[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   29.970714] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   31.427381] random: sshd: uninitialized urandom read (32 bytes read)
[   31.775322] random: sshd: uninitialized urandom read (32 bytes read)
[   33.377914] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts.
[   38.866987] random: sshd: uninitialized urandom read (32 bytes read)
2018/05/30 02:06:06 fuzzer started
2018/05/30 02:06:07 dialing manager at 10.128.0.26:43907
[   42.580524] random: crng init done
[   61.439182] can: request_module (can-proto-0) failed.
[   61.450083] can: request_module (can-proto-0) failed.
2018/05/30 02:06:31 kcov=true, comps=false
2018/05/30 02:06:35 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:06:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000107010000000000000000008fb7000008000100"], 0x18}, 0x1}, 0x0)

2018/05/30 02:06:35 executing program 7:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x1000)=nil, 0x1000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x1})

2018/05/30 02:06:35 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

2018/05/30 02:06:35 executing program 4:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x3)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa}, 0xb)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280))

2018/05/30 02:06:35 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000200))
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})

2018/05/30 02:06:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}})

2018/05/30 02:06:35 executing program 6:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000520000002000068e000000100000000000000000800120002000200000000000000000030000000020300000000000f000000000a0000000000000092ab000000000001020014bb000000000000000000000000030005000000000002000000e00000210000000002000000"], 0x80}, 0x1}, 0x0)

