INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.23' (ECDSA) to the list of known hosts. 2018/04/13 13:03:40 fuzzer started 2018/04/13 13:03:40 dialing manager at 10.128.0.26:33379 2018/04/13 13:03:47 kcov=true, comps=false 2018/04/13 13:03:50 executing program 0: 2018/04/13 13:03:50 executing program 1: 2018/04/13 13:03:50 executing program 7: 2018/04/13 13:03:50 executing program 2: 2018/04/13 13:03:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x6, 0x108040000000004, 0x84, 0x6}, 0x2c) 2018/04/13 13:03:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/218, 0xda}], 0x4, 0x0) 2018/04/13 13:03:50 executing program 5: clock_gettime(0x2000000000008, &(0x7f0000000100)) 2018/04/13 13:03:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) syzkaller login: [ 42.690143] ip (3766) used greatest stack depth: 53976 bytes left [ 44.434893] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.441422] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.498089] device bridge_slave_0 entered promiscuous mode [ 44.546004] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.552520] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.563215] device bridge_slave_0 entered promiscuous mode [ 44.582388] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.588900] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.620101] device bridge_slave_0 entered promiscuous mode [ 44.640909] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.647460] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.657382] device bridge_slave_0 entered promiscuous mode [ 44.690428] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.696929] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.733263] device bridge_slave_0 entered promiscuous mode [ 44.763113] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.769781] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.794072] device bridge_slave_0 entered promiscuous mode [ 44.820431] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.826919] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.840966] device bridge_slave_1 entered promiscuous mode [ 44.851889] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.858407] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.874170] device bridge_slave_1 entered promiscuous mode [ 44.885892] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.892388] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.918583] device bridge_slave_1 entered promiscuous mode [ 44.936284] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.942791] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.959608] device bridge_slave_0 entered promiscuous mode [ 44.968096] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.974595] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.985109] device bridge_slave_0 entered promiscuous mode [ 45.000559] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.007128] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.022107] device bridge_slave_1 entered promiscuous mode [ 45.034675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.042985] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.049508] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.076965] device bridge_slave_1 entered promiscuous mode [ 45.083852] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.090335] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.116268] device bridge_slave_1 entered promiscuous mode [ 45.138613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.148813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.157158] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.163640] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.200673] device bridge_slave_1 entered promiscuous mode [ 45.217130] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.223595] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.249198] device bridge_slave_1 entered promiscuous mode [ 45.268798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.276734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.286107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.322457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.333795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.341756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.417313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.471786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.483535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.509431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.527842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.624816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.681140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.305110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.321100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.333244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.473492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.512201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.522204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.537929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.555199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.566215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.638593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.684704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.745475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.752962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.808307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.867227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.963212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.475652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.544862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.627215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.691578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.742926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.757487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.793345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