INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. 2018/04/18 20:44:41 fuzzer started 2018/04/18 20:44:42 dialing manager at 10.128.0.26:44151 2018/04/18 20:44:48 kcov=true, comps=false 2018/04/18 20:44:51 executing program 0: 2018/04/18 20:44:51 executing program 1: 2018/04/18 20:44:51 executing program 2: 2018/04/18 20:44:51 executing program 7: 2018/04/18 20:44:51 executing program 4: 2018/04/18 20:44:51 executing program 5: 2018/04/18 20:44:51 executing program 3: 2018/04/18 20:44:51 executing program 6: syzkaller login: [ 45.015821] ip (3691) used greatest stack depth: 54688 bytes left [ 45.375547] ip (3721) used greatest stack depth: 54672 bytes left [ 45.564938] ip (3739) used greatest stack depth: 54408 bytes left [ 46.536713] ip (3832) used greatest stack depth: 54200 bytes left [ 47.033376] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.039934] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.062691] device bridge_slave_0 entered promiscuous mode [ 47.084893] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.091424] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.124725] device bridge_slave_0 entered promiscuous mode [ 47.148401] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.154987] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.168926] device bridge_slave_0 entered promiscuous mode [ 47.188672] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.195207] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.212974] device bridge_slave_0 entered promiscuous mode [ 47.229715] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.236306] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.262783] device bridge_slave_0 entered promiscuous mode [ 47.287485] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.294117] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.315960] device bridge_slave_1 entered promiscuous mode [ 47.327161] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.333689] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.343486] device bridge_slave_0 entered promiscuous mode [ 47.358666] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.365194] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.385761] device bridge_slave_1 entered promiscuous mode [ 47.395991] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.402495] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.426716] device bridge_slave_1 entered promiscuous mode [ 47.436682] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.443257] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.467503] device bridge_slave_0 entered promiscuous mode [ 47.487983] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.494524] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.503509] device bridge_slave_1 entered promiscuous mode [ 47.515821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.523472] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.530025] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.558909] device bridge_slave_0 entered promiscuous mode [ 47.579256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.588894] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.595482] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.624973] device bridge_slave_1 entered promiscuous mode [ 47.631894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.643407] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.649958] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.668789] device bridge_slave_1 entered promiscuous mode [ 47.695189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.705987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.713319] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.719930] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.750681] device bridge_slave_1 entered promiscuous mode [ 47.760405] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.766947] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.817226] device bridge_slave_1 entered promiscuous mode [ 47.826254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.863465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.887894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.905263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.950388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.982906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.998516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.075776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.157597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.203911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.211531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.435333] ip (3957) used greatest stack depth: 53960 bytes left [ 48.697912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.892132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.944405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.953531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.972270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.072632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.125957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.197802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.207991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.218786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.237164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.307641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.315200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.455822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.464373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.549845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.081858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.131955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.171176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.242560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.318643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.339947