44ef4b91e1732a47f163d6e934667f767844c5f87eaf01836706ee986e45673328e77039b45262149a3cead953e455e1190e0c3648e623ced083127ee45ae9b94616f80752af16d09761f5f5a2a42595b9571257a8fe2b50a60dbf9a4f0c94ee5fea2b2b7e841d3d9aa542a7980c68d9"}, {0x60, 0x113, 0x9, "f395a88ec129b15321cc215f010d7aa1453fb5b7de63d298a2665a17a88e22d778930cb887e5d2c8e60a0271aa86ce4a3c64e6dcac99e47615d4c7ac22ce83489a048c767f3324934622189622db995b"}], 0x148, 0x20000000}, 0x24048001) write$binfmt_elf64(r2, &(0x7f0000002040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x178) ioctl$int_in(r0, 0x5473, &(0x7f0000000080)=0x4ab2) 2018/06/03 22:49:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000340)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, {0xa, 0x4e21, 0xffffffff, @local={0xfe, 0x80, [], 0xaa}, 0x6fc}, 0x5, [0x5, 0x7fff, 0x8, 0x1000, 0x54d, 0x7, 0x66, 0x39ff]}, 0x5c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x7}, &(0x7f00000002c0)=0x8) open_by_handle_at(r4, &(0x7f00000001c0)={0x10, 0x100000000, "994fc9e964df29b3"}, 0x400000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='#']}) close(r3) close(r2) 2018/06/03 22:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x61, &(0x7f0000000040)=[@cr4={0x1, 0x10100}], 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000000000000a0000007b0000000004000001000080070000000000000019000080030000000300000000010000000000000000000001000000ba0500001f00000023"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/03 22:49:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x67fd) read(0xffffffffffffffff, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x80, 0x80032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffffffffffd}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 2018/06/03 22:49:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x800, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1000000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x7, 0x0, 0x0, 0x81, 0xffffffffffffff7f}, 0x4}, 0xe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast1=0xe0000001}], 0x10) 2018/06/03 22:49:24 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x100003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'eql\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 2018/06/03 22:49:24 executing program 3: unshare(0xa040100) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0\x00', 0xa201}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000001000004500001c000000000033907800000000e000000100009078e0000001cd62b9bd9c84118eb717cb45d0cdeb718437b4e3698c02ce0ccdab56934bf0fd51793c69db71fab6cae90a10fc71165f2f14641b8e637c4244d8731726b62d0babe423346a70663bc9fff896df86c02a27f8e4e1e58d17e915e78b02c84d3dd41f23f540734e3a9c76387db70b6ecdd154cb5a2f5cc72a0df845be1f25c7fc62ddf3d977d15e4d8049e8e7b4"], 0x26) r2 = getuid() syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x200000) setuid(r2) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/06/03 22:49:24 executing program 6 (fault-call:2 fault-nth:28): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:24 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xee, "49a5f59aad315ea82cf53fb39fa0153b94d81639172b9d7b5d50f9727406606184e3f682a6b83c4e98e0d187e608c98cb971c8561847897be42f3430f47bf8635aa6fbb1ccd158b11f39576c376a6b5db29bd973814341b93c355470b2e6c640b75875be7adf2d2870416875893470e3d944d1c1372518b4b2815988f487fb5c405a5eb1215c705ce0556d5606fed03129454ce035531e17c339b65a05a91042c91271cd24ec4c8981059c0dd3ff6d7390589ae512478ab79b7295f7b156d59c69707cb1fbd149d80fcf83d9bd560879a1a59b6bc8b14e41d8f2a6067ef4fa1e38654d963c35adcc718c968b53fa"}, &(0x7f0000000140)=0xf6) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}}, 0x84) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000740)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) [ 235.247343] device bridge_slave_1 left promiscuous mode [ 235.253934] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/03 22:49:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="66baa100b0b1eec74424002e130000c74424020e000000c7442406000000000f01142466baf80cb8fae98787ef66bafc0c66ed0fbf75b1c4e2752fabc4ba0029c4c2d9a771050f00d4660f38828900280000b9800000c00f3235001000000f30b9880400000f32", 0x67}], 0x1, 0xfffffffffffffffd, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000e5b6fa40f5319dc9f64704ff33ccad9c2b16c088a226f1c4f55dda83e5b46c9bed4cbc6ef1841e66f66860adf6ddfe8e6c8accad877b855b285ec0f43655f09d938fdc51edc2659b19b58c70da2faf"]) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x70005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/03 22:49:24 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x1}, &(0x7f0000000180)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xa4f8) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000100008000000000000017860b0f3dc49ecb1e8c4f27e32a68a01f7fda1649d91c1f6e90bb51faec29775d"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 235.332538] device bridge_slave_0 left promiscuous mode [ 235.338300] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.487674] team0 (unregistering): Port device team_slave_1 removed [ 235.509856] team0 (unregistering): Port device team_slave_0 removed [ 235.539951] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 235.550125] IPVS: ftp: loaded support on port[0] = 21 [ 235.567687] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 235.628389] bond0 (unregistering): Released all slaves [ 236.401006] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.407516] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.415191] device bridge_slave_0 entered promiscuous mode [ 236.455577] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.462061] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.469600] device bridge_slave_1 entered promiscuous mode [ 236.508895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.548916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 236.667158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.709686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.873389] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.880811] team0: Port device team_slave_0 added [ 236.918389] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.925936] team0: Port device team_slave_1 added [ 236.958710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.987299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.014620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.021795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.030342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.051805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.058937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.067556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.312804] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.319213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.325889] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.332278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.339725] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.047148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.251268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.338223] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.424584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.430860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.437984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.518678] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.033876] FAT-fs (loop6): bogus number of reserved sectors [ 239.040060] FAT-fs (loop6): Can't find a valid FAT filesystem [ 239.055952] FAULT_INJECTION: forcing a failure. [ 239.055952] name failslab, interval 1, probability 0, space 0, times 0 [ 239.067328] CPU: 1 PID: 17582 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 239.074608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.083962] Call Trace: [ 239.086564] dump_stack+0x1b9/0x294 [ 239.090195] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.095389] ? __save_stack_trace+0x7e/0xd0 [ 239.099718] should_fail.cold.4+0xa/0x1a [ 239.103782] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.108903] ? save_stack+0x43/0xd0 [ 239.112557] ? kasan_kmalloc+0xc4/0xe0 [ 239.116468] ? kmem_cache_alloc_trace+0x152/0x780 [ 239.121327] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 239.126531] ? __list_lru_init+0x456/0x790 [ 239.130781] ? sget_userns+0x767/0xf00 [ 239.134675] ? graph_lock+0x170/0x170 [ 239.138509] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 239.143288] ? do_mount+0x564/0x3070 [ 239.147009] ? ksys_mount+0x12d/0x140 [ 239.150833] ? __x64_sys_mount+0xbe/0x150 [ 239.154981] ? do_syscall_64+0x1b1/0x800 [ 239.159053] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.164430] ? find_held_lock+0x36/0x1c0 [ 239.168510] ? __lock_is_held+0xb5/0x140 [ 239.172570] ? radeon_card_posted+0x140/0x910 [ 239.177077] ? check_same_owner+0x320/0x320 [ 239.181411] ? rcu_note_context_switch+0x710/0x710 [ 239.186356] __should_failslab+0x124/0x180 [ 239.190593] should_failslab+0x9/0x14 [ 