INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. 2018/04/07 00:10:00 fuzzer started 2018/04/07 00:10:00 dialing manager at 10.128.0.26:38639 2018/04/07 00:10:06 kcov=true, comps=false 2018/04/07 00:10:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a000000000000000000000008001500060000000800160004000200"], 0x1}, 0x1}, 0x0) 2018/04/07 00:10:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x40, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 'ip6_vti0\x00'}) 2018/04/07 00:10:08 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 2018/04/07 00:10:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x800) ioctl(r0, 0x4000000001260, &(0x7f0000000100)) 2018/04/07 00:10:08 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:08 executing program 6: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000140)=0xffffffffffffff4b) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x100000001, 0x10001, 0x2}}], 0xffffffffffffffed) 2018/04/07 00:10:08 executing program 1: personality(0x0) syzkaller login: [ 44.688255] ip (3900) used greatest stack depth: 53656 bytes left [ 46.614562] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.845899] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.858087] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.903476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.918719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.959392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.079760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.122799] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.418562] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.527873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.636689] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.720980] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.778873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.801100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.842137] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.063970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.151635] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.157923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.167709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.326184] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.332432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.348108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.403972] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.410221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.424311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.458945] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.465197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.480282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.511440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.520093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.541551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.584083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.590587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.606252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.669163] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.675415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.687014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.912946] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.919513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.927548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 00:10:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x14040004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f000097cffc)=0x7ffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r1, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 57.435238] : renamed from bcsh0 2018/04/07 00:10:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f000066b000)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/07 00:10:25 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:25 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r0, &(0x7f0000014000)=0x400000, 0x4bea) [ 57.808809] : renamed from bcsh0 2018/04/07 00:10:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x14e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x1cc, 