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.357840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.376368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.482265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.492686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.544460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.581524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.588798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.599804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.615291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.622989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.635664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.644369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.661315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.704779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.735018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.763375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.790568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.803408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.810737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.822234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.841895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.857255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.873842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.881359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.891269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.929353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.957609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.982607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.994136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.004717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.012718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.019860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.031798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.055925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.064127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.074453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.091321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.104009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.135255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.162147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.190015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.216249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.238983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.246379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.265634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.298644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.334916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.371596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.391677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.408453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.415926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.424246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.453507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.470005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.500848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.646878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.654476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.666459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.446352] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.452951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.459863] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.466360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.505530] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.512387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.526767] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.533265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.540122] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.546607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.556162] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.568268] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.574741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.581611] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.588084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.600442] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.610086] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.616595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.623522] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.630115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.682093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.851294] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.857838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.864773] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.871286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.899553] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.910328] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.916842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.923761] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.930274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.940949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.955865] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.962410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.969322] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.975822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.034913] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.446007] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.452569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.459478] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.465966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.505603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.561124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.572691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.602130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.623192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.637639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.657148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.670769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.336621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.439700] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.563105] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.678932] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.925649] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.042996] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.132154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.138643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.149141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.205957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.214251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.318410] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.324826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.342135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.418612] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.424972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.435939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.514571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.520955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.531970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.897738] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.904332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.912718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.948405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.956353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.988811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.041937] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.048472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.063599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.097135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.103803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.112943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/18 20:45:19 executing program 5: 2018/04/18 20:45:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') clock_gettime(0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x34, "a45e8ce8d616e00c27079182e2814dc66f055e19a524c9bc5d630352d1ffdb358863b4266939e0c3702b4328c127dc44419dd024"}, &(0x7f00000000c0)=0x3c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r2, 0x4, 0x30}, 0xc) lseek(r0, 0x2, 0x0) 2018/04/18 20:45:20 executing program 5: 2018/04/18 20:45:20 executing program 4: 2018/04/18 20:45:20 executing program 1: 2018/04/18 20:45:20 executing program 2: 2018/04/18 20:45:20 executing program 6: 2018/04/18 20:45:20 executing program 7: 2018/04/18 20:45:20 executing program 3: 2018/04/18 20:45:20 executing program 4: unshare(0x20400) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "27b50889c472bcc8767fadfe733eb0c56f1e202517e3f4d8a1960b4808eac3f8"}) r1 = dup3(r0, r0, 0x80000) connect$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x5, 0x401, 0x0, "23ce01be51ec7aa7177d3dfe1386bc6dde2831bb2544e30c038351af80e14c3cdeff6a5e4da5eea2fd30510212f35204f17804361afcaa113130b4b73b62b1", 0x26}, 0x60) 2018/04/18 20:45:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3ff, 0x420200) openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x7fff) unshare(0x12027e) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) dup(0xffffffffffffff9c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="72f992621c1b3fe68b6f0941ffe162f06d36fa52ac1c8db3875b13a2f3ad5213a96d69dbd38ff7b9e526d1cc59856559dea6e8fbe1f4f14304927b09934dd58f7f6c89f8d56e565e261fcd96aa55d771c26377b429a1c19faf8f1c8e33e9290b2fdfb73979581e236e583c9b97603a7f2b"], 0x1}, 0x1}, 0x4000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) alarm(0x7) 2018/04/18 20:45:20 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x4100, 0x140) ioctl$KDSETMODE(r1, 0x4b3a, 0x7fffffff) mmap(&(0x7f0000000000/0xfb8000)=nil, 0xfb8000, 0x0, 0x12, r0, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000000)={{&(0x7f0000000080)=""/133, 0x85}, &(0x7f0000000040)}, 0x20) prctl$getname(0x10, &(0x7f0000000140)=""/41) 2018/04/18 20:45:20 executing program 5: r0 = socket(0x1e, 0x1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x57d) getsockopt(r0, 0x800000010f, 0x100000000, &(0x7f0000000080), &(0x7f0000000040)=0x408) 2018/04/18 20:45:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x80004) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x80}, 0xffffffffffffffff, 0x200000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f00000000c0)={{0x0, 0x10002}, {0xffffff80}, 0x20000000, 0x1}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x80, 0x1b05, 0x7c8, 0x3, 0x7, 0x4, 0xe6, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001}}, 0x3f, 0x9, 0x9, 0x4, 0x1}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r2, 0x12, "385a9f988131facf6f33be8493cf6d0e7b3e"}, &(0x7f00000002c0)=0x1a) 2018/04/18 20:45:20 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e61740000000000000000000016000000000000000000000000000000000000ac000000ac331a6fe9d1edad71c0b25a6c3d4ae001d6472efe321e9c93ea44577c24f94eb78e83bc74930a916a695ee0f151699ec4ebc1226ca044cc7ff4c5b9807e2ccf87540c112f399628b9a422ccf1e53a8697c2408e596ec3af90068aed5b397a836efca123c5b6a2dd6c48f26a1085aa49d96a919be98502e9d8b2fb9b3b45310f46e38c88b1d4bea79e6fcb8934c76056a071a3c17fd32d377443a2dc2b0023ba1ecd936e2d48149bea757628528857c465d2"], &(0x7f0000000140)=0xd0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)={{0xc6}}) sendto$inet6(r1, &(0x7f0000000180)="f8a95bc468a5189de168bc2f84bfd97c8e640812", 0x14, 0x4, &(0x7f00000001c0)={0xa, 0x4e24, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}, 0x1c) 2018/04/18 20:45:20 