239.194392] kmem_cache_alloc_trace+0x2cb/0x780 [ 239.199088] ? __kmalloc_node+0x33/0x70 [ 239.203077] ? __kmalloc_node+0x33/0x70 [ 239.207069] ? rcu_read_lock_sched_held+0x108/0x120 [ 239.212092] __memcg_init_list_lru_node+0x17d/0x2c0 [ 239.217102] ? kvfree_rcu+0x20/0x20 [ 239.220722] ? __kmalloc_node+0x47/0x70 [ 239.224705] __list_lru_init+0x456/0x790 [ 239.228768] ? list_lru_destroy+0x4c0/0x4c0 [ 239.233082] ? mark_held_locks+0xc9/0x160 [ 239.237240] ? __raw_spin_lock_init+0x1c/0x100 [ 239.241829] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 239.246844] ? lockdep_init_map+0x9/0x10 [ 239.250921] sget_userns+0x767/0xf00 [ 239.254659] ? get_anon_bdev+0x2f0/0x2f0 [ 239.258727] ? test_bdev_super+0x50/0x50 [ 239.262791] ? destroy_unused_super.part.11+0x110/0x110 [ 239.268149] ? alloc_vfsmnt+0x771/0x9d0 [ 239.272117] ? mnt_free_id.isra.27+0x60/0x60 [ 239.276531] ? kasan_check_read+0x11/0x20 [ 239.280682] ? graph_lock+0x170/0x170 [ 239.284483] ? cap_capable+0x1f9/0x260 [ 239.288375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.293908] ? security_capable+0x99/0xc0 [ 239.298058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.303602] ? ns_capable_common+0x13f/0x170 [ 239.308013] ? get_anon_bdev+0x2f0/0x2f0 [ 239.312073] sget+0x10b/0x150 [ 239.315192] ? test_bdev_super+0x50/0x50 [ 239.319265] ? fuse_ctl_add_conn+0x280/0x280 [ 239.323691] mount_single+0x3a/0x170 [ 239.327418] fuse_ctl_mount+0x2c/0x40 [ 239.331234] mount_fs+0xae/0x328 [ 239.334600] ? mpi_free.cold.1+0x19/0x19 [ 239.338667] vfs_kern_mount.part.34+0xd4/0x4d0 [ 239.343262] ? may_umount+0xb0/0xb0 [ 239.346880] ? _raw_read_unlock+0x22/0x30 [ 239.351023] ? __get_fs_type+0x97/0xc0 [ 239.354914] do_mount+0x564/0x3070 [ 239.358446] ? lock_downgrade+0x8e0/0x8e0 [ 239.362588] ? copy_mount_string+0x40/0x40 [ 239.366831] ? check_same_owner+0x320/0x320 [ 239.371148] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 239.376164] ? __check_object_size+0x95/0x5d9 [ 239.380656] ? __might_sleep+0x95/0x190 [ 239.384630] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.390161] ? _copy_from_user+0xdf/0x150 [ 239.394336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.399872] ? copy_mount_options+0x285/0x380 [ 239.404379] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.409914] ksys_mount+0x12d/0x140 [ 239.413539] __x64_sys_mount+0xbe/0x150 [ 239.417505] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 239.422521] do_syscall_64+0x1b1/0x800 [ 239.426408] ? finish_task_switch+0x1ca/0x840 [ 239.430909] ? syscall_return_slowpath+0x5c0/0x5c0 [ 239.435843] ? syscall_return_slowpath+0x30f/0x5c0 [ 239.440773] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 239.446140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.450982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.456165] RIP: 0033:0x455a09 [ 239.459341] RSP: 002b:00007f10c09b6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.467046] RAX: ffffffffffffffda RBX: 00007f10c09b76d4 RCX: 0000000000455a09 [ 239.474326] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 2018/06/03 22:49:28 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x80) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0x18}, 0x80000000}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0x1, 0x2, 0x1, 0x100, 0x5, 0x8}) ioctl$sock_ifreq(r1, 0x8000, &(0x7f0000000040)={"74756e6c3000000000000000000200", @ifru_hwaddr}) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x400000000000009}, 0x1c) getsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) 2018/06/03 22:49:28 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) fremovexattr(r0, &(0x7f0000000e00)=@random={'osx.', 'bridge_slave_0\x00'}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}, 0x1, 0x0, 0x0, 0x6c}, &(0x7f0000000100)=0x98) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) move_pages(r0, 0x4, &(0x7f00000001c0)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000eff000/0x4000)=nil, &(0x7f0000eea000/0x4000)=nil], &(0x7f0000000200)=[0x6, 0x7, 0x7fff, 0x200, 0x7], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) tkill(r0, 0x1000000000016) 2018/06/03 22:49:28 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="3c73a1b5efa5df5e8f94ac74df69842ab805577694869fa020d5912eeae0fac2be70f2af545bdfec4f3cb8dde7a4112ed40813c3e2c754510ab211f9f5fdfd2c0e3c7c3734fdb44358a1b56ee72c0831e4e477b9f352fdd6570198c02483dbeefe6dd24bb596e525193bd76076017788029c10ae431eff4f38c8ce5b99b817a2bfb6a3a5f4d3", 0x86, 0x3}], 0x0, &(0x7f0000002700)=ANY=[]) 2018/06/03 22:49:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) r1 = socket(0x11, 0xa, 0x1ff) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000140)=""/77, 0x4d) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2}, &(0x7f0000000100)=0xc) 2018/06/03 22:49:28 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80002008}) pipe2(&(0x7f00000000c0), 0x80000) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xf4, 0x5, 0xc0, &(0x7f0000ffd000/0x3000)=nil, 0x200}) pread64(r1, &(0x7f00009f3000), 0x13, 0x0) 2018/06/03 22:49:28 executing program 6 (fault-call:2 fault-nth:29): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000340)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, {0xa, 0x4e21, 0xffffffff, @local={0xfe, 0x80, [], 0xaa}, 0x6fc}, 0x5, [0x5, 0x7fff, 0x8, 0x1000, 0x54d, 0x7, 0x66, 0x39ff]}, 0x5c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x7}, &(0x7f00000002c0)=0x8) open_by_handle_at(r4, &(0x7f00000001c0)={0x10, 0x100000000, "994fc9e964df29b3"}, 0x400000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='#']}) close(r3) close(r2) [ 239.481584] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 239.488845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 239.496114] R13: 00000000000004d1 R14: 00000000006fc438 R15: 000000000000001c [ 239.553740] sctp: [Deprecated]: syz-executor3 (pid 17596) Use of int in maxseg socket option. [ 239.553740] Use struct sctp_assoc_value instead [ 239.587535] ISOFS: Unable to identify CD-ROM format. 2018/06/03 22:49:28 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30, 0x40, 0x7f}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) r2 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x89fb, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="fdf14000000000000000000000000000000000001e"]}) 2018/06/03 22:49:28 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7f, 0x4c0) accept4$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000240)=0x60, 0x80000) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) read(r2, &(0x7f0000000180)=""/181, 0xb5) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) listen(r0, 0xb6a) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) [ 239.639259] sctp: [Deprecated]: syz-executor3 (pid 17606) Use of int in maxseg socket option. [ 239.639259] Use struct sctp_assoc_value instead [ 239.730202] ISOFS: Unable to identify CD-ROM format. 2018/06/03 22:49:28 executing program 3: r0 = socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, 0x7b, r1}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000100)=0x4, 0x4) 2018/06/03 22:49:28 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040), &(0x7f00000001c0)=0x4) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10d9558a3c8e193b0000000000918982bd8704080000000000000000"], 0x10}}], 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xa8000, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000240)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000280)) 2018/06/03 22:49:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00000001c0)=""/228, &(0x7f00000000c0)=0xe4) recvfrom$ax25(r0, &(0x7f0000000000)=""/58, 0x3a, 0x40, &(0x7f0000000040)={0x3, {"5d878516d1ab60"}, 0x4}, 0x10) sendto(r0, &(0x7f0000000340)="1f0e88220e1e786128f23d21376ce4b40c5aa1a654a4f698542ff15e58b9834e4a1ee8d51a215eb496c783fb1239f8e7775993095de1eb5f44d6d2b60cbc84ed8b617984c239134f40a7e4c57fc4bca50a87ac69403c60f1cb7218e3dbae5a6057bfa9b242459b01a9aeb4b4e40a6a386512df9504", 0x75, 0x4000010, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x0, 0x1, 0x1, 0x2}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@ipv6_delroute={0x30, 0x19, 0x701, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}]}, 0x30}, 0x1}, 0x0) getsockname(r0, &(0x7f00000002c0)=@can, &(0x7f0000000140)=0x80) 2018/06/03 22:49:28 executing program 6 (fault-call:2 fault-nth:30): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) [ 239.869644] device bridge_slave_1 left promiscuous mode [ 239.875638] bridge0: port 2(bridge_slave_1) entered disabled state 2018/06/03 22:49:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01080000000000000000020000000800030000000000dfadc24ddcf883ff9022bf04bc7786447100303e04b4d3fea3c4fe080b87b4f3ad36d3195dd35350c5cbda03e3d2668ac8f8cb9d9bf9"], 0x1c}, 0x1}, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000280)={{0x5ba9ac96, 0x3, 0x1, 0x8}}) [ 239.925140] device bridge_slave_0 left promiscuous mode [ 239.930918] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.965112] netlink: 'syz-executor7': attribute type 3 has an invalid length. 