0xc870a3c305c5634f, &(0x7f0000257ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000240)=""/2, 0x2, 0x40000003, 0x0, 0x0) 2018/04/07 00:10:25 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) utimes(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}) unlink(&(0x7f0000f86000)='./control/file0\x00') close(r0) 2018/04/07 00:10:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffb}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) dup2(r0, r1) 2018/04/07 00:10:26 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:26 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00080000ec050000130200001200000000090000000200000001000024d96443e10000001e000000000000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[]) 2018/04/07 00:10:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/07 00:10:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000400)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000540)='net/dev_mcast\x00') 2018/04/07 00:10:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f000066b000)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 2018/04/07 00:10:26 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f000066b000)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 59.015743] : renamed from bcsh0 2018/04/07 00:10:27 executing program 2: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x3, 0x2032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfd3000)=nil, 0xfd3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/07 00:10:27 executing program 6: r0 = socket(0x20000000000000a, 0x3, 0x8) connect$inet6(r0, &(0x7f00005b1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 2018/04/07 00:10:27 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000140), &(0x7f0000000240)=0x8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000300)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000002c0)='-', 0x1, 0xc0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000017c0)="5be3639f32e604bf11300cfab4dbb055d2f5b6059bb32379222b7bf674ead94ab84ab9ff94283fb22bdc3d4eb669ea8ac6320f9cbf2cec896aa886876c40be56e5b02d96a18de577a2ff338f26c8d4e1e4ed9131a602c43d283f884559ff54ac0ebb18f1eb6e0f0adf89ed9af74277d38985300975eed49764260354a574666582d97356a21e9b569f0096d4bfc3b5ddc70377f6a6b80196434697061c88962b82191a1013d01aa910be17a09ec250b5c0d53eb22d48809af9073d0ec96832eec616ee3cc3670886ee99e6d947c98825dc519ab4bca71da69051d4416c5ce748a907fe4f82d900d93e73daabbfb321f4993116f7e5d55b83054a31cd729c1cacfafb304efbd7911c4beb953670601634f1fb334c46843f79747d3c6218073b88ba86b1a26c373fdb81e496a97f13949fdbf2d325c3843eb361dfe439d2c0c20a2e8603d7c6eaef4a4c3a36f4bd5cc40fee0293b2989890fd901f9b01c869982ebb67a42c1cd11ca40a9412ae09b1fbaca8eaf9fda16500b265edd756a21523d7a2f49b3b8718719498d7807f96c076842fd488de7b565d5e4fb91c0796194e06e4f941dc5ac8942abad3d6941b4f38e26a3c836020b1d2d79ff8e9f3008f3b3d9be7d800d5ed3d89c8e53cf26f271500ee96aa9c73ed07834edccdf1dfdae205124109912a87a18fcf72a802e8c48899f212d4404c142095c3b9083d0c6a1fba11b12575ba5f86dda93777cc563882a2071508edd354b3ed1a062d50c3dd31f52e9205206b949c2f6330a3c38ee966878737bfccdadb6d2f57db170d7eed32c8b0a0d7c2be9c7312091f4d5c545ccc8835f9cb0c89d65dc4ae34213655c88b20f352a2c6999d57a12e9d1a4fdc78be6a23716c3fe03f4b3fcf868a8699e3fcb3f761e98e25e1182b8fa23c8dbf8da0e90ab1915b6873a2db3c1e5eecbf55175c345c6b2a6c61ceff5d824942d06afb33f4762be7df1f06bd6a4318309370fc469d832d6fcf2fbbb1618d92e0367762c5c2ccf14eeea985a2afcb39e166d58c97da61ec4dba0f43a683e4b18cb495b8a9088a37af4a2b1ee4d66778c58b7ef00ab20d23e71167be3054db5aa7ff5d1fdf904f6352bd3bfa7fe5e7454134892749b9f651cb55dcdba28701df74194c020d46c947c2c7883b2d8138720f207631108e858642a5dab5aca33286d6c1a0e1cbfac798bc97191f785c3bedc0f97009c7846548c7e31af2a9af446b92966bfc7c1b269ee84bd816cc1e6a003357170179f1d514d877201acd23662f0a9a2e82d7a6ca87ac126495790b74db0e4d8297cf6f0e88574658bdef1572131c498464065fc80f04c2fc5e5f1ff98311ac6899b79a98a347b9fbc311517cf121e28f1ca5309780cfd4cfe2209f38e335f6594f05ba5e0878675f3d1d79304bcfa2dd5abb6c634067a3176d92609fec47a6039b9ca249669278de55d9b8adfc9315c3605b47366d4398e33e5d283dce5a363b9abbc6694f393ffbc4c26422d9b568498915df6492c5b95c5f297e54f2bf4ffb52144f505a714a69180a9f293a5ad4a810242362c6d356c5707965ab6f9340e05bf27c1f3c531b1ef7c9b0d40744f87c1311dc8d531c1b97070db0dd942f6fc8612b0f21470a7ce7087afdc22e8e1cbd9e88b0b0a1eeb4e55071a