INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. 2018/04/16 12:50:51 fuzzer started 2018/04/16 12:50:51 dialing manager at 10.128.0.26:41213 2018/04/16 12:50:57 kcov=true, comps=false 2018/04/16 12:51:00 executing program 0: 2018/04/16 12:51:00 executing program 1: 2018/04/16 12:51:00 executing program 7: 2018/04/16 12:51:00 executing program 2: 2018/04/16 12:51:00 executing program 3: 2018/04/16 12:51:00 executing program 4: 2018/04/16 12:51:00 executing program 5: 2018/04/16 12:51:00 executing program 6: syzkaller login: [ 41.863354] ip (3740) used greatest stack depth: 54672 bytes left [ 42.343903] ip (3783) used greatest stack depth: 54312 bytes left [ 43.184714] ip (3870) used greatest stack depth: 54200 bytes left [ 43.815020] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.821589] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.860180] device bridge_slave_0 entered promiscuous mode [ 43.881971] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.888460] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.896825] device bridge_slave_0 entered promiscuous mode [ 43.927509] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.934070] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.948953] device bridge_slave_0 entered promiscuous mode [ 43.974384] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.980881] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.996905] device bridge_slave_0 entered promiscuous mode [ 44.010686] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.017175] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.046209] device bridge_slave_0 entered promiscuous mode [ 44.055868] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.062329] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.080106] device bridge_slave_0 entered promiscuous mode [ 44.101580] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.108111] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.130253] device bridge_slave_1 entered promiscuous mode [ 44.143421] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.149878] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.172451] device bridge_slave_0 entered promiscuous mode [ 44.181998] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.188508] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.204339] device bridge_slave_0 entered promiscuous mode [ 44.225552] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.232118] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.243411] device bridge_slave_1 entered promiscuous mode [ 44.253435] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.259895] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.273453] device bridge_slave_1 entered promiscuous mode [ 44.282412] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.288860] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.306374] device bridge_slave_1 entered promiscuous mode [ 44.316880] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.323367] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.342577] device bridge_slave_1 entered promiscuous mode [ 44.365502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.373944] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.380425] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.396681] device bridge_slave_1 entered promiscuous mode [ 44.403543] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.410006] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.433832] device bridge_slave_1 entered promiscuous mode [ 44.449607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.460950] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.467406] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.498771] device bridge_slave_1 entered promiscuous mode [ 44.513897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.523617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.532220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.546917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.560934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.637571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.663369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.677075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.699657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.721208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.739652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.767878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.849865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.887975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.561437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.674888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.690894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.706276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.729606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.768305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.787582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.837848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.888344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.897992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.916219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.924864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.935319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.982104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.042738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.134555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.205093] ip (4090) used greatest stack depth: 53656 bytes left [ 