2018/06/03 22:49:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0xfffffffffffffffc) truncate(&(0x7f00000000c0)="2e2f66696c65302f662e6c6530f000", 0xa) unlink(&(0x7f0000000080)='/\x00') [ 239.977346] netlink: 'syz-executor7': attribute type 3 has an invalid length. [ 240.011800] IPVS: ftp: loaded support on port[0] = 21 [ 240.050523] team0 (unregistering): Port device team_slave_1 removed [ 240.066080] team0 (unregistering): Port device team_slave_0 removed 2018/06/03 22:49:29 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) lgetxattr(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)=@known='security.capability\x00', &(0x7f0000001340)=""/38, 0x26) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001400)={0x0, 0x8947, 0x7, 0x1, 0x4, 0x100000000, 0x7, 0x34d, {0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0x9, 0x7, 0x9, 0x7}}, &(0x7f00000014c0)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001500)={r1, 0x7c, "5273ea956e846247ecc28a06e1f87385f170da75da8ccf4f26ad432770bc8e529d8b2fa8b5a592700112bb97c0a8be2bb42a5d981632a06055eca4035d0f9cad1a4c994f4e405bf5502cbbdfb0798d01d79eba3a1b07469f087b95ef9a8bce09299a295c126b0e642e199b9cf3e2cd9804dccd80653ee0595329f4f1"}, &(0x7f00000015c0)=0x84) fcntl$addseals(r0, 0x409, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) [ 240.091402] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 240.119650] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 240.192822] bond0 (unregistering): Released all slaves 2018/06/03 22:49:29 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0], 0x1}, 0x3d6) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:29 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffe, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 2018/06/03 22:49:29 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) syz_mount_image$cifs(&(0x7f00000000c0)='cifs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0xa840, &(0x7f0000000500)='\x00') fchmod(r3, 0x0) dup2(r1, r2) 2018/06/03 22:49:29 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="00476625153f0abcdcbe67737e5735d9feb4fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x312, 0x1, 0x7, 0x48, 0x1000, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048ae65, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @broadcast=0xffffffff}, {0x7, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x30, {0x2, 0x4e22, @loopback=0x7f000001}, 'team_slave_1\x00'}) 2018/06/03 22:49:29 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x2) ioctl(r0, 0x8912, &(0x7f0000000040)="1bd45006000000d1240970") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000200)="7b162d1068a1afca308756eff9b24e1c127d2f8b8c1123eced40af5812523c3ac75e89c1d53666a0c582a30767e991994c3808db6335fbd1405f726687070ce16be9de54f7343c22bbb5a71cfde7c778ec985dd3868429625419cb203581aac0dc1faa392a2ad8977546094a16da10991ec9d2027c829cc3414f42298982282b39fd2ceda5b6d94123619729762f146ef96e9e4933e37ac35d428a18", 0x9c) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000040)=""/201, &(0x7f00000001c0)=0xc9) [ 241.275262] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.281725] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.299306] device bridge_slave_0 entered promiscuous mode [ 241.337999] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.344590] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.351966] device bridge_slave_1 entered promiscuous mode [ 241.390640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 241.429482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.543805] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.586973] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.786916] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.794377] team0: Port device team_slave_0 added [ 241.827868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.835877] team0: Port device team_slave_1 added [ 241.874277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.917444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.947758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.954968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.970872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.005193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.012655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.021360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.273295] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.279727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.286404] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.292833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.300317] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.719171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.193143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.278664] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.362822] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.369121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.376302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.457641] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.965297] FAT-fs (loop6): bogus number of reserved sectors [ 243.971254] FAT-fs (loop6): Can't find a valid FAT filesystem [ 243.987548] FAULT_INJECTION: forcing a failure. [ 243.987548] name failslab, interval 1, probability 0, space 0, times 0 [ 243.998914] CPU: 1 PID: 17946 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 244.006203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.015593] Call Trace: [ 244.018186] dump_stack+0x1b9/0x294 [ 244.021829] ? dump_stack_print_info.cold.2+0x52/0x52 [ 244.027020] ? __save_stack_trace+0x7e/0xd0 [ 244.031360] should_fail.cold.4+0xa/0x1a [ 244.035424] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.040525] ? save_stack+0x43/0xd0 [ 244.044148] ? kasan_kmalloc+0xc4/0xe0 [ 244.048044] ? kmem_cache_alloc_trace+0x152/0x780 [ 244.052897] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 244.058095] ? __list_lru_init+0x456/0x790 [ 244.062325] ? sget_userns+0x767/0xf00 [ 244.066227] ? graph_lock+0x170/0x170 [ 244.070037] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 244.074795] ? do_mount+0x564/0x3070 [ 244.078503] ? ksys_mount+0x12d/0x140 [ 244.082320] ? __x64_sys_mount+0xbe/0x150 [ 244.086465] ? do_syscall_64+0x1b1/0x800 [ 244.090523] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.095908] ? find_held_lock+0x36/0x1c0 [ 244.099978] ? __lock_is_held+0xb5/0x140 [ 244.104054] ? check_same_owner+0x320/0x320 [ 244.108381] ? rcu_note_context_switch+0x710/0x710 [ 244.113328] __should_failslab+0x124/0x180 [ 244.117602] should_failslab+0x9/0x14 [ 244.121421] kmem_cache_alloc_trace+0x2cb/0x780 [ 244.126114] ? __kmalloc_node+0x33/0x70 [ 244.130106] ? __kmalloc_node+0x33/0x70 [ 244.134076] ? rcu_read_lock_sched_held+0x108/0x120 [ 244.139099] __memcg_init_list_lru_node+0x17d/0x2c0 [ 244.144113] ? kvfree_rcu+0x20/0x20 [ 244.147830] ? __kmalloc_node+0x47/0x70 [ 244.151806] __list_lru_init+0x456/0x790 [ 244.155866] ? list_lru_destroy+0x4c0/0x4c0 [ 244.160185] ? mark_held_locks+0xc9/0x160 [ 244.164328] ? __raw_spin_lock_init+0x1c/0x100 [ 244.168916] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 244.173930] ? lockdep_init_map+0x9/0x10 [ 244.177991] sget_userns+0x767/0xf00 [ 244.181716] ? get_anon_bdev+0x2f0/0x2f0 [ 244.185786] ? test_bdev_super+0x50/0x50 [ 244.189854] ? destroy_unused_super.part.11+0x110/0x110 [ 244.195227] ? alloc_vfsmnt+0x771/0x9d0 [ 244.199197] ? mnt_free_id.isra.27+0x60/0x60 [ 244.203604] ? kasan_check_read+0x11/0x20 [ 244.207747] ? graph_lock+0x170/0x170 [ 244.211543] ? cap_capable+0x1f9/0x260 [ 244.215442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.220981] ? security_capable+0x99/0xc0 [ 244.225128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.230660] ? ns_capable_common+0x13f/0x170 [ 244.235065] ? get_anon_bdev+0x2f0/0x2f0 [ 244.239137] sget+0x10b/0x150 [ 244.242241] ? test_bdev_super+0x50/0x50 [ 244.246300] ? fuse_ctl_add_conn+0x280/0x280 [ 244.250706] mount_single+0x3a/0x170 [ 244.254413] fuse_ctl_mount+0x2c/0x40 [ 244.258224] mount_fs+0xae/0x328 [ 244.261594] ? mpi_free.cold.1+0x19/0x19 [ 244.265659] vfs_kern_mount.part.34+0xd4/0x4d0 [ 244.270253] ? may_umount+0xb0/0xb0 [ 244.273891] ? _raw_read_unlock+0x22/0x30 [ 244.278041] ? __get_fs_type+0x97/0xc0 [ 244.281932] do_mount+0x564/0x3070 [ 244.285469] ? lock_downgrade+0x8e0/0x8e0 [ 244.289615] ? copy_mount_string+0x40/0x40 [ 244.293871] ? check_same_owner+0x320/0x320 [ 244.298200] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 244.303218] ? __check_object_size+0x95/0x5d9 [ 244.307706] ? __might_sleep+0x95/0x190 [ 244.311677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.317204] ? _copy_from_user+0xdf/0x150 [ 244.321354] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.326887] ? copy_mount_options+0x285/0x380 [ 244.331378] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.336923] ksys_mount+0x12d/0x140 [ 244.340549] __x64_sys_mount+0xbe/0x150 [ 