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x9110, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1800, 0xff) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000005c0)=""/4096, &(0x7f00000001c0)=0x1000) recvfrom$inet(r1, &(0x7f0000000100)=""/183, 0xb7, 0x10000, &(0x7f0000000080)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) getsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000580), &(0x7f00000000c0)=0xffffffffffffff96) 2018/04/18 20:45:20 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x7, 0x4) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140), &(0x7f0000000040)=0x4) 2018/04/18 20:45:20 executing program 5: perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nr0\x00', r1}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="060000000a000200aaaaaaaaaaaa0000"], 0x28}, 0x1}, 0x0) 2018/04/18 20:45:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000040)={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_create1(0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000000)=0x54) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)={0xfffffffffffffffc}) 2018/04/18 20:45:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x2000005452, &(0x7f00000000c0)=0x100000000) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x28, 0x20c00) 2018/04/18 20:45:20 executing program 6: socket(0x10, 0x3, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) 2018/04/18 20:45:20 executing program 7: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "bd5202", 0x18, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}}}}, &(0x7f0000000600)) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x65f32650, 0x101200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x5, 0x7fffffff}, 0x1, 0x0, 0x2, {0x10001, 0x7fffffff}, 0x8, 0xffffffff}) 2018/04/18 20:45:20 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x8000) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) keyctl$session_to_parent(0x12) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r1, 0x1}) 2018/04/18 20:45:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f00000002c0)={@empty, @broadcast=0xffffffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@newspdinfo={0x30, 0x24, 0x1, 0x0, 0x0, 0x0, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6}}]}, 0x30}, 0x1}, 0x0) 2018/04/18 20:45:20 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002000)={&(0x7f0000008000)={0x10}, 0xc, &(0x7f0000005ff0)={&(0x7f000000c000)=@polexpire={0xc0, 0x1b, 0x201, 0x0, 0x0, {{{@in=@multicast2=0xe0000002, @in=@loopback=0x7f000001}, {}, {}, 0x0, 0x0, 0x627e4e5766654b58}}}, 0xc0}, 0x1}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0xc9, 0x0, 0x2, &(0x7f0000ffe000/0x1000)=nil, 0x5}) 2018/04/18 20:45:20 executing program 6: socket(0x10, 0x3, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) 2018/04/18 20:45:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xb2, 0x4, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x1) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 2018/04/18 20:45:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="4408050500", 0x5) r1 = memfd_create(&(0x7f0000000000)='\x00', 0xc8624c9d24726d34) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x4, 0x2) 2018/04/18 20:45:20 executing program 2: r0 = socket$unix(0x1, 0x7, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40400, 0x0) unshare(0x40600) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 2018/04/18 20:45:20 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000f06000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000aeeffa)='ramfs\x00', 0x0, &(0x7f00007d7000)) chdir(&(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8080, 0xffffffffffffffff) 2018/04/18 20:45:20 executing program 4: r0 = accept4$netrom(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400200, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0xfffffffffffffffb, &(0x7f0000000080)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00001d3000), 0x4) [ 71.868352] QAT: Invalid ioctl 2018/04/18 20:45:21 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f00000000c0)={0x10}, 0x2, &(0x7f0000000000)={&(0x7f0000000d80)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0xa}]}]}, 0xfdca}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) socket$netlink(0x10, 0x3, 0x1e) 2018/04/18 20:45:21 executing program 3: socketpair(0x8, 0x0, 0x5426aa02, &(0x7f0000000000)={0xffffffffffffffff}) r1 = semget(0x0, 0x0, 0x400) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/83) setsockopt$ax25_int(r0, 0x101, 0xb, &(0x7f0000000040)=0x9, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000009fee)='/dev/input/event#\x00', 0x2, 0x101002) write(r2, &(0x7f000019dfe8)="270000001400f1070e0e0000150f0a001100e700f609ffff", 0x18) 2018/04/18 20:45:21 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f000021f000/0x1000)=nil, 0x1000, &(0x7f0000972fbf)=""/65) socketpair(0x11, 0x8000f, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc000, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0xffff) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 2018/04/18 20:45:21 executing program 0: clone(0x3ffe, &(0x7f00008dcfff), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000002000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x3, 0x20, 0x601, 0x23, "af2abd5820a48420623760088f746e423c65e6ebccdf156554510c58262b827e"}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}, 0x79, r1}) 2018/04/18 20:45:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001280)={0x0, @in={{0x2, 0x4e23}}, 0x7, 0x3368, 0x1, 0x1ff, 0x1}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000001340)=@sack_info={0x0, 0x7fff, 0x5}, &(0x7f0000001380)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000013c0)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x5, 0x0, 0xf8f, 0x6, 