46.784988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.870998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.896863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.942191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.970718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.986348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.996877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.034702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.084589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.104677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.119521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.134858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.175248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.221732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.247614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.259228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.278191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.308608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.332133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.340663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.356851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.383165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.391195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.402317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.432904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.461542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.476780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.486014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.496429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.503890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.521294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.539429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.557661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.573757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.583187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.591578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.599162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.606792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.614444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.652566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.676666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.701215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.720467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.729665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.737519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.745600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.761228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.783594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.790675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.807319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.829078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.848350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.863642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.874152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.881489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.901370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.927785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.960809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.985984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.007564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.016502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.055885] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.069108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.092518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.902452] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.908964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.915816] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.922272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.960151] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.966692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.989440] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.995938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.002761] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.009196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.061948] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.076128] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.082616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.089486] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.095944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.130621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.141320] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.147787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.154612] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.161055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.173527] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.188254] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.194718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.201541] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.208008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.250618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.370557] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.377139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.384011] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.390532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.440893] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.461595] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.468136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.474976] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.481458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.497815] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.519498] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.525982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.532862] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.539338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.634015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.976524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.991925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.023780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.039701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.049761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.057219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.065166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.350992] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.414712] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.534271] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.647978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.761996] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.772809] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.974936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.033156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.171011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.177366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.193613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.224751] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.250259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.265996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.306591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.313148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.327153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.523645] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.529947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.541693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.579549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.587281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.603686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.627628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.634850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.665252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.884085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.892602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.912410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.937726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.958832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.966977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/16 12:51:27 executing program 4: 2018/04/16 12:51:27 executing program 1: 2018/04/16 12:51:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x80) write$cgroup_pid(r1, &(0x7f0000000080)={[0x37, 0x30, 0x33, 0x31, 0x32, 0x32]}, 0x6) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000010ff0)={&(0x7f0000001000)={0x14, 0x18, 0x301, 0x0, 0x0, {0x80}}, 0x14}, 0x1}, 0x0) 2018/04/16 12:51:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/04/16 12:51:27 executing program 2: syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x6000) 2018/04/16 12:51:27 executing program 1: r0 = mq_open(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0xc0, &(0x7f0000000140)={0x3, 0xfffffffffffff001, 0x814e, 0x3, 0xffffffff, 0x1, 0x2, 0x101}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3c9, 0x840) sendto$ipx(r1, &(0x7f0000000080)="64eee5529629fcd07d25b50ff3082ae9c65809b0ad6516cd90e4d3b7ef1172ae6e62ef2a01c28c936d99733baf82cd1dc68c05a7bb97c250c21535108ecfeac0eb03c96ce8cb", 0x46, 0x84, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000a3d000)={&(0x7f00000f3e08)=ANY=[], 0xffffffffffffff13}, 0x1}, 0x0) 2018/04/16 12:51:27 executing program 3: timer_create(0x7, &(0x7f0000000b80)={0x0, 0x0, 0x1, @thr={&(0x7f0000000a00), &(0x7f0000000a80)}}, &(0x7f0000000bc0)) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000000c80)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) timer_settime(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40)) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000080)="99c5b0bbb847e26ff4a20936a008b1fd208f5075a489c997e4a58e936a194317cfa74eb9f05eb961dad9224c14f79d29d93f5ee06cd92b0e1d870b8d2856ef36daa251b38643c6cbe8a81b5e6a19", 0x4e) 2018/04/16 12:51:27 executing program 5: unshare(0x400) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x40046103, &(0x7f0000b1cf88)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000b89ff0)}) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000000c0)={0x1ff, 0x80000001, 0x1, 0x80000000, 0xa, [{0x5, 0xd05b, 0x0, 0x0, 0x0, 0x63ae50af1e50df9f}, {0x4, 0x100, 0x6ffd4971, 0x0, 0x0, 0x2000}, {0x4, 0x89, 0x5, 0x0, 0x0, 0xbbbe74fea906}, {0x2, 0x1, 0xfffffffffffffffa, 0x0, 0x0, 0x201}, {0xce, 0x6, 0x6, 0x0, 0x0, 0x400}, {0x1, 0xff, 0x4, 0x0, 0x0, 0x204}, {0x8, 0x0, 0x3, 0x0, 0x0, 0x880}, {0x4, 0x1, 0x8, 0x0, 0x0, 0x8}, {0x0, 0x101, 0x9, 0x0, 0x0, 0x80}, {0x1, 0x800000, 0x2, 0x0, 0x0, 0x1000}]}) 2018/04/16 12:51:27 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400080, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001540)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/16 12:51:27 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="1f000000160007f2000094ffa4000800000000000000000000000000030004", 0x1f) recvfrom$unix(r0, &(0x7f0000408f9a), 0x0, 0x0, &(0x7f000040cffe)=@abs, 0x20000000) fcntl$setflags(r0, 0x2, 0x1) 2018/04/16 12:51:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(echainiv(rfc4106-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400080, 0x0) statfs(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/134) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x3, 0x3}, {0x8, 0x800}, 0x4, 0x2, 0x1}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x306, 0x70bd25, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2018/04/16 12:51:28 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000007c0)={0xffffffffffffffff, r1, 0x85, 0x7, &(0x7f0000000700)="783e2ed948c4203e4adb7edff5e33d3c0422a870aca4c6b6adb73d141d62bc35666bd5b1153a58919d28b5c156b067708f4fabb018f2c099a68a9774dce16f3977b7379c27bd8e1d880548b97a298f6dfc055296647340268ab0855e74f06b981e7a8c3c7385e94201c348d0543278f0fb071e6400f94d4be1c184f84725bb76c751b21b71c4737fb9dfe3199c5c0a1ea291eb8486a01a9503bffb5a631b12168f054dcd37c42bda9fd8452196a6ed9fc2820751680d3b2a", 0x40, 0x8, 0x9, 0x4, 0x5, 0x3, 0x100000000, "7646a367ae07ce301b3c6d54c56ee642ce643df7023f2a630707825e78e0476fa9049db0bddc68140ec9b2f2958fd2aa83805cff5b36295ac114098579e70d9099ed6ddd3457dbd9146a3ad4bf19cf"}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x4000000d2, &(0x7f0000000040), &(0x7f0000000000)=0x4) 2018/04/16 12:51:28 executing program 6: unshare(0x8000400) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000dcfff4)) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x3, 0x1}) 2018/04/16 12:51:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) sendto$inet6(r0, &(0x7f0000000600), 0x0, 0x0, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/16 12:51:28 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x4, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e24, @multicast1=0xe0000001}, 0x11, 0x4, 0x0, 0x2, 0x1, &(0x7f0000000180)='veth1\x00', 