[   68.306239] IPVS: ftp: loaded support on port[0] = 21
[   68.537540] IPVS: ftp: loaded support on port[0] = 21
[   68.558241] IPVS: ftp: loaded support on port[0] = 21
[   68.579546] IPVS: ftp: loaded support on port[0] = 21
[   68.580798] IPVS: ftp: loaded support on port[0] = 21
[   68.612519] IPVS: ftp: loaded support on port[0] = 21
[   68.622404] IPVS: ftp: loaded support on port[0] = 21
[   68.633838] IPVS: ftp: loaded support on port[0] = 21
[   70.458653] ip (4716) used greatest stack depth: 54520 bytes left
[   71.111612] ip (4770) used greatest stack depth: 54280 bytes left
[   71.588568] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.595118] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.625640] device bridge_slave_0 entered promiscuous mode
[   71.843113] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.849585] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.863325] device bridge_slave_1 entered promiscuous mode
[   71.898727] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.905262] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.923325] device bridge_slave_0 entered promiscuous mode
[   71.974239] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.980700] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.026986] device bridge_slave_0 entered promiscuous mode
[   72.054564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.065132] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.071591] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.082503] device bridge_slave_0 entered promiscuous mode
[   72.103449] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.109938] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.139883] device bridge_slave_0 entered promiscuous mode
[   72.156871] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.163298] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.178793] device bridge_slave_0 entered promiscuous mode
[   72.193160] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.199599] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.225331] device bridge_slave_0 entered promiscuous mode
[   72.238854] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.245337] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.255988] device bridge_slave_1 entered promiscuous mode
[   72.268980] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.275425] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.288556] device bridge_slave_0 entered promiscuous mode
[   72.300730] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.307173] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.338560] device bridge_slave_1 entered promiscuous mode
[   72.354773] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.361259] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.372159] device bridge_slave_1 entered promiscuous mode
[   72.388481] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.394970] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.403060] device bridge_slave_1 entered promiscuous mode
[   72.410893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.422618] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.429117] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.459336] device bridge_slave_1 entered promiscuous mode
[   72.478664] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.485139] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.506152] device bridge_slave_1 entered promiscuous mode
[   72.514092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.523688] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.530119] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.552005] device bridge_slave_1 entered promiscuous mode
[   72.576506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.584649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.596733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.647686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.718216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.727469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.759549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.776940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.790129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.802286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.875396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.936426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.962553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   73.055517] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.293234] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.367505] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.424536] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.437541] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.472326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.481849] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.501571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.536269] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.572155] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.582291] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.605265] ip (4948) used greatest stack depth: 54232 bytes left
[   73.632577] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   73.649137] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.671467] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.705484] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.715497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   73.722448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.786675] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.795830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.805010] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.812764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.889345] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   73.909328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.917745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.924660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.954291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.007476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.020342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.043730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.051236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.059337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.098720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.126336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.134657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.150694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.160488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.181532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.190138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.207127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.220816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.250860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.258376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.265557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.282450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.310222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.321274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.380991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.404201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.427131] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   74.457112] team0: Port device team_slave_0 added
[   74.697897] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   74.710648] team0: Port device team_slave_1 added
[   74.754310] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   74.776513] team0: Port device team_slave_0 added
[   74.829612] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   74.860808] team0: Port device team_slave_0 added
[   74.885688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   74.907012] team0: Port device team_slave_0 added
[   74.929982] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   74.941757] team0: Port device team_slave_0 added
[   74.952621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   74.965809] team0: Port device team_slave_0 added
[   74.982222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   75.006722] team0: Port device team_slave_0 added
[   75.020934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.028823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.039736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.061668] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   75.073011] team0: Port device team_slave_1 added
[   75.098184] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   75.113341] team0: Port device team_slave_1 added
[   75.120426] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   75.131807] team0: Port device team_slave_1 added
[   75.154945] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   75.172351] team0: Port device team_slave_1 added
[   75.178719] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   75.189136] team0: Port device team_slave_0 added
[   75.201165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.211834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.226899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.261328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   75.274843] team0: Port device team_slave_1 added
[   75.293103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   75.306415] team0: Port device team_slave_1 added
[   75.328528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.336926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.353880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.368089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.375643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.385155] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   75.401894] team0: Port device team_slave_1 added
[   75.408702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.425628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.449232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.477130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.498929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.517734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.537627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.548817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.564017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.579241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   75.587115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.595531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.603656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.624724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.652516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.666969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.684925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.693110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.700882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.710957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.725596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.734592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.742656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.765373] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   75.777539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.787884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.799497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.809189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   75.816585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.829407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.861590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.888864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.913693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.923747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.940564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.954550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.962240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.970263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.978863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.985762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.994351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.020101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   76.028863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   76.037097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   76.045366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.066431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.093813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.113982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.130578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.138704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.151486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   76.160542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   76.182517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   76.196708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.213992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.234145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.251394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.269003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.278880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.289658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   76.297480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   76.305330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.314229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.322590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.332763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.341609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   76.349767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   76.365500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   76.376473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.400316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.426548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.450528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.464466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.480985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.513720] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   76.527382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.552100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.593369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   76.603759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.621844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.655578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   76.664166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.693985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.501250] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.507727] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.514544] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.520968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.573822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   78.580369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.609187] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.615649] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.622430] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.628860] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.683887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   78.694954] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.701398] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.708170] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.714575] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.737793] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   78.752520] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.758976] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.765765] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.772361] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.802330] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   78.813151] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.819582] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.826321] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.832712] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.842613] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   78.853159] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.859577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.866306] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.872729] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.905954] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   78.942880] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.949344] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.956184] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.962619] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.025352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   79.117807] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.124271] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.131096] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.137514] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.202376] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   79.585144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.606666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.638733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.653602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.661764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.669660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.677340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.009118] ip (5651) used greatest stack depth: 54104 bytes left
[   87.021368] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.058421] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.079846] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.134551] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.183636] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.246326] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.499939] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.697321] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.759823] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   87.841358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   87.909859] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   87.941614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   87.960943] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   88.064357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   88.255087] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   88.523397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   88.529700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.542111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.582701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   88.641877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   88.650822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.658962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.690209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   88.699170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.709312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.736011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   88.753378] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   88.768272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.780167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.817872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.841366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.919853] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   88.926365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.941220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.082616] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   89.088973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.101233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.449293] 8021q: adding VLAN 0 to HW filter on device team0
[   89.541954] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   89.549873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.572909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.592951] 8021q: adding VLAN 0 to HW filter on device team0
[   89.608922] 8021q: adding VLAN 0 to HW filter on device team0
[   89.625324] 8021q: adding VLAN 0 to HW filter on device team0
[   89.650523] 8021q: adding VLAN 0 to HW filter on device team0
[   89.696770] 8021q: adding VLAN 0 to HW filter on device team0
[   89.822242] 8021q: adding VLAN 0 to HW filter on device team0
[   90.273126] 8021q: adding VLAN 0 to HW filter on device team0
2018/05/30 02:07:02 executing program 2:
r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000140)=""/137, 0x89)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0)