83b73aef7ccf732787d8d454885769e9958d02f6b1a0bccc83b1a122ea41c6b2437a968e4d4a45758018fa8a1199e8cfc3948608a6ad2bc2906d78486043a9397dc038b05de4314061a25a6b0ecfb72c2dbc6a3c2964359b74bb970eb0a3a793cd81d0b24b9398e18d88dacc97217cb15a9e2bcb2a2368f13ce3045b17e9bc01cd0de8f04110afede75a53d7354949febbb1d05d199015c88b7b73de2c59d738e9e04408af5e16477cbb14cd4fc03e20d2fe1a75407a55a9e86ffa59d684dee7217efc5d8c4b2c231464ad83b14f6c554bf526ff060bfeb41e072fa8e169edcb0f5153bcd20c5cd072e59a9f8f63a8e0e9052ae7c71d6a7f456e40f92b71589b26fd14e054ece2d0e36f247c86991f3a32e11354fd998f1f91139255e68fed3d98718caa075e190321002fe2c204dccb08fca40d3e050c07ef7eada81b8e5bdf6fc6d9f778be3c4923ddf4fa4a0d15ef9c7e69eb987b5e9de8ec6370a456606e69eea14255a65b36740a3ffc9a8f950ec4ff4668f89bf995728dc4fa927d136c498bb8f244c59d028b715e941748fed3d0ef2c01f20b63b955e447a0c557434d8cef0135f219fbbba902f1f9c20e217a3da6da61de4b14dc7b7335563418f6482f97787aaf0a448a305197884f342059c6eab0589391ffaf99e89e2bc79721f02231a89aa8a1b86549119b2f653d903fe89aa7e845736a5329af31205571fb9e3014fa1aace8625f74fc82e78abc2b4b2edcaa6f71572f18fd50a480c38e3f79f13c25215aacb1411366455435631aea7e0cb1147b487bd1d862c1d96342dfea945bf3908340c60e2c50167c28a33e27f258b895d16149374332b9334f5127a996d76de6bb0ba2e666cd30fbd81e4ff5fb7ce562e30272eee8252d1a3e5141e8795b8d83b33e0189ae7d17e6947b3ce700df845f9f70982d7ff3b9cee7b0826c94099f79e6235bd55ba05f56608c8370f9e72b3aaa27a560674011b29d7991fefc1e592605773ca255564fcc77a0ca40e65b52a29e080b816d44acaf620b35ed67afeaf179337fe6f9edbfd3750195dda2028eb23abe7a43e0ccefc7793c667a103c9357365bcad70e4e6c70e093a2ce9c4a8a3a84f2824acf7f56597c69a35cca2b3a36aa9d8a338daad455d03fd37b7f182b2b2d5960df58331f36ce232e1a4bd1c99310d818feb772f2514d0c33c8ffbf33babdfdc00b6c6d4941fd713e552517391d72c4322ca667bf3fdc5e8b6a8aaa2c5b703a1b43fa0913277bc54bd8677826ecb0fc05a3ff1807ef2f1b2c4ae52d68bb98cf45e0f85c153374f05aacaddad70d1ddbb9bbfb74ee03cc0d902eeb0df527f544c134c1cf20f3acd0eaed6fab2970d1055e296aa74cac32327866ee427751b1ff0cbf202a40e2499b1d13dc9f4da7682b1a86f2cbe8b3f860df06cc83a1ed0cecfcc5db318e853ac84f22ccb34870dc267a2346e2c6b1c5aab6a410ea9e71a24b38365a4394a099e6dbd26604c52944c98cc29c5707958d9cc36a477a73cdc8aa4d241c2bd69bfd023005ad17b2d3dce5ceb9e0f35274645e5316b4e3ba0f167b2b429df89357d3389a63dde9d9d093105d4507ef54d3fe28bc6d21cf76aa7491dd3f8d4af882ce1bc87c96bfdb8708218b2eaa3f6d588a96bfc9e5289c92252ccdee06c0f17b31ff05b0a6d8bdfc0c5ecd62410ec83dd6a3284d056660a86e57130cfea4b83d54f3b736f648e4a033982b3801f2baf911ecd6d66a450e0c8353e4464e87b17b0d841ae1b27bd63a8fb378bb2c3810e56d86722de360feed17f0589a7abc8ad0747acd73106c0d981058b248762a97ff01be494909e7ede2987186d1736895542b6799b2c27a1093f8eeed9d9caa101c516427c23db8a76331404afa1749066990b38a2b0a327bed0148813701dbff4bad92efe2183bd9ed825729af76d0bacbb0dad86343584ae06ad1423980fa7983fb760726be58245ed3256b1cc45e38d13d917576886c0621480ec55ada51a0d8b2a1874794b1daf8d068f0d361c9763b7bb8a0fb9baecbad6a4e1b856109123e7765c7f57fda937be9dc6a29cf9a50b5af05084d543e83d37ca083b974ade4948be05e41e1229454ea5eec2541152a36ce5dc53e5e8121bef898f7d35e5676e09629df000f1b277ef9c5a47107417b85d5b8231ff8ba6e0cb8d1ac440f68b056ee1499b881059402dcd19d8417972e34cffcaba8e43368cee7f6aaf188b014d79693ce87f539cbc292f59e1dc7dd8c59a76e77f4517b601f9e4bc74db6000cfeca7fca56beac1f78ca0e1e6c7890612a03fcb5ac9550aca613fc8a70923d827076678ee95de1d9ed3ba317ac8d259b036ad7586d3b737169285fe80773cbf3c67df0fbccf10c29cedb9522e176a0ed9ddaf2b7345f4785b7ee9f12e1d6b43dda89cedf65ef45bdd2289580a98df450e57711d995ef49bb268c37217219246e5ede6b622a1cdae8f87549d000f46d20b2a0545ce4f1bca9ac86658d9664be6db4cd7e27ba66fb1356ebc6870e944fd1a8df9bea75d8cd0733cdb737f58fcf7f4238fe0528866962dc63cbdeaaf8c796154a954b9ff165b5c79b08099f86d290302196d305edf24ffc12cc3cf9894a3b226bb18570f3db645b860ba0ca55d8b2e9d0199c5b555068780fe6e641fa30d0717997f2dab2cc342fd18c568487008f72d84d45cf9483434517aaddfde92791add8001a41636e75c2cc2930a4469d41fc7782998625e2e6a2a97349ff407a359489f82c05ff6cf93b176ccc24bd75fc9b20bad", 0xc47}], 0x1, &(0x7f0000000a40)=ANY=[]}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff}, 0x14) sendto$inet(r0, &(0x7f0000000180)="92", 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/07 00:10:27 executing program 