0x80, 0x4}) unshare(0x8000400) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e26, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendmsg$netlink(r1, &(0x7f0000007240)={&(0x7f0000000000)=@kern={0x10}, 0xc, &(0x7f0000001600), 0x0, &(0x7f0000007200)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}], 0x40}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0xa) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000080)={{0x2, 0x27b}, 'port1\x00', 0x48, 0x1, 0x4, 0xffff, 0x100000000, 0x5, 0x401, 0x0, 0x7, 0x9}) 2018/04/16 12:51:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/04/16 12:51:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) close(r0) unshare(0x20000400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 2018/04/16 12:51:28 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x8000001, 0x401, 0x22}) write(r1, &(0x7f0000d86000)="232109a7", 0x4) r2 = semget(0x3, 0x6, 0x220) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f00000001c0)=""/4096) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) execveat(r1, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000e56000), &(0x7f0000000140), 0x1000) 2018/04/16 12:51:28 executing program 3: timer_create(0x7, &(0x7f0000000b80)={0x0, 0x0, 0x1, @thr={&(0x7f0000000a00), &(0x7f0000000a80)}}, &(0x7f0000000bc0)) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000c40)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f0000000c80)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) timer_settime(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40)) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000080)="99c5b0bbb847e26ff4a20936a008b1fd208f5075a489c997e4a58e936a194317cfa74eb9f05eb961dad9224c14f79d29d93f5ee06cd92b0e1d870b8d2856ef36daa251b38643c6cbe8a81b5e6a19", 0x4e) 2018/04/16 12:51:28 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x8000001, 0x401, 0x22}) write(r1, &(0x7f0000d86000)="232109a7", 0x4) r2 = semget(0x3, 0x6, 0x220) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f00000001c0)=""/4096) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) execveat(r1, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000e56000), &(0x7f0000000140), 0x1000) 2018/04/16 12:51:28 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000280)=@known='security.ima\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xe01, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000340)="c8", 0x1}], 0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) 2018/04/16 12:51:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/04/16 12:51:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f0000000000)="91", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) pwrite64(r0, &(0x7f0000000180)="84be41537ab8977b422ade9b583c221f8418e4ae21a5e36f3804cda0c7e2a76cfb0e7e", 0x23, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x200000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, 0xb2, 0x0, 0xff, 0x8, 0x3, 0xc3c, 0x3}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x20, 0x4, 0xfffffffffffff27c, 0x9, 0x1ff, 0x2, 0x0, 0x80000000, 0x671e, 0x8, 0x9, 0x3f, 0x0, 0x40, 0x10001]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x3, 0x8001, 0x7fffffff, 0x20, r2}, &(0x7f0000000400)=0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x8001}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@rc, 0x2fc, &(0x7f0000000940), 0x0, &(0x7f0000000480)=""/228, 0xe4}, 0x43) 2018/04/16 12:51:28 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x10000141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) io_setup(0xfff, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)}]) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa00000800460000200200000000009078ac14ffaaac14ffaa070200001208000000000000e67b1aca9ef19196506377e30a99ca3d4152222b147608c8a5a075ca97708109b1a86ae8f54321a9e3ffb59b5545802b1a9d48f978826c0f1d0ac48a402d4bb7555c925f8d131ca97b272fbf3485731d2f9f6b1a38a0cdf475c9"], 0x0) 2018/04/16 12:51:28 executing program 6: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x8, 0x9ca, 0x3, 0x8}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x66, &(0x7f00008a8ff0)={0x0, 0x0, &(0x7f0000d22000)}, &(0x7f0000f6affc)=0x10) 2018/04/16 12:51:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) close(r0) unshare(0x20000400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 2018/04/16 12:51:28 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x200000) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x40600) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x11, 0x0, &(0x7f0000012ffc), &(0x7f0000000100)=0xfffffffffffffd6a) 2018/04/16 12:51:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/04/16 12:51:28 executing program 7: r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)="6370752630000006fdfeff003c12b8d0cc69bf7fffcc364d7878b2fe44897367ffa75134df22ad89c89b0df602d72272e82ad32838002955c2db00000000000000050fb902ae9f2109333b00e30335ecfd7e89bff18829cb97541bd006bf3dcf376e93a15906083ba783fa3e7318893c26819bee569f728184be5efc06cc650d421908182b69c3730e559e2b6ca237f264987ed574e36cd3efd745ead1044fd7e82f7f65b71c79a10e2e605929cf8ccab2eadac54d1c3e7dae98996be67c10d7c236cde0355ab2fb0aaaaccdb64cd11d4db1b927234daae71562f2c40fa04b9aa17664350a37eb52480895070000008a0fc021db95d80d9b") r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') clock_gettime(0x7, &(0x7f0000000080)) 2018/04/16 12:51:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1000) read(r0, &(0x7f00004bdf32)=""/206, 0x89) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x10001}) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/04/16 12:51:28 executing program 3: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000780), 0x4) 2018/04/16 12:51:29 executing program 7: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r4 = getegid() r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000300)=""/102) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000c57ff8)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00006c6ff0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000fc000200db0000e2fe01613bd2ce71840653"], 0x38, 0x4000010}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1f) 2018/04/16 12:51:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1000) read(r0, &(0x7f00004bdf32)=""/206, 