.810693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.859993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.908200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.926450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.934154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.945841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.969301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.979922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.990718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.003964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.016885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.038792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.077256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.088527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.101688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.133117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.166852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.181187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.188350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.202190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.245339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.253935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.261803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.275221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.301979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.314848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.322748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.358810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.388112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.403886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.414643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.425109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.434311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.448479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.457451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.465516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.478867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.502267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.526937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.545190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.556430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.564113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.574335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.585291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.623748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.659509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.677584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.689250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.707114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.717851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.728709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.744906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.768317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.801017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.826327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.842904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.880785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.659323] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.665853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.672800] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.679286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.692987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.699568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.708149] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.714647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.721559] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.728091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.781526] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.950994] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.957543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.964435] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.970934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.001626] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.016507] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.022959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.029782] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.036224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.048822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.059133] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.065653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.072531] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.079105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.111975] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.120697] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.127202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.134123] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.140591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.150785] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.342529] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.349106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.355980] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.362478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.388192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.407253] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.413748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.420648] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.427158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.455974] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.744608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.755727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.778735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.789657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.805682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.817163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.825518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.410380] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.435675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.445850] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.462167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.602197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.686815] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.933124] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.038959] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.190077] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.196402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.210694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.251429] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.258628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.264882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.273100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.298158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.315904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.353336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.362309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.386300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.538011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.548329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.561637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.587382] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.593617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.602529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.644896] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.662190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.706239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.063463] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.070108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.081730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 13:04:17 executing program 5: clock_gettime(0x2000000000008, &(0x7f0000000100)) 2018/04/13 13:04:17 executing program 2: r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000040)=@l2={0x1f}, 0x80) 2018/04/13 13:04:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) 2018/04/13 13:04:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000ac14ffbb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014006d643500000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000"], 0x3}, 0x1}, 0x0) 2018/04/13 13:04:17 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r0, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/04/13 13:04:17 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x0, &(0x7f0000000400)=[{&(0x7f0000002940)='u', 0x1}], 0x1, &(0x7f0000000500)}, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bpq0\x00'}}, 0x80, &(0x7f0000001480)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='bridge0\x00', 0x10) sendmsg(r0, &(0x7f0000002900)={&(0x7f0000000080)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001740)="8c74c16b436602cfad06275e7bd6539acd46a97728be21dbcd7728665def150310709970", 0x24}], 0x1}, 0x0) 2018/04/13 13:04:17 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={r0}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/13 13:04:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={"f47158643040fc0c01dc6d00"}) 2018/04/13 13:04:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/218, 0xda}], 0x4, 0x0) 2018/04/13 13:04:17 executing program 6: r0 = socket$inet6(0xa, 0x802, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000bfe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f0000016fa0), 0x0, &(0x7f000000d000)}, 0x0) 2018/04/13 13:04:17 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) listen(r0, 0x0) 2018/04/13 13:04:17 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000eff0)={0x2, 0x4e21}, 0x10) listen(r0, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/04/13 13:04:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$setptracer(0x59616d61, r1) fchdir(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='28'], 0x2) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendfile(r3, r2, 0x0, 0xc08f) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000200)=0x14) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000017a000)=@abs, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008540)=[{{&(0x7f0000000640)=@rc={0x1f}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)}}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80042407, &(0x7f0000000240)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00008d6000)) readv(0xffffffffffffffff, &(0x7f0000622fd0)=[{&(0x7f0000b36000)=""/236, 0xec}], 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(0x0, 0x0) 2018/04/13 13:04:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) 2018/04/13 13:04:17 executing program 6: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000000400), &(0x7f0000000000), &(0x7f0000000480), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 13:04:18 executing program 3: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000056000d6dfcffff00bc0203030700618e04173f81dda62c537ea2ca", 0x1f) 2018/04/13 13:04:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) 2018/04/13 13:04:18 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/04/13 13:04:18 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) listen(r0, 0x0) 2018/04/13 13:04:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1c, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x3, 0x4) 2018/04/13 13:04:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x6}}}}}}}, &(0x7f0000000000)) 2018/04/13 13:04:18 executing program 4: r0 = socket(0x20000001f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f}, 0xe) listen(r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x541b, &(0x7f0000000000)) 2018/04/13 13:04:18 executing