2018/05/30 02:07:02 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
syslog(0x9, &(0x7f0000000780)=""/115, 0x73)

2018/05/30 02:07:02 executing program 7:
r0 = socket(0x15, 0x80005, 0x0)
getsockopt(r0, 0x200000000114, 0x800000000002717, &(0x7f0000000140), &(0x7f00000001c0))

2018/05/30 02:07:02 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc, 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6)
syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x400)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8002, 0x0)

2018/05/30 02:07:02 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3ff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, &(0x7f00000000c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4)

2018/05/30 02:07:02 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000340)='rdma.max\x00', 0x2, 0x0)
pread64(r1, &(0x7f0000000280)=""/159, 0x9f, 0x0)

2018/05/30 02:07:02 executing program 5:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
truncate(&(0x7f0000000300)='./bus\x00', 0xa00)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/22, 0x16}], 0x1, &(0x7f0000004480)=[{&(0x7f0000003040)=""/5, 0x5}, {&(0x7f0000003080)=""/131, 0x83}, {&(0x7f0000003140)=""/56, 0x38}, {&(0x7f0000003180)=""/182, 0xb6}, {&(0x7f0000003240)=""/38, 0x26}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/182, 0xb6}, {&(0x7f0000004340)=""/137, 0x89}, {&(0x7f0000004400)}, {&(0x7f0000004440)=""/37, 0x25}], 0xa, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000100)=@nl, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/84}, {&(0x7f00000003c0)=""/181}], 0x0, &(0x7f0000000740)=""/4096, 0x0, 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/236}, {&(0x7f0000002f40)=""/68}, {&(0x7f0000000600)=""/28}, {&(0x7f0000001740)=""/219, 0xe9}, {&(0x7f0000000640)=""/25}], 0x0, &(0x7f0000001840)=""/174, 0x0, 0x5}, 0x9}, {{&(0x7f0000001900)=@sco, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000006c0)=""/48}, {&(0x7f0000001980)=""/4096}, {&(0x7f0000002980)=""/48}, {&(0x7f00000029c0)=""/73}, {&(0x7f0000002a40)=""/218}, {&(0x7f0000002b40)=""/86}], 0x0, &(0x7f0000002c00)=""/119, 0x0, 0xf592}, 0x7}, {{&(0x7f0000002c80)=@rc, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002d00)=""/90}], 0x0, &(0x7f0000002dc0)=""/247, 0x0, 0xc000000000}, 0x791}], 0x8000000000002a7, 0x0, &(0x7f0000004b80))
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000004580))
lseek(r0, 0x0, 0x2)
sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000004400)={<r2=>0x0, 0x30}, &(0x7f0000004500)=0xc)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000004540)={r2, 0xf3, 0x885, 0x200, 0x800, 0x3}, 0x14)
truncate(&(0x7f00000000c0)='./bus\x00', 0xf45)

2018/05/30 02:07:02 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
r1 = dup(r0)
sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@upd={0xe0, 0x12, 0x0, 0x0, 0x0, {{'md5-generic\x00'}}}, 0x257}, 0x1}, 0x40085)

2018/05/30 02:07:02 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7001, &(0x7f0000000040))