7: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, "7175657565310000000000000000000000efff003e09000000000000000000000000000000000000000000000000002e2800000016cc00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @tick=0x7, {}, {}, @control}], 0x30) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001"], 0x5}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x312}) 2018/04/07 00:10:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffb}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) dup2(r0, r1) 2018/04/07 00:10:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r3, &(0x7f00000013c0), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 2018/04/07 00:10:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000021fc8)={0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000000100)}, 0xc0ff) 2018/04/07 00:10:27 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xf3, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_deladdr={0x2c, 0x15, 0x301, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0) [ 59.959760] : renamed from bcsh0 2018/04/07 00:10:28 executing program 0: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/146, 0x410e}], 0x3f2) clock_nanosleep(0x400000000002, 0x1, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000180)) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000001c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2018/04/07 00:10:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:28 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00009d5ff0)=[{&(0x7f0000882000)=""/96, 0x60}], 0x1, 0x53) 2018/04/07 00:10:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffb}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) dup2(r0, r1) 2018/04/07 00:10:28 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, 0x0, 0x0, 0x0, 0x0, 0xfff}, &(0x7f0000000080)=0xfffffffffffffe45) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0xa, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x40) 2018/04/07 00:10:28 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd8000)={0x77359400}, &(0x7f0000000080), 0x0) 2018/04/07 00:10:28 executing program 6: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, "7175657565310000000000000000000000efff003e09000000000000000000000000000000000000000000000000002e2800000016cc00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x3, 0xfffffffffffffffe, 0x0, @tick=0x7, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x312, @tick=0x9}) 2018/04/07 00:10:28 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000100)=""/26, 0x1a) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') 2018/04/07 00:10:28 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:28 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x3f) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000557fc8)={&(0x7f0000e3aff0)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000b03000)=[{&(0x7f00007fd000)='^', 0x1}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000000100)=""/58, 0x3a, 0x0, 0x0, 0x0) 2018/04/07 00:10:28 executing program 5: syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:28 executing program 7: r0 = socket(0x400000000000010, 0x803, 0x0) write(r0, &(0x7f0000000040)="240000001a0099f0eb3ae90000ed190e020808020000000000dd0080080001007f196be0", 0x24) 2018/04/07 00:10:29 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:29 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000280)="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", 0x10e, 0x20220203, &(0x7f0000000240)={0x2, 0x1fffe, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/244, 0xffffffffffffff94, 0x40000022, 0x0, 0x0) 2018/04/07 00:10:29 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)='.', 0x1}], 0x1, &(0x7f0000001540)}], 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 2018/04/07 00:10:29 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/07 00:10:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000007c0), 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}, 0x1}, 0x0) 2018/04/07 00:10:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast=0xffffffff}, @IFA_ADDRESS={0x8, 0x1, @broadcast=0xffffffff}]}, 0x28}, 0x1}, 0x0) 2018/04/07 00:10:29 executing program 1: r0 = socket(0x2, 0x2000000000000005, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[]}, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[]}) 2018/04/07 00:10:29 