program 6: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000000400), &(0x7f0000000000), &(0x7f0000000480), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/13 13:04:18 executing program 3: r0 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x1, &(0x7f00002bc000)=ANY=[@ANYBLOB="82a9017ac07c000000000000000d0000000000000000bab3e1bcbc00a238e3ac48f57fc37ee9b3f34f62bd273f31d8e540b067be9b899cc74e255d04c30dc58ddbc2ebd40bace3870bdc799bb7969cbc06591f7e6837"], &(0x7f00007eb000)={0x0, 0x1}) 2018/04/13 13:04:18 executing program 5: r0 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00002be000)={0x1, &(0x7f0000c55000)=[{0x6}]}, 0x10) 2018/04/13 13:04:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001d001300000000000000000014000d0000007300000000000000000000000001"], 0x1}, 0x1}, 0x0) 2018/04/13 13:04:18 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 2018/04/13 13:04:18 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) listen(r0, 0x0) 2018/04/13 13:04:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) 2018/04/13 13:04:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x0, &(0x7f0000000500)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=""/53, 0x35}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000004200ff02000000000008000000000000"], 0x1}, 0x1}, 0x0) 2018/04/13 13:04:19 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[], 0x0) 2018/04/13 13:04:19 executing program 2: syz_open_dev$tun(&(0x7f0000000040)="2f6465762f6e6574c874756eeb", 0x0, 0x200) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) 2018/04/13 13:04:19 executing program 3: r0 = socket$inet(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @broadcast=0xffffffff, 0x0, 0x0, 'lblc\x00'}, 0x2c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r1, 0x33, "83364bfb161f3d84d081fb2cfa29570aeb9ca51166d45aa019a223ba78b7661490d49df563f93ad1478c2f019760361c8611a0"}, &(0x7f00000001c0)=0x3b) 2018/04/13 13:04:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280), 0x4) accept4$packet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001740)=0x14, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xfffffffffffffffc, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/04/13 13:04:19 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) listen(r0, 0x0) 2018/04/13 13:04:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) 2018/04/13 13:04:20 executing program 5: r0 = socket(0x20000001f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f}, 0x0) 2018/04/13 13:04:20 executing program 6: r0 = socket(0x20000001f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f}, 0x0) 2018/04/13 13:04:20 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @link_local={0x1, 0x80, 0xc2}, @rand_addr=0xffffffffffffffff}}}}, &(0x7f0000000040)) 2018/04/13 13:04:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a745b105a6b96ef285e898491b8") preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/04/13 13:04:20 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) dup2(r0, r1) 2018/04/13 13:04:20 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) listen(r0, 0x0) 2018/04/13 13:04:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) 2018/04/13 13:04:20 executing program 4: r0 = socket(0x20000001f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x3, 0xbd) 2018/04/13 13:04:20 executing program 4: syz_open_dev$tun(&(0x7f00000001c0)="2f6465762f6e6574c874756eeb", 0x0, 0x107200) 2018/04/13 13:04:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 2018/04/13 13:04:20 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bpq0\x00'}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x595}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002900)={&(0x7f0000000080)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001740)="8c74c16b436602cfad06275e7bd6539acd46a97728be21dbcd7728665def1503107099701763029aa6c04a762f15a46a81a61da5b97683ffae2f5bf49a0eb2ef847af79ed1bad2979a6ddc20aa7d3c8e83c2b0ce060a49bc375384a561a47524c4f36684bdb61fba6293a0530327c4822d65666fa81c33f158ad31928902294dd2f77c3d812f04de1c9dc9b88a7d5d32a4f215a1b2b5cf3e8457f60a5bfa28c3d034283abead966fdbd943341d3bc925253fc2c31e6d6d36f417df1c9a31828aaa5efa7b642f9a6a272b37c1b3541013b9db8c519cd6bfa444585bb8f905f86fa9340508dae14f3f454e6bea4daab8f46498da2c3aa1e092872137bdf8d4176f7fd732e822971ac2b62cecb42fad7dfe7f11e132b67a004cd3175f9a5c002abf9babf8420eb64a3321ca18993e6d7897cc105b8c09062ba38ed1bafda418a7364ba63cabf4fba39431bb6dad3424ba8291b210be970ed1880bf1b26e0fe9535c205e55f631231509af56cb79ed18efdd7d3b33416a1e801bd25db6b62db182e83cadb5ee7f4c462ddad75e59154b0f0e22a5307fedc4ca6dcebf6e4bda583b8746769c079cacdb0abb596ba6ece9bd6aab227f19758ce314b92a9c8db06a58eb91911ee3815d075b0ace5c3bf998db3257a49ffd628593c2945a44db5ea8ddfc3793c15eb871b957c8b0486c4e581e1bb972d54bad422bd12ac51f51ba38dbc1a28a2e686ec55ba368d69051", 0x20c}], 0x1}, 0x0) 2018/04/13 13:04:20 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) listen(r0, 0x0) 2018/04/13 13:04:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'lo\x00'}, 0x18) 2018/04/13 13:04:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={"280000003040fc0c00b06e00"}) 2018/04/13 13:04:20 executing program 1: r0 = socket$inet(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x11, @broadcast=0xffffffff, 0x0, 0x0, 'lblc\x00'}, 0x2c) 2018/04/13 13:04:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x5}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/13 13:04:20 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) listen(r0, 0x0) 2018/04/13 13:04:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@nl=@proc={0x10}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000880)="ee261472b447760336069871c56e2fc656af73804d03beeef4783cf36ecc86e9d8af7c6cb15b75eea106c5752783575337b44b7f99aee056", 0x38}], 0x1, &(0x7f0000001880)}, 0x0) 2018/04/13 13:04:20 executing program 5: r0 = socket(0x20000001f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f}, 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x3, 0xbd) 2018/04/13 13:04:20 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x3, 0x6, 0x0, @local={0xfe, 