244.344518] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 244.349552] do_syscall_64+0x1b1/0x800 [ 244.353437] ? finish_task_switch+0x1ca/0x840 [ 244.357926] ? syscall_return_slowpath+0x5c0/0x5c0 [ 244.362853] ? syscall_return_slowpath+0x30f/0x5c0 [ 244.367777] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 244.373135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.377984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.383191] RIP: 0033:0x455a09 [ 244.386378] RSP: 002b:00007fcc2ca06c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.394114] RAX: ffffffffffffffda RBX: 00007fcc2ca076d4 RCX: 0000000000455a09 [ 244.401415] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 244.408695] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/06/03 22:49:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") r3 = dup2(r2, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x8a3, 0x2, 0xff, 0x6, 0x5, 0x3, 0xff}, 0x20) execveat(r1, &(0x7f0000000040)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 2018/06/03 22:49:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000340)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, {0xa, 0x4e21, 0xffffffff, @local={0xfe, 0x80, [], 0xaa}, 0x6fc}, 0x5, [0x5, 0x7fff, 0x8, 0x1000, 0x54d, 0x7, 0x66, 0x39ff]}, 0x5c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x7}, &(0x7f00000002c0)=0x8) open_by_handle_at(r4, &(0x7f00000001c0)={0x10, 0x100000000, "994fc9e964df29b3"}, 0x400000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='#']}) close(r3) close(r2) 2018/06/03 22:49:33 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x1) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 2018/06/03 22:49:33 executing program 6 (fault-call:2 fault-nth:31): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:33 executing program 7: r0 = socket(0x40000000015, 0x5, 0xfffffffffffffffc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioprio_get$uid(0x1, r1) 2018/06/03 22:49:33 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) ppoll(&(0x7f0000000200)=[{r1}], 0x200001d0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x800, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000140)=""/103) tkill(r2, 0x1000000000016) 2018/06/03 22:49:33 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) [ 244.415966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 244.423236] R13: 00000000000004d1 R14: 00000000006fc438 R15: 000000000000001e 2018/06/03 22:49:33 executing program 7: r0 = socket(0x10, 0x803, 0x1) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000180)=""/90, &(0x7f0000000240)=0x5a) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x0, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) recvfrom$llc(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="e3f102cc0109"}, 0x10) 2018/06/03 22:49:33 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, 0x28) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x271b, 0x1e, 0xffffffff, 0x8, 0x0, 0x5, 0x80, 0x8, 0x3, 0x9, 0x3f, 0x8001, 0x9, 0x6, 0x7, 0x1, 0x2f3, 0x5b2b, 0x3ff, 0x6, 0x9, 0xb3, 0xd971, 0x3, 0x0, 0x8, 0x2, 0x9, 0x9, 0x0, 0x80, 0x0, 0xfffffffffffffffe, 0x9, 0x7, 0x4, 0x0, 0x10000, 0x2, @perf_config_ext={0x4, 0x3ff}, 0x0, 0xdf, 0xaa3, 0x0, 0x9, 0x7ff, 0x6}, r3, 0x9, r0, 0x2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) 2018/06/03 22:49:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) r2 = gettid() r3 = syz_open_dev$mouse(&(0x7f0000001880)='/dev/input/mouse#\x00', 0x900000000000000, 0x14000) sendmsg$nl_generic(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x41, 0x1, 0x70bd2a, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 2018/06/03 22:49:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='mime_typeGPL\'/GPLbdevwlan0\\\x00', 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000020160001000000000011af21bf514acbee1df5e65a6bb5d85098054417f135528ba17749000017f9e21cb1a7be66d05de30d8811ac8c5d1746dd6e8cacb08c00b4f875d825d49a6ada22c20803fbf171e951390cd25c850cda4c4fc74ce8f3c40acc251d617873d1c9000000002c8b444943bb401c1f185aa7a5f885b0352ce1e64da93c52849511d91c33d0f8e833d38a701a23e32a2582b7f7c5f123a1ce761064519a68b14ca085759facf79b4548a978f57a45a830613277badd6e8e00f7b4b668ffff800000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}, 0x1}, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$setownex(r1, 0xf, &(0x7f00000002c0)={0x2, r2}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000340)=[{{}, 0x4, 0x2, 0x4cb83d3b}, {{r3, r4/1000+10000}, 0x2, 0x1f, 0xfff}, {{0x0, 0x2710}, 0xc164, 0x10000, 0xfffffffffffffffc}, {{0x0, 0x2710}, 0xec9, 0x0, 0x5}, {{0x0, 0x2710}, 0x2, 0x0, 0x5e8d}, {{0x0, 0x2710}, 0x8, 0x0, 0x7fffffff}], 0x90) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x4c) 2018/06/03 22:49:33 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$inet6(0xa, 0x800, 0x2, &(0x7f0000000100)={0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r1, 0x220}, {r0, 0x4000}, {r0, 0x2}, {r0, 0x100}, {r0, 0x10}, {r0, 0x1}, {r0}], 0x7, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000000340)) 2018/06/03 22:49:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/03 22:49:33 executing program 6 (fault-call:2 fault-nth:32): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:33 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) [ 244.779244] device bridge_slave_1 left promiscuous mode [ 244.784950] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.819455] device bridge_slave_0 left promiscuous mode [ 244.825198] bridge0: port 1(bridge_slave_0) entered disabled state 2018/06/03 22:49:33 executing program 7: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x105000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x40, 0x600) r1 = accept(r0, &(0x7f0000000280)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f0000000240)=0xfffffffffffffeff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8031, r1, 0x0) remap_file_pages(&(0x7f00003df000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffeffffe) [ 244.930422] team0 (unregistering): Port device team_slave_1 removed [ 244.949804] team0 (unregistering): Port device team_slave_0 removed [ 244.961407] mmap: syz-executor7 (18009) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 244.982654] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 245.005265] IPVS: ftp: loaded support on port[0] = 21 [ 245.010990] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 245.052561] bond0 (unregistering): Released all slaves [ 245.876344] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.882820] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.891755] device bridge_slave_0 entered promiscuous mode [ 245.932445] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.938921] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.946840] device bridge_slave_1 entered promiscuous mode [ 245.986006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.025930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.149604] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.193680] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.375710] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.383971] team0: Port device team_slave_0 added [ 246.412384] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.420824] team0: Port device team_slave_1 added [ 246.460213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.495921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.524543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.551472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 246.558628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.567350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.813145] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.819578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.826266] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.832691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.840159] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.583267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.717928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.804008] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.891421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.897689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.905427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.989410] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.499628] FAT-fs (loop6): bogus number of reserved sectors [ 248.505700] FAT-fs (loop6): Can't find a valid FAT filesystem [ 248.523311] FAULT_INJECTION: forcing a failure. [ 248.523311] name failslab, interval 1, probability 0, space 0, times 0 [ 248.535320] CPU: 1 PID: 18287 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 248.542613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.551977] Call Trace: [ 248.554575] dump_stack+0x1b9/0x294 [ 248.558221] ? dump_stack_print_info.cold.2+0x52/0x52 [ 248.563430] ? lock_downgrade+0x8e0/0x8e0 [ 248.567602] ? graph_lock+0x170/0x170 [ 248.571411] should_fail.cold.4+0xa/0x1a [ 