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:29 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x3f) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000557fc8)={&(0x7f0000e3aff0)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000b03000)=[{&(0x7f00007fd000)='^', 0x1}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000000100)=""/58, 0x3a, 0x0, 0x0, 0x0) 2018/04/07 00:10:29 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:29 executing program 7: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000fb9000)=@sco, 0x80, &(0x7f0000e9c000)=[{&(0x7f0000000300)=""/219, 0x45f}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000466000)=""/4096, 0x1000}, {&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f0000ba9fd5)=""/43, 0x2b}, {&(0x7f0000820000)=""/185, 0xb9}, {&(0x7f0000000200)=""/243, 0x216}, {&(0x7f00001b1ffd)=""/53, 0x35}], 0x9, &(0x7f0000000180)=""/81, 0x23}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2018/04/07 00:10:30 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000a5c000), 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058eff0)) 2018/04/07 00:10:30 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x3f) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000557fc8)={&(0x7f0000e3aff0)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000b03000)=[{&(0x7f00007fd000)='^', 0x1}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000000100)=""/58, 0x3a, 0x0, 0x0, 0x0) 2018/04/07 00:10:30 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:30 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00'}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:30 executing program 0: r0 = getpgrp(0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00003efff0)) 2018/04/07 00:10:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f00003ad000)=ANY=[], &(0x7f00008f1ffc), 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000001480)={'yam0\x00'}) 2018/04/07 00:10:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000013c0), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) [ 62.259279] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/07 00:10:30 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x3f) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000557fc8)={&(0x7f0000e3aff0)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000b03000)=[{&(0x7f00007fd000)='^', 0x1}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000000100)=""/58, 0x3a, 0x0, 0x0, 0x0) 2018/04/07 00:10:30 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) [ 62.738333] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/07 00:10:30 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x3f) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x4) recvfrom(r0, &(0x7f0000000100)=""/58, 0x3a, 0x0, 0x0, 0x0) 2018/04/07 00:10:30 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r1, &(0x7f0000632000), 0x42, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, &(0x7f0000efaffc)) recvmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000040)=@can, 0x3ad, &(0x7f00000002c0)}, 0x0) 2018/04/07 00:10:30 executing program 0: r0 = socket$packet(0x11, 0x2000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) 2018/04/07 00:10:30 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1}) 2018/04/07 00:10:30 executing program 1: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@l2, 0xe, &(0x7f0000000180)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/138, 0x81}, {&(0x7f0000000240)=""/233, 0xffffffe5}], 0x4, &(0x7f0000000180)=""/4096, 0x10ea}, 0x0) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100), 0x49, &(0x7f0000000200)}, 0x0) 2018/04/07 00:10:30 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6e65742f73797a310456be4b42c5c4dbe0403bf1ecc4506928f2944fae41f0caeb5a21ca5d546faa7422ea518725e92828382ead353029f494266db4b9451f19bccc9b20f6c3cba32425abd3a9b19e7bbaea1d791bba161d4a0609450ae1ca562b22f3d0372000000081f08f13b193084f5dedfbed46c8829d53ef1577ca03b1dea73a714ee3ebf04a81352334fd633a94fe6affcb2cbec1d2f91c6b91b5cd35a1", 0x1ff) 2018/04/07 00:10:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:30 executing program 7: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, "7175657565310000000000000000000000efff003e09000000000000000000000000000000000000000000000000002e2800000016cc00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x3, 