0x7e, [0x0, 0x6], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/13 13:04:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) 2018/04/13 13:04:20 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./control\x00', 0x0) renameat2(r0, &(0x7f0000000100)='./control\x00', r0, &(0x7f0000000200)='./file0\x00', 0x1) 2018/04/13 13:04:21 executing program 3: syz_emit_ethernet(0x0, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "e932aec672c852ae03738785c786b6e59e468493ffe186d3aa9c3710629a765d928ed944cdb46b34751814035689d91ad4b962dfbf9d0f3f4bc11249cf2ecaa1"}}}}, 0x0) 2018/04/13 13:04:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) 2018/04/13 13:04:21 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000019fa0), 0x1f2, &(0x7f000001ef08)}, 0x0) 2018/04/13 13:04:21 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) listen(r0, 0x0) 2018/04/13 13:04:21 executing program 6: r0 = syz_open_dev$tun(&(0x7f00000002c0)="2f6465762f6e6574c874756eeb", 0x0, 0x4000141) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000001080006040000aaaaaaaaaabb00000000aaaaaaaaaa007f000001fd029da73065e960a27008f33c13846a6d275fffb98f090dadb78f40033034b2d101491387bd9f2ae1e61682199a56dad1"], 0x1) 2018/04/13 13:04:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@nl=@proc={0x10}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000880)="ee261472b447760336069871c56e2fc656af73804d03beeef4783cf36ecc86e9d8af7c6cb15b75eea106c5752783575337b44b7f99aee056bd19b7793aadbd52ab4b8d4bee0f12ae3076a0b2d5a086458eb9bf9d6a2861d2354aa0751234734c1671aa794747fd9afeb4747a8276038ecaee6879e1e18f409d4f9297b8e012d8", 0x80}], 0x1, &(0x7f0000001880)}, 0x0) 2018/04/13 13:04:21 executing program 1: r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff01000000010000000000000007e77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000000)}, 0x0) sendmsg$netlink(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f00000040c0)}, 0x0) 2018/04/13 13:04:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/04/13 13:04:21 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000580)=@pppol2tp, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001800)=""/194, 0xc2}}], 0x1, 0x0, &(0x7f0000001980)={0x77359400}) 2018/04/13 13:04:21 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff01000000010000000000000007e77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/13 13:04:21 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) listen(r0, 0x0) 2018/04/13 13:04:21 executing program 6: r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff01000000010000000000000007e77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000000)}, 0x0) sendmsg$netlink(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f00000006c0)={0x10}, 0x10}], 0x1}, 0x0) 2018/04/13 13:04:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000011000100000000000000000007000000", @ANYBLOB="0100000019f8f2c40b9525a0a2357e0ff0bde218b86d000000"], 0x2}, 0x1}, 0x0) 2018/04/13 13:04:21 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x39c4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x2c}, 0x8) accept4$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0xffffffffffffffba, 0x0) connect$inet(r0, &(0x7f0000555ff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 71.526950] ================================================================== [ 71.534386] BUG: KMSAN: uninit-value in tipc_subscrb_rcv_cb+0x418/0xe80 [ 71.541152] CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.16.0+ #83 [ 71.547643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.557014] Workqueue: tipc_rcv tipc_recv_work [ 71.561600] Call Trace: [ 71.564194] dump_stack+0x185/0x1d0 [ 71.567829] ? tipc_subscrb_rcv_cb+0x418/0xe80 [ 71.572413] kmsan_report+0x142/0x240 [ 71.576224] __msan_warning_32+0x6c/0xb0 [ 71.580295] tipc_subscrb_rcv_cb+0x418/0xe80 [ 71.584722] tipc_receive_from_sock+0x64c/0x800 [ 71.589403] ? tipc_topsrv_start+0x650/0x650 [ 71.593825] ? tipc_accept_from_sock+0x610/0x610 [ 71.598588] tipc_recv_work+0xd8/0x1f0 [ 71.602481] ? tipc_send_work+0xe20/0xe20 [ 71.606637] process_one_work+0x12c6/0x1f60 [ 71.610978] worker_thread+0x113c/0x24f0 [ 71.615057] ? process_one_work+0x1f60/0x1f60 [ 71.619540] kthread+0x539/0x720 [ 71.622892] ? process_one_work+0x1f60/0x1f60 [ 71.627376] ? kthread_blkcg+0xf0/0xf0 [ 71.631248] ret_from_fork+0x35/0x40 [ 71.634941] [ 71.636546] Uninit was created at: [ 71.640072] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 71.645162] kmsan_kmalloc+0x94/0x100 [ 71.648944] kmem_cache_alloc+0xaab/0xb90 [ 71.653075] tipc_receive_from_sock+0x15c/0x800 [ 71.657731] tipc_recv_work+0xd8/0x1f0 [ 71.661603] process_one_work+0x12c6/0x1f60 [ 71.665906] worker_thread+0x113c/0x24f0 [ 71.669947] kthread+0x539/0x720 [ 71.673296] ret_from_fork+0x35/0x40 [ 71.676985] ================================================================== [ 71.684322] Disabling lock debugging due to kernel taint [ 71.689751] Kernel panic - not syncing: panic_on_warn set ... [ 71.689751] [ 71.697100] CPU: 1 PID: 5 Comm: kworker/u4:0 Tainted: G B 4.16.0+ #83 [ 71.704873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.714218] Workqueue: tipc_rcv tipc_recv_work [ 71.718781] Call Trace: [ 71.721360] dump_stack+0x185/0x1d0 [ 71.724971] panic+0x39d/0x940 [ 71.728162] ? tipc_subscrb_rcv_cb+0x418/0xe80 [ 71.732726] kmsan_report+0x238/0x240 [ 71.736509] __msan_warning_32+0x6c/0xb0 [ 71.740555] tipc_subscrb_rcv_cb+0x418/0xe80 [ 71.744954] tipc_receive_from_sock+0x64c/0x800 [ 71.749610] ? tipc_topsrv_start+0x650/0x650 [ 71.754006] ? tipc_accept_from_sock+0x610/0x610 [ 71.758750] tipc_recv_work+0xd8/0x1f0 [ 71.762623] ? tipc_send_work+0xe20/0xe20 [ 71.766757] process_one_work+0x12c6/0x1f60 [ 71.771067] worker_thread+0x113c/0x24f0 [ 71.775117] ? process_one_work+0x1f60/0x1f60 [ 71.779594] kthread+0x539/0x720 [ 71.782950] ? process_one_work+0x1f60/0x1f60 [ 71.787431] ? kthread_blkcg+0xf0/0xf0 [ 71.791304] ret_from_fork+0x35/0x40 [ 71.795528] Dumping ftrace buffer: [ 71.799054] (ftrace buffer empty) [ 71.802736] Kernel Offset: disabled [ 71.806339] Rebooting in 86400 seconds..