248.575536] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 248.580647] ? print_usage_bug+0xc0/0xc0 [ 248.584717] ? print_usage_bug+0xc0/0xc0 [ 248.588799] ? graph_lock+0x170/0x170 [ 248.592625] ? find_held_lock+0x36/0x1c0 [ 248.596705] ? __lock_is_held+0xb5/0x140 [ 248.600789] ? check_same_owner+0x320/0x320 [ 248.605122] ? lockdep_init_map+0x9/0x10 [ 248.609185] ? rcu_note_context_switch+0x710/0x710 [ 248.614120] ? kasan_check_write+0x14/0x20 [ 248.618362] ? __init_rwsem+0x1c4/0x290 [ 248.622334] __should_failslab+0x124/0x180 [ 248.626575] should_failslab+0x9/0x14 [ 248.630376] __kmalloc+0x2c8/0x760 [ 248.633915] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 248.638936] ? prealloc_shrinker+0xcf/0x130 [ 248.643251] prealloc_shrinker+0xcf/0x130 [ 248.647409] sget_userns+0x9b2/0xf00 [ 248.651121] ? get_anon_bdev+0x2f0/0x2f0 [ 248.655175] ? test_bdev_super+0x50/0x50 [ 248.659249] ? destroy_unused_super.part.11+0x110/0x110 [ 248.664637] ? alloc_vfsmnt+0x771/0x9d0 [ 248.668617] ? mnt_free_id.isra.27+0x60/0x60 [ 248.673037] ? kasan_check_read+0x11/0x20 [ 248.677185] ? graph_lock+0x170/0x170 [ 248.680984] ? cap_capable+0x1f9/0x260 [ 248.684896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.690493] ? security_capable+0x99/0xc0 [ 248.694644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.700177] ? ns_capable_common+0x13f/0x170 [ 248.704750] ? get_anon_bdev+0x2f0/0x2f0 [ 248.708799] sget+0x10b/0x150 [ 248.711897] ? test_bdev_super+0x50/0x50 [ 248.715951] ? fuse_ctl_add_conn+0x280/0x280 [ 248.720356] mount_single+0x3a/0x170 [ 248.724067] fuse_ctl_mount+0x2c/0x40 [ 248.727856] mount_fs+0xae/0x328 [ 248.731211] ? mpi_free.cold.1+0x19/0x19 [ 248.735263] vfs_kern_mount.part.34+0xd4/0x4d0 [ 248.739862] ? may_umount+0xb0/0xb0 [ 248.743497] ? _raw_read_unlock+0x22/0x30 [ 248.747640] ? __get_fs_type+0x97/0xc0 [ 248.751526] do_mount+0x564/0x3070 [ 248.755059] ? lock_downgrade+0x8e0/0x8e0 [ 248.759201] ? copy_mount_string+0x40/0x40 [ 248.763429] ? check_same_owner+0x320/0x320 [ 248.767753] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 248.772784] ? __check_object_size+0x95/0x5d9 [ 248.777291] ? __might_sleep+0x95/0x190 [ 248.781278] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 248.786815] ? _copy_from_user+0xdf/0x150 [ 248.791003] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 248.796578] ? copy_mount_options+0x285/0x380 [ 248.801077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 248.806610] ksys_mount+0x12d/0x140 [ 248.810244] __x64_sys_mount+0xbe/0x150 [ 248.814243] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 248.819274] do_syscall_64+0x1b1/0x800 [ 248.823158] ? finish_task_switch+0x1ca/0x840 [ 248.827658] ? syscall_return_slowpath+0x5c0/0x5c0 [ 248.832588] ? syscall_return_slowpath+0x30f/0x5c0 [ 248.837525] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 248.842899] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/06/03 22:49:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000340)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, {0xa, 0x4e21, 0xffffffff, @local={0xfe, 0x80, [], 0xaa}, 0x6fc}, 0x5, [0x5, 0x7fff, 0x8, 0x1000, 0x54d, 0x7, 0x66, 0x39ff]}, 0x5c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x7}, &(0x7f00000002c0)=0x8) open_by_handle_at(r4, &(0x7f00000001c0)={0x10, 0x100000000, "994fc9e964df29b3"}, 0x400000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='#']}) close(r3) close(r2) 2018/06/03 22:49:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b0130"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x6b}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/06/03 22:49:37 executing program 6 (fault-call:2 fault-nth:33): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:37 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x40082406, &(0x7f0000000040)) close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/06/03 22:49:37 executing program 4: unshare(0x64000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x2800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @random="24d5b62a824b"}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) 2018/06/03 22:49:37 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x800, 0x7, 0x6, 0x80000001, 0xc0, 0x65}) signalfd4(r0, &(0x7f0000000040)={0x627b}, 0x35a, 0x80803) socket$inet_smc(0x2b, 0x1, 0x0) dup2(r0, r1) 2018/06/03 22:49:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="800000000002000019000000e60100006c000000002800000100000001810000000000000040000080000000000008000000be5a0000ffff53eff525c4a1956ef433a3f7e5173897edd930b25f22788ba95e639c53fe52bdee7cbcf80b26037bd1", 0x61, 0x400}], 0x1008008, &(0x7f0000000380)=ANY=[]) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7ff, 0x90000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 2018/06/03 22:49:37 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 248.847753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.852961] RIP: 0033:0x455a09 [ 248.856138] RSP: 002b:00007ff3377b2c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.863853] RAX: ffffffffffffffda RBX: 00007ff3377b36d4 RCX: 0000000000455a09 [ 248.871125] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 248.878386] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 248.885658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 248.892920] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000020 [ 248.949503] IPVS: ftp: loaded support on port[0] = 21 [ 248.957567] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (1) [ 248.966361] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 2018/06/03 22:49:37 executing program 7: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r1, 0x9, 0x80, r2) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0xc7) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000106}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000280)=""/88, &(0x7f0000000200)=0x58) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r6 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='#\x00', 0xfffffffffffffffe) r7 = open(&(0x7f0000000180)='./file0\x00', 0xd2000, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f00000001c0)=0x5, 0x4) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='(\x00', r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x2c, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x12}, @IFLA_MASTER={0x8, 0xa}]}, 0x2c}, 0x1}, 0x0) 2018/06/03 22:49:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) sysfs$1(0x1, &(0x7f0000000000)='cbc-twofish-3way\x00') [ 249.058991] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (1) [ 249.067468] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 2018/06/03 22:49:38 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400800, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000000c0)=""/86) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x33, &(0x7f0000000140)={0x77359400}, 0x10) 2018/06/03 22:49:38 executing program 5: syz_read_part_table(0x0, 0xdde, &(0x7f0000000100)=[{&(0x7f0000000140)="066bb11febd00591848aba31e026ed0e935d80a44268357da85514630f17ff291115da662230118c54d7a17153903273bc9346ec9b6d710a92fe36e16f851fe7cf98ced9159043551ae1be73b4bbf7bd9e7364a8563aac9f6f26e6aa492b9579cae34e62857d61dd474feefa7cff5e5d4a8495cda28dfb4fed17dd92ace7a8369f6e55bda42d966406d902a8a849c312a20c3b83bf03be"}]) 2018/06/03 22:49:38 executing program 6 (fault-call:2 fault-nth:34): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:38 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8080, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xb8, "5d38e3700d607ee24994950a945b442bb7bc44d575029a1b2c5ac1259e18d814d3d8ab6d9f27016bcaaf84579b83a25ad8a5ad251b61506f44cc9f296761b14542521931e0f512d74844c13f7abb113d79f57f164a26c7ba9b9f79d741b68608e2e2e8986e2d1cb051989a038c5018d45fa1abae4a12f05a912c25460b056257143fbc8b53d6d3dcddab9f50c7b9ba3efcbeb19c92d1eff761def7c462ed743fca30c993466ecd6cc46b64ba882586e98c513c09cd95a28d"}, &(0x7f0000000100)=0xc0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x8001}, &(0x7f0000000180)=0x8) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') socket$nl_route(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 2018/06/03 22:49:38 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000003c0)=""/246) close(r1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x24000000, 0xfff, 0x21}) [ 249.370244] device bridge_slave_1 left promiscuous mode [ 249.375921] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.426925] device bridge_slave_0 left promiscuous mode [ 249.432623] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.537988] team0 (unregistering): Port device team_slave_1 removed [ 249.553436] team0 (unregistering): Port device team_slave_0 removed [ 249.557920] IPVS: ftp: loaded support on port[0] = 21 [ 249.565720] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 249.580783] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 249.615759] bond0 (unregistering): Released all slaves [ 250.286144] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.292726] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.300077] device