0xfffffffffffffffe, 0x0, @tick=0x7, {}, {}, @control}], 0x30) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040101ffffffffff33ee00000400000c000100010000007f0300010c8002000000000002000000"], 0x2c}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x312, @tick=0x9}) 2018/04/07 00:10:30 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_cache\x00') lseek(r0, 0x80, 0x0) 2018/04/07 00:10:30 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00'}) 2018/04/07 00:10:30 executing program 7: syz_mount_image$msdos(&(0x7f0000000440)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7ff, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000540)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x1000080, &(0x7f0000000500)=ANY=[]) open(&(0x7f0000000300)='./file0/fil.0\x00', 0x800000000002040, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/07 00:10:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2018/04/07 00:10:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:31 executing program 4: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/146, 0x410e}], 0x3f2) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/04/07 00:10:31 executing program 7: syz_mount_image$msdos(&(0x7f0000000440)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7ff, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000540)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x1000080, &(0x7f0000000500)=ANY=[]) open(&(0x7f0000000300)='./file0/fil.0\x00', 0x800000000002040, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/07 00:10:31 executing program 6: perf_event_open(&(0x7f00006d7000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa0100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) 2018/04/07 00:10:32 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f0000049ff0), &(0x7f0000a2a000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000a95000/0x2000)=nil, 0x2000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f000040b000/0x1000)=nil, 0x1000}) 2018/04/07 00:10:32 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x3f) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x4) recvfrom(r0, &(0x7f0000000100)=""/58, 0x3a, 0x0, 0x0, 0x0) 2018/04/07 00:10:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x300, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x2bf, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, &(0x7f0000ef8fd0), 0x1, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) 2018/04/07 00:10:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="2e2d764f97057c489526b2a5199797fd", 0x10}], 0x1, &(0x7f0000001540)}], 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 2018/04/07 00:10:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000036c0)="88", 0x1}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r1, &(0x7f0000002500)={&(0x7f0000003880)=@un=@abs, 0x80, &(0x7f0000003900)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1, &(0x7f0000002580)=""/246, 0xf6}, 0x0) 2018/04/07 00:10:32 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x49) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/07 00:10:32 executing program 1: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@l2, 0xe, &(0x7f0000000180)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/138, 0x81}, {&(0x7f0000000240)=""/233, 0xffffffe5}], 0x4, &(0x7f0000000180)=""/4096, 0x10ea}, 0x0) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100), 0x49, &(0x7f0000000200)}, 0x0) 2018/04/07 00:10:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:32 executing program 4: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000400)=0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xfffffffffffffff9}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/07 00:10:32 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x49) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/07 00:10:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="2e2d764f97057c489526b2a5199797fd", 0x10}], 0x1, &(0x7f0000001540)}], 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) 2018/04/07 00:10:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000014c0), 0x4) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/4096, 0x1000}, 0x0) 2018/04/07 