2018/05/30 02:07:02 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:03 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = socket$packet(0x11, 0x10000000002, 0x300)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r2=>0x0, 0x6, 0x9, 0x10001, 0x2, 0xffffffff}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x922, 0x8005, 0x2, 0x3, r2}, &(0x7f0000000180)=0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4)
r3 = socket(0x2, 0x1, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)

2018/05/30 02:07:03 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:03 executing program 7:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x40000000000004, 0x1, 0x0, 0x1}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000080)="01", &(0x7f00000001c0)=""/141}, 0x18)

2018/05/30 02:07:03 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0xa600, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0))

2018/05/30 02:07:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc, 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6)
syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x400)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8002, 0x0)

2018/05/30 02:07:03 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10)

2018/05/30 02:07:03 executing program 5:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
truncate(&(0x7f0000000300)='./bus\x00', 0xa00)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/22, 0x16}], 0x1, &(0x7f0000004480)=[{&(0x7f0000003040)=""/5, 0x5}, {&(0x7f0000003080)=""/131, 0x83}, {&(0x7f0000003140)=""/56, 0x38}, {&(0x7f0000003180)=""/182, 0xb6}, {&(0x7f0000003240)=""/38, 0x26}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/182, 0xb6}, {&(0x7f0000004340)=""/137, 0x89}, {&(0x7f0000004400)}, {&(0x7f0000004440)=""/37, 0x25}], 0xa, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000100)=@nl, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/84}, {&(0x7f00000003c0)=""/181}], 0x0, &(0x7f0000000740)=""/4096, 0x0, 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/236}, {&(0x7f0000002f40)=""/68}, {&(0x7f0000000600)=""/28}, {&(0x7f0000001740)=""/219, 0xe9}, {&(0x7f0000000640)=""/25}], 0x0, &(0x7f0000001840)=""/174, 0x0, 0x5}, 0x9}, {{&(0x7f0000001900)=@sco, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000006c0)=""/48}, {&(0x7f0000001980)=""/4096}, {&(0x7f0000002980)=""/48}, {&(0x7f00000029c0)=""/73}, {&(0x7f0000002a40)=""/218}, {&(0x7f0000002b40)=""/86}], 0x0, &(0x7f0000002c00)=""/119, 0x0, 0xf592}, 0x7}, {{&(0x7f0000002c80)=@rc, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002d00)=""/90}], 0x0, &(0x7f0000002dc0)=""/247, 0x0, 0xc000000000}, 0x791}], 0x8000000000002a7, 0x0, &(0x7f0000004b80))
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000004580))
lseek(r0, 0x0, 0x2)
sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000004400)={<r2=>0x0, 0x30}, &(0x7f0000004500)=0xc)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000004540)={r2, 0xf3, 0x885, 0x200, 0x800, 0x3}, 0x14)
truncate(&(0x7f00000000c0)='./bus\x00', 0xf45)

2018/05/30 02:07:03 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3ff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, &(0x7f00000000c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c)
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4)

2018/05/30 02:07:03 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0xa600, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0))

2018/05/30 02:07:04 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:04 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000107ffff0000000000000000000000a600000700"], 0x18}, 0x1}, 0x0)

2018/05/30 02:07:04 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020200090c000000fffeffffffffffff02001300020000000000000000000000030006000000000002004e20e0040001000000000000002402000100e00000010000000200000000030005000000000002004e20e00000010000000000000000"], 0x60}, 0x1}, 0x0)

2018/05/30 02:07:04 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = socket$packet(0x11, 0x10000000002, 0x300)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r2=>0x0, 0x6, 0x9, 0x10001, 0x2, 0xffffffff}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x922, 0x8005, 0x2, 0x3, r2}, &(0x7f0000000180)=0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4)
r3 = socket(0x2, 0x1, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)

2018/05/30 02:07:04 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0xffffff89, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000))

2018/05/30 02:07:04 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xfffffffffffffffe, 0xb10160154140070c)