bridge_slave_0 entered promiscuous mode [ 250.339184] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.345626] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.352968] device bridge_slave_1 entered promiscuous mode [ 250.390170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 250.427927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 250.539476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 250.580599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 250.757210] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 250.764628] team0: Port device team_slave_0 added [ 250.801436] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 250.809076] team0: Port device team_slave_1 added [ 250.838194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.879759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.920888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.958561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.261013] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.267483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.274203] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.280620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.288350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.128136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.598717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.686905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 252.774799] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.781104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.788272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.874366] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.374010] FAT-fs (loop6): bogus number of reserved sectors [ 253.380107] FAT-fs (loop6): Can't find a valid FAT filesystem [ 253.396648] FAULT_INJECTION: forcing a failure. [ 253.396648] name failslab, interval 1, probability 0, space 0, times 0 [ 253.408065] CPU: 0 PID: 18617 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 253.415349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.424696] Call Trace: [ 253.427302] dump_stack+0x1b9/0x294 [ 253.430938] ? dump_stack_print_info.cold.2+0x52/0x52 [ 253.436280] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 253.441484] should_fail.cold.4+0xa/0x1a [ 253.445548] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 253.450651] ? __unwind_start+0x166/0x330 [ 253.454803] ? __kernel_text_address+0xd/0x40 [ 253.459297] ? unwind_get_return_address+0x61/0xa0 [ 253.464227] ? graph_lock+0x170/0x170 [ 253.468053] ? mark_held_locks+0xc9/0x160 [ 253.472231] ? find_held_lock+0x36/0x1c0 [ 253.476293] ? __lock_is_held+0xb5/0x140 [ 253.480383] ? check_same_owner+0x320/0x320 [ 253.484717] ? graph_lock+0x170/0x170 [ 253.488542] ? rcu_note_context_switch+0x710/0x710 [ 253.493489] __should_failslab+0x124/0x180 [ 253.497770] should_failslab+0x9/0x14 [ 253.501571] kmem_cache_alloc+0x2af/0x760 [ 253.505721] ? fuse_ctl_add_conn+0x280/0x280 [ 253.510125] __d_alloc+0xc0/0xd30 [ 253.513575] ? shrink_dcache_for_umount+0x290/0x290 [ 253.518755] ? mark_held_locks+0xc9/0x160 [ 253.522899] ? current_kernel_time64+0x242/0x2f0 [ 253.527648] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 253.532662] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 253.537697] ? current_kernel_time64+0x1f4/0x2f0 [ 253.542468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.548002] ? timespec_trunc+0xe7/0x170 [ 253.552080] ? put_itimerspec64+0x310/0x310 [ 253.556458] ? evict_inodes+0x5f0/0x5f0 [ 253.560430] ? fuse_ctl_add_conn+0x280/0x280 [ 253.564829] d_make_root+0x42/0x90 [ 253.568364] simple_fill_super+0x25b/0x600 [ 253.572591] ? get_anon_bdev+0x2f0/0x2f0 [ 253.576646] ? fuse_ctl_add_conn+0x280/0x280 [ 253.581147] fuse_ctl_fill_super+0x27/0x160 [ 253.585484] ? fuse_ctl_add_conn+0x280/0x280 [ 253.589896] mount_single+0xfb/0x170 [ 253.593604] fuse_ctl_mount+0x2c/0x40 [ 253.597425] mount_fs+0xae/0x328 [ 253.600790] ? mpi_free.cold.1+0x19/0x19 [ 253.604849] vfs_kern_mount.part.34+0xd4/0x4d0 [ 253.609420] ? may_umount+0xb0/0xb0 [ 253.613051] ? _raw_read_unlock+0x22/0x30 [ 253.617194] ? __get_fs_type+0x97/0xc0 [ 253.621077] do_mount+0x564/0x3070 [ 253.624610] ? lock_downgrade+0x8e0/0x8e0 [ 253.628752] ? copy_mount_string+0x40/0x40 [ 253.632978] ? check_same_owner+0x320/0x320 [ 253.637303] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 253.642312] ? __check_object_size+0x95/0x5d9 [ 253.646817] ? __might_sleep+0x95/0x190 [ 253.650803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.656533] ? _copy_from_user+0xdf/0x150 [ 253.660686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.666242] ? copy_mount_options+0x285/0x380 [ 253.670756] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.676295] ksys_mount+0x12d/0x140 [ 253.679939] __x64_sys_mount+0xbe/0x150 [ 253.683907] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 253.688947] do_syscall_64+0x1b1/0x800 [ 253.692841] ? finish_task_switch+0x1ca/0x840 [ 253.697332] ? syscall_return_slowpath+0x5c0/0x5c0 [ 253.702255] ? syscall_return_slowpath+0x30f/0x5c0 [ 253.707181] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 253.712543] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.717380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.722576] RIP: 0033:0x455a09 2018/06/03 22:49:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='GPLppp0((\x00', r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 2018/06/03 22:49:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000340)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, {0xa, 0x4e21, 0xffffffff, @local={0xfe, 0x80, [], 0xaa}, 0x6fc}, 0x5, [0x5, 0x7fff, 0x8, 0x1000, 0x54d, 0x7, 0x66, 0x39ff]}, 0x5c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x7}, &(0x7f00000002c0)=0x8) open_by_handle_at(r4, &(0x7f00000001c0)={0x10, 0x100000000, "994fc9e964df29b3"}, 0x400000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='#']}) close(r3) 2018/06/03 22:49:42 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000e80)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/118, 0x76, 0x193cab02}, 0x6df0a7e6}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000002000)=""/25, 0x19}], 0x1, &(0x7f0000002080)=""/165, 0xa5, 0xb4cc}, 0x100000001}, {{&(0x7f0000002140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/178, 0xb2}], 0x3, &(0x7f00000024c0)=""/98, 0x62, 0x8001}, 0x4}], 0x3, 0x2001, &(0x7f0000002600)={0x77359400}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef01005ceb4fd2e515217e010000006e5fbe5a000000003e8b1a0826bb29000000000100000000000000dd13", 0x65, 0x400}], 0x0, &(0x7f0000012e00)) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x28a89e33, 0xa, &(0x7f0000001700)=[{&(0x7f0000000280)="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", 0x1000, 0x38}, {&(0x7f0000001280)="5eb3b7df59aaef9da23d500e68cf9d6da8ae1902647c1284ab26a00407242afc01ec5649d6460e4f9d24cb9b96dd025258ff1beaa131b8d949e9380ba8f79664929f88c1acec9926ec126971bb2f7daf020f25e61bf54f9c5b3a87d92b7f2fc918a648e2e5ffe18ee04d6fbe474cde8e263f78eff727f65e6ee3e147249598384b5388338804225578f522a40545c4fc5b8ae7f2ee6375d0e1", 0x99, 0x2}, {&(0x7f0000001340)="fb3c5cc92f6b64fb664a677add3a6e4746f617f5c5b705c1af07e7ad0189dc1f1576cb3660d19c49453c2030ef722dc43ae84bb5357078caaefd64346620cab7b9bc83c467cdfed23e007e3e6b2c8d28d245490ce96f89ca8d415b928e6c5a7eeab6c6af2be8a2d7a6024ac0bfea951ca976a3baeb762e1c9fce082acd81ad8e8815a9", 0x83, 0x6}, {&(0x7f0000000080)="e31cd48fa6bc3e872496b3864d7b2561ff63fbe103e595e59e858318f34611589bcf", 0x22, 0x3}, {&(0x7f0000001400)="3887623bb71ef3e36fddb01c8987b41e770258f895745eb49705f78633bdf1377aad08cbb3748a95880d86c5d7b87f92cfb69698ce13c15ca508dc87ebd0d17f34110e31338aea0a777ac5d459c57acbc64d73db42816785ae306e3f9419c1f06ae132578f922f86bbc14033f59955624b3542c052ba9b856d08ad4ac4ce393ea4c86d24b7145be4cc43360547fc7ff3b98fffbfc771b9701c", 0x99, 0x6}, {&(0x7f00000000c0)="2f3cfcad94efc56c79def368", 0xc, 0x2}, {&(0x7f00000014c0)="d459382c6672e797bd07f5de562d3487843d62e9ebfceb1cc8f385970dcfa9847044460144410295c983c50c1e94cdc2752a63040bae161ff5156a4f5e77443b3e5547e87e2224115bbd38", 0x4b, 0x9}, {&(0x7f0000001540)="889fd3c50ec593a3a916748384284def66bce5a7bb9520c0ec19eb27f55ccc9104bc74a8f80adb370afeab5eb9f323d0f7de12c2c427ba54a91da3da0bd791eaa037c986ec0a46de1385", 0x4a, 0x1}, {&(0x7f00000015c0)="d2bb1dccb1d61de1eb8104d6747cdaec338ed0911dc2bf360a99bec4e3d997b2c3185770210fd32b7f887fd3287ba2c3253ae849190a694f50d2e05d0785922cfbf629d969d3d9efe73b4a0cf9db7ea081ee223c419bd9fa43bad1ad2b498b052b18f9eb2cb6e059d0a307172ef53a4099113eee167ace44be90d1fd6ba4ffbee40ffe3331390b4db766b35c48b7f439a5b5bfcbf33e66c92fa48fc3d8505087dcf862d649ae955e6141f77730bc8e4827c5d1b20c6480a4ea2a923a86", 0xbd, 0x1f}, {&(0x7f0000001680)="100f546294ac912dfacc07dbdcea0246899e4b8e6dc77aaf0b06d1bfc6f1f1cbdc26b0c7b0bbeae5de89d756445a3724c38bb535ac0239c0a95c1403947edade88daf9f4fc71491b6cea81f889d911b020b4cdfd7509b8f5ec7e33e4c9022f46b5c8b6bd3d56affb5d879f7e", 0x6c, 