00:10:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000468ff1)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/07 00:10:32 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@l2, 0xe, &(0x7f0000000180)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/138, 0x81}, {&(0x7f0000000240)=""/233, 0xffffffe5}], 0x4, &(0x7f0000000180)=""/4096, 0x10ea}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x5, 0x7fff}, 0x14) sendto$inet(r0, &(0x7f0000000240)="8292", 0x2, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) [ 64.779520] ================================================================== [ 64.786956] BUG: KMSAN: uninit-value in move_addr_to_user+0x32e/0x530 [ 64.793536] CPU: 0 PID: 5415 Comm: syz-executor0 Not tainted 4.16.0+ #81 [ 64.800364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.809702] Call Trace: [ 64.812291] dump_stack+0x185/0x1d0 [ 64.815918] ? kmsan_internal_check_memory+0x145/0x1d0 [ 64.821193] kmsan_report+0x142/0x240 2018/04/07 00:10:32 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x34123610) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000c00)={'erspan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14}}}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc008641d, &(0x7f0000000bc0)={0x0, &(0x7f0000000dc0)=""/4096}) [ 64.824997] kmsan_internal_check_memory+0x164/0x1d0 [ 64.830100] kmsan_copy_to_user+0x69/0x160 [ 64.834341] move_addr_to_user+0x32e/0x530 [ 64.838593] ___sys_recvmsg+0x4e2/0x810 [ 64.842575] ? __fget_light+0x56/0x710 [ 64.846487] ? __fdget+0x4e/0x60 [ 64.849856] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 64.855217] ? __fget_light+0x6b9/0x710 [ 64.859202] SYSC_recvmsg+0x298/0x3c0 [ 64.863006] SyS_recvmsg+0x54/0x80 [ 64.866547] do_syscall_64+0x309/0x430 [ 64.870439] ? ___sys_recvmsg+0x810/0x810 [ 64.874609] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 64.879802] RIP: 0033:0x455259 [ 64.882985] RSP: 002b:00007fe2236cdc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 64.890693] RAX: ffffffffffffffda RBX: 00007fe2236ce6d4 RCX: 0000000000455259 [ 64.897957] RDX: 0000000000000000 RSI: 00000000200013c0 RDI: 0000000000000013 [ 64.905219] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 64.912484] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 64.919750] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 64.927012] [ 64.928627] Local variable description: ----addr@___sys_recvmsg [ 64.934663] Variable was created at: [ 64.938375] ___sys_recvmsg+0xd5/0x810 [ 64.942255] SYSC_recvmsg+0x298/0x3c0 [ 64.946034] [ 64.947654] Bytes 8-15 of 16 are uninitialized [ 64.952216] ================================================================== [ 64.959558] Disabling lock debugging due to kernel taint [ 64.964999] Kernel panic - not syncing: panic_on_warn set ... [ 64.964999] [ 64.972361] CPU: 0 PID: 5415 Comm: syz-executor0 Tainted: G B 4.16.0+ #81 [ 64.980490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.989834] Call Trace: [ 64.992429] dump_stack+0x185/0x1d0 [ 64.996059] panic+0x39d/0x940 [ 64.999274] ? kmsan_internal_check_memory+0x145/0x1d0 [ 65.004557] kmsan_report+0x238/0x240 [ 65.008370] kmsan_internal_check_memory+0x164/0x1d0 [ 65.013474] kmsan_copy_to_user+0x69/0x160 [ 65.017718] move_addr_to_user+0x32e/0x530 [ 65.021965] ___sys_recvmsg+0x4e2/0x810 [ 65.025948] ? __fget_light+0x56/0x710 [ 65.029831] ? __fdget+0x4e/0x60 [ 65.033199] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 65.038564] ? __fget_light+0x6b9/0x710 [ 65.042558] SYSC_recvmsg+0x298/0x3c0 [ 65.046371] SyS_recvmsg+0x54/0x80 [ 65.049911] do_syscall_64+0x309/0x430 [ 65.053801] ? ___sys_recvmsg+0x810/0x810 [ 65.057960] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 65.063576] RIP: 0033:0x455259 [ 65.066765] RSP: 002b:00007fe2236cdc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 65.074474] RAX: ffffffffffffffda RBX: 00007fe2236ce6d4 RCX: 0000000000455259 [ 65.081742] RDX: 0000000000000000 RSI: 00000000200013c0 RDI: 0000000000000013 [ 65.089011] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 65.096278] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 65.103542] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 65.111219] Dumping ftrace buffer: [ 65.114744] (ftrace buffer empty) [ 65.118425] Kernel Offset: disabled [ 65.122025] Rebooting in 86400 seconds..