[   96.158624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
2018/05/30 02:07:04 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x1, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="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", 0x218, 0x8000, &(0x7f0000000000)={0xa}, 0x1c)
close(r0)

2018/05/30 02:07:04 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
write$cgroup_pid(r0, &(0x7f0000000000)={[0x30, 0x39]}, 0x2)

2018/05/30 02:07:04 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0xffffff89, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000))

2018/05/30 02:07:04 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = socket$packet(0x11, 0x10000000002, 0x300)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r2=>0x0, 0x6, 0x9, 0x10001, 0x2, 0xffffffff}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x922, 0x8005, 0x2, 0x3, r2}, &(0x7f0000000180)=0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4)
r3 = socket(0x2, 0x1, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)

[   96.472831] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
2018/05/30 02:07:04 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:04 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$rdma_cm(r0, &(0x7f0000000ec0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r1=>0xffffffff}, 0x111}}, 0x20)
write$rdma_cm(r0, &(0x7f0000000000)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24}, r1}}, 0xffffffffffffffe5)

2018/05/30 02:07:04 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:04 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = socket$packet(0x11, 0x10000000002, 0x300)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r2=>0x0, 0x6, 0x9, 0x10001, 0x2, 0xffffffff}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x922, 0x8005, 0x2, 0x3, r2}, &(0x7f0000000180)=0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4)
r3 = socket(0x2, 0x1, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)

2018/05/30 02:07:04 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0xffffff89, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000))

2018/05/30 02:07:04 executing program 7:
r0 = socket$inet(0x2, 0x805, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
sendto$inet(r0, &(0x7f0000000200)="f1", 0x1, 0x0, &(0x7f000000bf00)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
recvmmsg(r0, &(0x7f000000bcc0)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/40, 0x28}}], 0x1, 0x0, 0x0)

2018/05/30 02:07:04 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr, @in6=@empty={[0xffffffffffffffff]}, 0x0, 0x0, 0x4}]}, 0x38}, 0x1}, 0x0)

2018/05/30 02:07:04 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000011000101000000000000000000000000000000000000000000000000000000000a00000014000d00e00000010000000000000000000026daac4d02a25de7a50000"], 0x1}, 0x1}, 0x0)

2018/05/30 02:07:04 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000))

2018/05/30 02:07:04 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:04 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0xffffff89, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000))

2018/05/30 02:07:04 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

2018/05/30 02:07:04 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

2018/05/30 02:07:05 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

2018/05/30 02:07:05 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7001, &(0x7f0000000040))

2018/05/30 02:07:05 executing program 1:
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f00000001c0), 0x0, 0x0)
r0 = socket(0x10, 0x2, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000040)="1f000000010101000100feff06110000f30501000800010001736759365742", 0x1f)

2018/05/30 02:07:05 executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)})