0x5}], 0x88040, &(0x7f0000000140)='\x00') r0 = syz_open_dev$audion(&(0x7f0000001800)='/dev/audio#\x00', 0x8, 0x280) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000001840)='./file0\x00', 0x20) inotify_rm_watch(r0, r1) 2018/06/03 22:49:42 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000300000600000000004500001c0000000000849078085204000000e000000100009078e0000001"], 0x26) 2018/06/03 22:49:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x1) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000ac0)={"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"}) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000006c0)={"6fdb7d19f5ecb47f9428b8b4cd9196bb2c79836e6abd5159d8b3a4992abf09eab3b15817228083417043ae08667fa6d72903139b53738fa3bd898997ab24068c2f331281603580e786bae96e15c0f5b42c006501b6540c01f0d73a01acf95e9b3c396c28da16dcf665a894334044cd05fefc1e6c6773428d885b44cd4ec13a9988d6a9596949787ff3388b0a71391cafd99cbb7df488c77839372f4330f6650c7c8108df298d4a687e804848fd026b80ba4d94723d5a0cd3653d61dfbe9086a1cd8bbb45be8cee30078af8847fb8e97f9c0cb060baff9bc4f60a67452813c8d776160f2b5c301f1c30ec31527971fc6546b4d77f747fd3aae303b4517d87004a0429bd9eeb9cb25721f7169fe2d1416d89e4a117b521c6d8c9dbd9c55392c0cee617672560892674bd05921bfe4a79faa97375637734dc9a2554b438f438a679a3b54f81f4df7533828d008f0ba4fc1fe02e600629ee7de76dd925046d2745ead3b720b9445d9c85711eef8d8ebad7f30a7000b96ba1a9fe8adbb39840b786db7435e957070eb4797ae2b142612d84939ecd22dcda9b196d1966e7e8a13da4af4bbf86e704d0d194b7ec7f83209777ddc028e2af16b2e6f1df34330a089fdff6144a55f25aee67800df1cafa87e912a1e7037be62c577a096ab58a1c616273782ea458941d12f6f37430159ad0c3118a02460ee2d3be0a1c09d8b103d5e0c85c2202bcf1002575fb6e2b4c7bcb7356e7a9dbb75acb3f5cee5af331fafdcb65f00abb625ddf677f3a87ab215bd611eeb006594ac77cfdf52ded60c9f5e391e8f67a529170135dc556f21734a25e17588c909d9da85defbd27bf6f2b802560146bfa5e4756f2dd6d1110268df29504e2716357258a7696b7743815b71a4d97a58aa56387223aefe31a4139e31918e68fafdf88d03ccb97b1710204795c6667b9b4c7b14e83125a82a02803d5fda997f1d1afb0c03c3c11d2c16bf2ee2c7c7e32b3172d51bcc5f3a84c997467734fd6a5def333b7bc669c7cefdc52bf19bbc1839b78905de42fa5d66e42f5bffc567d114c14ea224d1ce48a2f2aa473469135d08d0b0b2538701d26889d5221af06416082a9b775f94b0df9db38d00a0b0c52142473652176e7b96f64785278b0b3e64b01fdbb1b1d5c7a2c7645eff04a6e9fe864c71585a7f79b19251a1eb24266dff62fab51d206efe707a959a769b2295f615db54e3b88451047de1ed60e0e5266ce9d509c75fc78b8b637ede9ece18556d2c989ca7d86139c0a757aca30b665c6924efe1ac7ff57168a086ff571d852be5f32652e0ac41c41cb33ff0394840163879ae228b878718f42f0794d074325ee81c488cf69049ad89643e05a807ce654713d2318e7bd5e6ff133274c0ca72bd5b11a13dc8bbfca1a16f6d28d942046405522689b6d38804912f0d529de6139fb2c5c"}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000"], 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="a88d476786526b1afe1185f41f8a1f5343a648796f2e18538c0ede956f33c64d42c7932194750b030c77410d6e36ec389ba74136ec5a55fe93dec35904454b328032d0f59a73ae5d96cb6a929be6e92c87dc48cc3fb34853dd678078b4ab61a6378858a676b6b2c2c0a2dc8b9490085ee7b10d733a8b8d98a72b821b4536f02ae798ee1b39ad0024dce2ba8fae084ce3bd58f758b0390a338a9bfdc12bcff7d3a761dafdeca8c4d183665760bdbb071a80b1f627c44849c67af5cfe75fd68e9d2c53c03b02d139e45ee893af9c327ebbc8b25e74afe1468110bd5bef37733360569c6c0778a2c363c7929d7d80a81efab0e690", 0xf3) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5) 2018/06/03 22:49:42 executing program 6 (fault-call:2 fault-nth:35): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x3ff, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8001, 0x40080) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000200)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000080), &(0x7f00000002c0), 0x1}, 0x20) [ 253.725755] RSP: 002b:00007f671a7f3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.733482] RAX: ffffffffffffffda RBX: 00007f671a7f46d4 RCX: 0000000000455a09 [ 253.741006] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 253.748278] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 253.755560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 253.762822] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000022 2018/06/03 22:49:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) sync_file_range(r0, 0x600000000000000, 0x3, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xc3, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) [ 253.826269] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.835371] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 2018/06/03 22:49:42 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:42 executing program 7: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40086607, &(0x7f0000000000)={0x221, &(0x7f0000000040)}) [ 253.958628] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.967162] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 254.006784] EXT4-fs warning (device sda1): ext4_group_extend:1759: can't shrink FS - resize aborted [ 254.097647] EXT4-fs warning (device sda1): ext4_group_extend:1759: can't shrink FS - resize aborted [ 254.145338] device bridge_slave_1 left promiscuous mode [ 254.151129] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.182539] device bridge_slave_0 left promiscuous mode [ 254.188282] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.240300] team0 (unregistering): Port device team_slave_1 removed [ 254.252884] team0 (unregistering): Port device team_slave_0 removed [ 254.263283] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 254.280140] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 254.310144] bond0 (unregistering): Released all slaves 2018/06/03 22:49:43 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000100)=""/66, 0x1e1) getdents64(r0, &(0x7f0000000080)=""/73, 0x49) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000180)=0xc) 2018/06/03 22:49:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8e30, 0x6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={r2, 0xfffffffffffffffd}, 0x8) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7b, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000b688254912c98340a2acae52e30c0119592cf5e59ab6e531d80b45ddc077d58fd9225e522c229039da00facea834d8"], &(0x7f0000000100)=0x8) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x4000000) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x66, &(0x7f0000000080)={r6}, &(0x7f0000000180)=0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) close(r1) eventfd2(0x80000001, 0x80000) 2018/06/03 22:49:43 executing program 6 (fault-call:2 fault-nth:36): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, 0x0) 2018/06/03 22:49:43 executing program 1: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x402000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2}, 0x8) 2018/06/03 22:49:43 executing program 7: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40086607, &(0x7f0000000000)={0x221, &(0x7f0000000040)}) 2018/06/03 22:49:43 executing program 3: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4000, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/113, 0x71}], 0x7, &(0x7f0000000880)=""/77, 0x4d, 0x101}, 0x40010003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/06/03 22:49:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000340)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, {0xa, 0x4e21, 0xffffffff, @local={0xfe, 0x80, [], 0xaa}, 0x6fc}, 0x5, [0x5, 0x7fff, 0x8, 0x1000, 0x54d, 0x7, 0x66, 0x39ff]}, 0x5c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x7}, &(0x7f00000002c0)=0x8) open_by_handle_at(r4, &(0x7f00000001c0)={0x10, 0x100000000, "994fc9e964df29b3"}, 0x400000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='#']}) close(r3) 2018/06/03 22:49:43 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x2}}, 0xa) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f}, 0x3) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x101002) [ 255.013859] EXT4-fs warning (device sda1): ext4_group_extend:1759: can't shrink FS - resize aborted [ 255.167569] IPVS: ftp: loaded support on port[0] = 21 [ 255.959529] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.965974] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.973810] device bridge_slave_0 entered promiscuous mode [ 256.023244] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.029718] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.037142] device bridge_slave_1 entered promiscuous mode [ 256.065818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 256.094654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 256.194261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.223066] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.339568] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.346804] team0: Port device team_slave_0 added [ 256.372787] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 256.379991] team0: Port device team_slave_1 added [ 