0x89) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x10001}) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/04/16 12:51:29 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xbf353d839c02bd16) accept$alg(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r1, 0x7) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffe95, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000004d80), &(0x7f0000004dc0)=0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002700)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) r4 = accept(r3, 0x0, &(0x7f0000000040)=0xffffffb5) recvmmsg(r4, &(0x7f0000002580)=[{{&(0x7f0000002280)=@can, 0x80, &(0x7f0000002480), 0x0, &(0x7f00000024c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000002680)) 2018/04/16 12:51:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x2, 0x20000) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0x8, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x20000000) r1 = accept(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000140)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r2, 0x709, 0x70bd2b, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe799}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xef}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44890}, 0x1) r3 = semget$private(0x0, 0x2, 0x11) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000040)=""/40) semget(0x1, 0xfffdfffffffffffa, 0xfffffffffffffffd) 2018/04/16 12:51:29 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x10000141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) io_setup(0xfff, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)}]) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa00000800460000200200000000009078ac14ffaaac14ffaa070200001208000000000000e67b1aca9ef19196506377e30a99ca3d4152222b147608c8a5a075ca97708109b1a86ae8f54321a9e3ffb59b5545802b1a9d48f978826c0f1d0ac48a402d4bb7555c925f8d131ca97b272fbf3485731d2f9f6b1a38a0cdf475c9"], 0x0) 2018/04/16 12:51:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000030ff8)='pagemap\x00') lseek(r0, 0x0, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/bnep\x00') 2018/04/16 12:51:29 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7, 0x1, [0x6]}, &(0x7f0000000140)=0xa) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0x7}, 0x8) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x40) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000180), 0x4) 2018/04/16 12:51:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) [ 68.473387] ================================================================== [ 68.480829] BUG: KMSAN: uninit-value in netlink_sendmsg+0xb26/0x1310 [ 68.487331] CPU: 1 PID: 5885 Comm: syz-executor1 Not tainted 4.16.0+ #84 [ 68.494170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.503525] Call Trace: [ 68.506125] dump_stack+0x185/0x1d0 [ 68.509766] ? netlink_sendmsg+0xb26/0x1310 [ 68.514089] kmsan_report+0x142/0x240 [ 68.517905] __msan_warning_32+0x6c/0xb0 [ 68.522003] netlink_sendmsg+0xb26/0x1310 [ 68.526162] ? netlink_getsockopt+0xc80/0xc80 [ 68.530658] ___sys_sendmsg+0xec0/0x1310 [ 68.534728] ? __fdget+0x4e/0x60 [ 68.538102] ? __fget_light+0x56/0x710 [ 68.541990] ? __fdget+0x4e/0x60 [ 68.545361] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.550728] ? __fget_light+0x6b9/0x710 [ 68.554714] SYSC_sendmsg+0x2a3/0x3d0 [ 68.558526] SyS_sendmsg+0x54/0x80 [ 68.562067] do_syscall_64+0x309/0x430 [ 68.565967] ? ___sys_sendmsg+0x1310/0x1310 [ 68.570300] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.575492] RIP: 0033:0x455319 [ 68.578698] RSP: 002b:00007f30f2634c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.586515] RAX: ffffffffffffffda RBX: 00007f30f26356d4 RCX: 0000000000455319 [ 68.593787] RDX: 0000000020000000 RSI: 000000002014f000 RDI: 0000000000000013 [ 68.601059] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.608331] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.615599] R13: 00000000000004f2 R14: 00000000006fa750 R15: 0000000000000000 2018/04/16 12:51:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/04/16 12:51:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) [ 68.622870] [ 68.624496] Local variable description: ----address@___sys_sendmsg [ 68.630808] Variable was created at: [ 68.634528] ___sys_sendmsg+0xd3/0x1310 [ 68.638508] SYSC_sendmsg+0x2a3/0x3d0 [ 68.642300] ================================================================== [ 68.649650] Disabling lock debugging due to kernel taint [ 68.655094] Kernel panic - not syncing: panic_on_warn set ... [ 68.655094] [ 68.662462] CPU: 1 PID: 5885 Comm: syz-executor1 Tainted: G B 4.16.0+ #84 [ 68.670604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.679953] Call Trace: [ 68.682551] dump_stack+0x185/0x1d0 [ 68.686186] panic+0x39d/0x940 [ 68.689418] ? netlink_sendmsg+0xb26/0x1310 [ 68.693742] kmsan_report+0x238/0x240 [ 68.697548] __msan_warning_32+0x6c/0xb0 [ 68.701619] netlink_sendmsg+0xb26/0x1310 [ 68.705791] ? netlink_getsockopt+0xc80/0xc80 [ 68.710300] ___sys_sendmsg+0xec0/0x1310 [ 68.714371] ? __fdget+0x4e/0x60 [ 68.717746] ? __fget_light+0x56/0x710 2018/04/16 12:51:29 executing program 7: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in6={0xa, 0x4e24, 0x4af, @empty, 0x80000000}, @in6={0xa, 0x4e23, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x64) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}) [ 68.721630] ? __fdget+0x4e/0x60 [ 68.725001] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.730366] ? __fget_light+0x6b9/0x710 [ 68.734357] SYSC_sendmsg+0x2a3/0x3d0 [ 68.738171] SyS_sendmsg+0x54/0x80 [ 68.741716] do_syscall_64+0x309/0x430 [ 68.745613] ? ___sys_sendmsg+0x1310/0x1310 [ 68.749947] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.755135] RIP: 0033:0x455319 [ 68.758321] RSP: 002b:00007f30f2634c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.766039] RAX: ffffffffffffffda RBX: 00007f30f26356d4 RCX: 0000000000455319 [ 68.773310] RDX: 0000000020000000 RSI: 000000002014f000 RDI: 0000000000000013 [ 68.780581] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.787852] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.795126] R13: 00000000000004f2 R14: 00000000006fa750 R15: 0000000000000000 [ 68.802885] Dumping ftrace buffer: [ 68.806408] (ftrace buffer empty) [ 68.810090] Kernel Offset: disabled [ 68.813694] Rebooting in 86400 seconds..