[   97.144907] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[   97.218183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[   97.862966] ==================================================================
[   97.870401] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800
[   97.876727] CPU: 1 PID: 6780 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #102
[   97.883986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   97.893345] Call Trace:
[   97.895939]  dump_stack+0x185/0x1d0
[   97.899592]  ? kmsan_internal_check_memory+0x116/0x1e0
[   97.904892]  kmsan_report+0x149/0x260
[   97.908685]  kmsan_internal_check_memory+0x135/0x1e0
[   97.913786]  kmsan_copy_to_user+0x75/0x160
[   97.918009]  ? _copy_to_iter+0x92/0x2800
[   97.922056]  _copy_to_iter+0x45f/0x2800
[   97.926013]  ? finish_wait+0x10a/0x3e0
[   97.930004]  vhost_chr_read_iter+0x7b3/0xc30
[   97.934419]  ? init_wait_entry+0x1a0/0x1a0
[   97.938661]  vhost_net_chr_read_iter+0xf6/0x130
[   97.943418]  ? vhost_net_exit+0x30/0x30
[   97.947382]  do_iter_readv_writev+0x84d/0xa00
[   97.951878]  ? vhost_net_exit+0x30/0x30
[   97.955849]  do_iter_read+0x303/0xd70
[   97.959633]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[   97.965076]  do_readv+0x295/0x5f0
[   97.968539]  __x64_sys_readv+0xe1/0x120
[   97.972521]  do_syscall_64+0x152/0x230
[   97.976407]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   97.981586] RIP: 0033:0x455a09
[   97.984758] RSP: 002b:00007fca6a6c3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[   97.992446] RAX: ffffffffffffffda RBX: 00007fca6a6c46d4 RCX: 0000000000455a09
[   97.999697] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013
[   98.006952] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[   98.014208] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[   98.021462] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000
[   98.028716] 
[   98.030348] Uninit was created at:
[   98.033878]  kmsan_internal_poison_shadow+0xb8/0x1b0
[   98.038965]  kmsan_kmalloc+0x94/0x100
[   98.042749]  __kmalloc+0x141/0x350
[   98.046275]  translate_desc+0xbef/0x1120
[   98.050323]  vhost_update_used_flags+0x469/0x8d0
[   98.055063]  vhost_vq_init_access+0x173/0xa20
[   98.059543]  vhost_net_ioctl+0x2212/0x3450
[   98.063759]  do_vfs_ioctl+0xaf8/0x2410
[   98.067627]  __x64_sys_ioctl+0x280/0x320
[   98.071670]  do_syscall_64+0x152/0x230
[   98.075545]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   98.080712] 
[   98.082322] Bytes 4-7 of 72 are uninitialized
[   98.086797] Memory access starts at ffff88014c7adba0
[   98.091877] ==================================================================
[   98.099211] Disabling lock debugging due to kernel taint
[   98.104641] Kernel panic - not syncing: panic_on_warn set ...
[   98.104641] 
[   98.111991] CPU: 1 PID: 6780 Comm: syz-executor2 Tainted: G    B             4.17.0-rc5+ #102
[   98.120634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   98.129968] Call Trace:
[   98.132542]  dump_stack+0x185/0x1d0
[   98.136158]  panic+0x39d/0x940
[   98.139349]  ? kmsan_internal_check_memory+0x116/0x1e0
[   98.144611]  kmsan_report+0x260/0x260
[   98.148410]  kmsan_internal_check_memory+0x135/0x1e0
[   98.153678]  kmsan_copy_to_user+0x75/0x160
[   98.157900]  ? _copy_to_iter+0x92/0x2800
[   98.161947]  _copy_to_iter+0x45f/0x2800
[   98.165905]  ? finish_wait+0x10a/0x3e0
[   98.169785]  vhost_chr_read_iter+0x7b3/0xc30
[   98.174179]  ? init_wait_entry+0x1a0/0x1a0
[   98.178408]  vhost_net_chr_read_iter+0xf6/0x130
[   98.183062]  ? vhost_net_exit+0x30/0x30
[   98.187031]  do_iter_readv_writev+0x84d/0xa00
[   98.191542]  ? vhost_net_exit+0x30/0x30
[   98.195499]  do_iter_read+0x303/0xd70
[   98.199284]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[   98.204735]  do_readv+0x295/0x5f0
[   98.208180]  __x64_sys_readv+0xe1/0x120
[   98.212140]  do_syscall_64+0x152/0x230
[   98.216020]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   98.221195] RIP: 0033:0x455a09
[   98.224366] RSP: 002b:00007fca6a6c3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[   98.232057] RAX: ffffffffffffffda RBX: 00007fca6a6c46d4 RCX: 0000000000455a09
[   98.239311] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013
[   98.246562] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[   98.253820] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[   98.261070] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000
[   98.268911] Dumping ftrace buffer:
[   98.272440]    (ftrace buffer empty)
[   98.276138] Kernel Offset: disabled
[   98.279743] Rebooting in 86400 seconds..