256.407724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.437790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.468869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.476127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.484398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.508197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 256.515337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.524259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.790982] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.797462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.804188] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.810597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.777504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.869952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.964684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.970945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.978686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.067345] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.621920] FAT-fs (loop6): bogus number of reserved sectors [ 258.627844] FAT-fs (loop6): Can't find a valid FAT filesystem [ 258.646639] FAULT_INJECTION: forcing a failure. [ 258.646639] name failslab, interval 1, probability 0, space 0, times 0 [ 258.658348] CPU: 0 PID: 18981 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 258.665647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.675245] Call Trace: [ 258.677843] dump_stack+0x1b9/0x294 [ 258.681487] ? dump_stack_print_info.cold.2+0x52/0x52 [ 258.686695] should_fail.cold.4+0xa/0x1a [ 258.690753] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 258.695853] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 258.700864] ? __lockdep_init_map+0x105/0x590 [ 258.705368] ? graph_lock+0x170/0x170 [ 258.709172] ? graph_lock+0x170/0x170 [ 258.712968] ? d_set_d_op+0x31d/0x410 [ 258.716760] ? find_held_lock+0x36/0x1c0 [ 258.720822] ? __lock_is_held+0xb5/0x140 [ 258.724880] ? check_same_owner+0x320/0x320 [ 258.729209] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 258.733786] ? rcu_note_context_switch+0x710/0x710 [ 258.738711] ? kasan_check_write+0x14/0x20 [ 258.742957] __should_failslab+0x124/0x180 [ 258.747210] should_failslab+0x9/0x14 [ 258.751011] kmem_cache_alloc+0x2af/0x760 [ 258.755178] ? vsnprintf+0x1f1/0x1b40 [ 258.758993] ? __d_alloc+0xd30/0xd30 [ 258.762724] alloc_inode+0xb2/0x190 [ 258.766561] new_inode_pseudo+0x69/0x1a0 [ 258.770620] ? prune_icache_sb+0x1a0/0x1a0 [ 258.774852] ? d_alloc+0x370/0x370 [ 258.778390] ? scnprintf+0x120/0x120 [ 258.782114] new_inode+0x1c/0x40 [ 258.785486] fuse_ctl_add_dentry+0xff/0x440 [ 258.789867] fuse_ctl_add_conn+0x12d/0x280 [ 258.794144] ? fuse_ctl_remove_conn+0x1b0/0x1b0 [ 258.798821] ? d_make_root+0x5f/0x90 [ 258.802536] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 258.808077] ? simple_fill_super+0x49d/0x600 [ 258.812485] ? fuse_ctl_add_conn+0x280/0x280 [ 258.816900] fuse_ctl_fill_super+0xf7/0x160 [ 258.821229] ? fuse_ctl_add_conn+0x280/0x280 [ 258.825638] mount_single+0xfb/0x170 [ 258.829373] fuse_ctl_mount+0x2c/0x40 [ 258.833193] mount_fs+0xae/0x328 [ 258.836566] ? mpi_free.cold.1+0x19/0x19 [ 258.840641] vfs_kern_mount.part.34+0xd4/0x4d0 [ 258.845239] ? may_umount+0xb0/0xb0 [ 258.848874] ? _raw_read_unlock+0x22/0x30 [ 258.853043] ? __get_fs_type+0x97/0xc0 [ 258.856951] do_mount+0x564/0x3070 [ 258.860511] ? lock_downgrade+0x8e0/0x8e0 [ 258.864982] ? copy_mount_string+0x40/0x40 [ 258.869234] ? check_same_owner+0x320/0x320 [ 258.873566] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 258.878597] ? __check_object_size+0x95/0x5d9 [ 258.883109] ? __might_sleep+0x95/0x190 [ 258.887088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.892728] ? _copy_from_user+0xdf/0x150 [ 258.896874] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.902408] ? copy_mount_options+0x285/0x380 [ 258.906905] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.912470] ksys_mount+0x12d/0x140 [ 258.916096] __x64_sys_mount+0xbe/0x150 [ 258.920079] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 258.925092] do_syscall_64+0x1b1/0x800 [ 258.928994] ? finish_task_switch+0x1ca/0x840 [ 258.933494] ? syscall_return_slowpath+0x5c0/0x5c0 [ 258.938420] ? syscall_return_slowpath+0x30f/0x5c0 [ 258.943354] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 258.948740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.953604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.958792] RIP: 0033:0x455a09 [ 258.961987] RSP: 002b:00007f2857595c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.969790] RAX: ffffffffffffffda RBX: 00007f28575966d4 RCX: 0000000000455a09 [ 258.977070] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 258.984767] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 258.992156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 258.999450] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000024 [ 259.007423] kasan: CONFIG_KASAN_INLINE enabled [ 259.012491] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 259.019929] general protection fault: 0000 [#1] SMP KASAN [ 259.025471] Dumping ftrace buffer: [ 259.029020] (ftrace buffer empty) [ 259.032734] Modules linked in: [ 259.035917] CPU: 0 PID: 18981 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #81 [ 259.043185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.052546] RIP: 0010:fuse_ctl_remove_conn+0xc8/0x1b0 [ 259.057739] RSP: 0018:ffff8801b49ff968 EFLAGS: 00010202 [ 259.063469] RAX: 0000000000000075 RBX: ffff88017d006420 RCX: ffffc9000cafe000 [ 259.070813] RDX: 0000000000040000 RSI: ffffffff826484ba RDI: 00000000000003a8 [ 259.078077] RBP: ffff8801b49ff990 R08: ffff8801b48fe240 R09: ffffed003b5c46d2 [ 259.085457] R10: ffffed003b5c46d2 R11: ffff8801dae23693 R12: 0000000000000000 [ 259.092722] R13: ffff8801d6a61d48 R14: dffffc0000000000 R15: 0000000000000000 [ 259.099984] FS: 00007f2857596700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 259.110405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.117053] CR2: 00007ffec338db68 CR3: 00000001d20c3000 CR4: 00000000001406f0 [ 259.124430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.131689] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.138956] Call Trace: [ 259.141554] fuse_ctl_add_conn+0x261/0x280 [ 259.145804] ? fuse_ctl_remove_conn+0x1b0/0x1b0 [ 259.150662] ? d_make_root+0x5f/0x90 [ 259.154517] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 259.160058] ? simple_fill_super+0x49d/0x600 [ 259.164474] ? fuse_ctl_add_conn+0x280/0x280 [ 259.168881] fuse_ctl_fill_super+0xf7/0x160 [ 259.173228] ? fuse_ctl_add_conn+0x280/0x280 [ 259.177646] mount_single+0xfb/0x170 [ 259.181372] fuse_ctl_mount+0x2c/0x40 [ 259.185180] mount_fs+0xae/0x328 [ 259.188558] ? mpi_free.cold.1+0x19/0x19 [ 259.192622] vfs_kern_mount.part.34+0xd4/0x4d0 [ 259.197195] ? may_umount+0xb0/0xb0 [ 259.200813] ? _raw_read_unlock+0x22/0x30 [ 259.205063] ? __get_fs_type+0x97/0xc0 [ 259.208938] do_mount+0x564/0x3070 [ 259.212493] ? lock_downgrade+0x8e0/0x8e0 [ 259.216632] ? copy_mount_string+0x40/0x40 [ 259.220857] ? check_same_owner+0x320/0x320 [ 259.225174] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 259.230310] ? __check_object_size+0x95/0x5d9 [ 259.234806] ? __might_sleep+0x95/0x190 [ 259.238787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.244339] ? _copy_from_user+0xdf/0x150 [ 259.248504] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.254048] ? copy_mount_options+0x285/0x380 [ 259.258550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.264214] ksys_mount+0x12d/0x140 [ 259.267837] __x64_sys_mount+0xbe/0x150 [ 259.271827] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 259.276848] do_syscall_64+0x1b1/0x800 [ 259.280741] ? finish_task_switch+0x1ca/0x840 [ 259.285232] ? syscall_return_slowpath+0x5c0/0x5c0 [ 259.290160] ? syscall_return_slowpath+0x30f/0x5c0 [ 259.295087] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 259.300441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.305272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.310648] RIP: 0033:0x455a09 [ 259.313831] RSP: 002b:00007f2857595c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 259.321618] RAX: ffffffffffffffda RBX: 00007f28575966d4 RCX: 0000000000455a09 [ 259.328878] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000180 [ 259.336352] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 259.343620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 259.350913] R13: 00000000000004d1 R14: 00000000006fc438 R15: 0000000000000024 [ 259.358213] Code: 8b 5d 00 48 8d 7b 58 48 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 cc 00 00 00 4c 8b 7b 58 49 8d bf a8 03 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a5 00 00 00 48 89 df 41 83 ec 01 49 83 ed [ 259.377417] RIP: fuse_ctl_remove_conn+0xc8/0x1b0 RSP: ffff8801b49ff968 [ 259.384134] ---[ end trace a7e0b21e143cf26f ]--- [ 259.388942] Kernel panic - not syncing: Fatal exception [ 259.394943] Dumping ftrace buffer: [ 259.398478] (ftrace buffer empty) [ 259.402172] Kernel Offset: disabled [ 259.405804] Rebooting in 86400 seconds..