0x20}, &(0x7f0000001480)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x9c}, &(0x7f0000001500)=0xfee8) sendmsg$inet_sctp(r1, &(0x7f00000016c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="e112965326ec6adf8261a8edec51bf0ab0c39952b59bdc3b5994106f835c33e52dcf1cf678b5c5469e6259bc87bdf5b1a4980623ec6857effda52f4922c149b17a1eb7d57429172be098582d4f16f387b2f7df9b200983e92df6392cf3cd90843b4b05bed9466a66740630901e8418a67698688b9d53e30a1c709fa445dc82899d05f34094b159939e9ff0e5c6f1a0330449c1ff6df0fe2bebdc42852c18dcb0a8cf17dd9173ffd94e", 0xa9}], 0x2, &(0x7f0000001540)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7ff, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0x3, 0x201, 0xfffffffffffffff9, 0x7, 0xffffffffffffff54, 0x4, 0x400, r2}}, @init={0x18, 0x84, 0x0, {0x1, 0x0, 0x4, 0xf9c}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffffb, 0x0, 0x100000001, 0x1ff, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x204, 0x0, 0xff, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x8, 0x0, 0x2, 0x5, 0x8, 0x8, 0x8, r5}}, @init={0x18, 0x84, 0x0, {0x6, 0x10000, 0x23, 0x401}}], 0x150, 0x8000}, 0x4004004) syncfs(r0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001700)={r3, 0x7d, "2207e541ee2fb95c105b204da1c6ce335ec4fa3c935328126befa85dbafdb5d7b2f27d7433e5ec6f91ed04d92ac14e5eea25796db2e141659d671d06585f2f9e96ab83072f50208f207f222f19848928239a3ec44c098c0ee943f0ed10c9be2b94926ab1c33405b3901a501f4f1abd2d16b0508dd01a062c483f158574"}, &(0x7f00000017c0)=0x85) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000001800)=r7) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000001b00)=@hci={0x1f}, 0xc, &(0x7f0000001bc0), 0x314, &(0x7f0000003000)}}], 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 2018/04/18 20:45:21 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x80}, 0x1}, 0x0) 2018/04/18 20:45:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)=@acquire={0x1ac, 0x17, 0x21, 0x0, 0x0, {{@in=@multicast2=0xe0000002}, @in6=@local={0xfe, 0x80, [], 0xaa}, {@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}, {{@in6=@loopback={0x0, 0x1}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@dev={0xfe, 0x80}, 0x0, 0x2b}, 0x2, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in6=@ipv4={[], [0xff, 0xff]}}, 0xa, @in6=@local={0xfe, 0x80, [], 0xaa}}]}]}, 0x1ac}, 0x1}, 0x0) 2018/04/18 20:45:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000000000003, 0x1009) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x19, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, &(0x7f00000affa0), {[{{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@DSCP={0x28, 'DSCP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000012c0)={0x0, @broadcast, @multicast2}, &(0x7f0000001300)=0xc) clone(0x0, &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)) [ 72.215228] ================================================================== [ 72.222707] BUG: KMSAN: uninit-value in netlink_sendmsg+0xb26/0x1310 [ 72.229225] CPU: 1 PID: 5807 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 72.236078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.245544] Call Trace: [ 72.248164] dump_stack+0x185/0x1d0 [ 72.251824] ? netlink_sendmsg+0xb26/0x1310 [ 72.256167] kmsan_report+0x142/0x240 [ 72.260024] __msan_warning_32+0x6c/0xb0 [ 72.264115] netlink_sendmsg+0xb26/0x1310 [ 72.268295] ? netlink_getsockopt+0xc80/0xc80 [ 72.272825] ___sys_sendmsg+0xec0/0x1310 [ 72.276932] ? __fdget+0x4e/0x60 [ 72.280327] ? __fget_light+0x56/0x710 [ 72.284229] ? __fdget+0x4e/0x60 [ 72.287613] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 72.292996] ? __fget_light+0x6b9/0x710 [ 72.296992] SYSC_sendmsg+0x2a3/0x3d0 [ 72.300816] SyS_sendmsg+0x54/0x80 [ 72.304409] do_syscall_64+0x309/0x430 [ 72.308311] ? ___sys_sendmsg+0x1310/0x1310 [ 72.312645] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.317844] RIP: 0033:0x455329 [ 72.321039] RSP: 002b:00007f33494f4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.328761] RAX: ffffffffffffffda RBX: 00007f33494f56d4 RCX: 0000000000455329 [ 72.336046] RDX: 0000000000000000 RSI: 0000000020004fc8 RDI: 0000000000000013 [ 72.343329] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 72.350621] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.357913] R13: 00000000000004f1 R14: 00000000006fa738 R15: 0000000000000000 [ 72.365201] [ 72.366842] Local variable description: ----address@___sys_sendmsg [ 72.373157] Variable was created at: [ 72.376903] ___sys_sendmsg+0xd3/0x1310 [ 72.380898] SYSC_sendmsg+0x2a3/0x3d0 [ 72.384699] ================================================================== [ 72.392059] Disabling lock debugging due to kernel taint [ 72.397524] Kernel panic - not syncing: panic_on_warn set ... [ 72.397524] [ 72.404914] CPU: 1 PID: 5807 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 72.413065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.422430] Call Trace: [ 72.425050] dump_stack+0x185/0x1d0 [ 72.428701] panic+0x39d/0x940 [ 72.431937] ? netlink_sendmsg+0xb26/0x1310 [ 72.436277] kmsan_report+0x238/0x240 [ 72.440099] __msan_warning_32+0x6c/0xb0 [ 72.444186] netlink_sendmsg+0xb26/0x1310 [ 72.448355] ? netlink_getsockopt+0xc80/0xc80 [ 72.452876] ___sys_sendmsg+0xec0/0x1310 [ 72.456957] ? __fdget+0x4e/0x60 [ 72.460339] ? __fget_light+0x56/0x710 [ 72.464237] ? __fdget+0x4e/0x60 [ 72.467618] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 72.473020] ? __fget_light+0x6b9/0x710 [ 72.477025] SYSC_sendmsg+0x2a3/0x3d0 [ 72.480857] SyS_sendmsg+0x54/0x80 [ 72.484418] do_syscall_64+0x309/0x430 [ 72.488333] ? ___sys_sendmsg+0x1310/0x1310 [ 72.492688] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.497902] RIP: 0033:0x455329 [ 72.501107] RSP: 002b:00007f33494f4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.508840] RAX: ffffffffffffffda RBX: 00007f33494f56d4 RCX: 0000000000455329 [ 72.516127] RDX: 0000000000000000 RSI: 0000000020004fc8 RDI: 0000000000000013 [ 72.523415] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 72.530706] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.537995] R13: 00000000000004f1 R14: 00000000006fa738 R15: 0000000000000000 [ 72.545872] Dumping ftrace buffer: [ 72.549416] (ftrace buffer empty) [ 72.553111] Kernel Offset: disabled [ 72.556717] Rebooting in 86400 seconds..