INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2018/04/09 17:54:33 fuzzer started 2018/04/09 17:54:34 dialing manager at 10.128.0.26:38911 2018/04/09 17:54:40 kcov=true, comps=false 2018/04/09 17:54:43 executing program 0: 2018/04/09 17:54:43 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0xd504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/09 17:54:43 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702e6370750086298d", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000300)='5', 0x1) 2018/04/09 17:54:43 executing program 3: mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) perf_event_open(&(0x7f0000bba000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') 2018/04/09 17:54:43 executing program 5: r0 = socket$inet(0x2, 0x3, 0xdc) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000340)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/09 17:54:43 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00081100fe800000000000000000000000000000000000000000aa4e204e200008907874df9747d016e1601e8bdabf36cc42687600b5bc1c93788305855b758fe2675ad7d1d114d44bdcd84f6cd07073748a3083e86cfdad82dee644427dd1e8b56ac995c371c279cdc63344000000000000000000"], &(0x7f0000000080)) 2018/04/09 17:54:43 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000601ffff005b89000000000000000000"], 0x14}, 0x1}, 0x0) 2018/04/09 17:54:43 executing program 4: syzkaller login: [ 43.944725] ip (3724) used greatest stack depth: 54672 bytes left [ 45.001885] ip (3821) used greatest stack depth: 54120 bytes left [ 47.560308] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.590528] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.740288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.796219] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.873699] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.934700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.991673] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.055451] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.598661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.897636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.969489] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.013703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.071644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.242546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.368089] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.380176] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.388820] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.395851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.407660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.712769] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.719177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.734681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.818124] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.824416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.834722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.877265] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.884558] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.890882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.907999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.946701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.975701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.173998] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.180370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.199343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.225687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.242359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.271377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.294738] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.312762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.343754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/09 17:55:01 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mount(&(0x7f0000a3dff2)='./file0/file0\x00', &(0x7f0000831000)='./file0/file0\x00', &(0x7f00002e0000)="616e6f6e5f696e6f6402000000", 0x0, &(0x7f0000c6d000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='nodev)mime_type.\x00', 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='^\x00', 0xfffffffffffffffc) r2 = request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='%\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r2}, &(0x7f00000002c0)=""/174, 0xae, &(0x7f0000000400)={&(0x7f0000000380)={'vmac(xtea)\x00'}, &(0x7f00000003c0)="8a028c0ef030feff1d109fb6a4d7fd8b8d23a31504143379cfaef20c9a59aa393bb909dda5183e4af2263f8666acd929ae7b5415f9b356a01f0bc3e7dc0c6a", 0x3f}) move_pages(0x0, 0x1, &(0x7f0000e2afe0)=[&(0x7f00003f2000/0x3000)=nil], &(0x7f00003dc000), &(0x7f00004e55fe), 0x0) 2018/04/09 17:55:01 executing program 4: 2018/04/09 17:55:01 executing program 5: 2018/04/09 17:55:01 executing program 2: 2018/04/09 17:55:01 executing program 7: 2018/04/09 17:55:01 executing program 6: 2018/04/09 17:55:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x1c, 0x40000000002}, {}], 0x30) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/93) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x80, 0x400) 2018/04/09 17:55:01 executing program 3: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000b84fc8)={&(0x7f000058f000)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f000084c000)}, 0x0) 2018/04/09 17:55:01 executing program 6: r0 = socket(0x15, 0x80005, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f00000000c0), &(0x7f0000000080)=0xe6) 2018/04/09 17:55:01 executing program 5: unshare(0x8000400) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffd78) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x8) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x6, 0x2, 0x100000001, 0x3, 0x1ff, 0x10000, 0x5, r2}, &(0x7f0000000180)=0x20) 2018/04/09 17:55:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0xa3b, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x2, 0x400, [0x20000200, 0x0, 0x0, 0x20000230, 0x20000260], 0x0, &(0x7f0000000100), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xb, 0x10, 0x0, 'lo\x00', 'gre0\x00', 'lo\x00', 'ip_vti0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @random="b1d3654cc4b8", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xe0, 0x150, 0x188, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x7fffffff, 0x2}}}, @pkttype={'pkttype\x00', 0x8, {{0x1, 0x1}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}}}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0x10}}}}, {{{0x9, 0x55, 0x883e, 'sit0\x00', 'bcsf0\x00', 'syzkaller0\x00', '\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff], 0x110, 0x180, 0x1b8, [@arp={'arp\x00', 0x38, {{0x0, 0x88fe, 0x9, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffff, @rand_addr=0xffffffffffffe2c3, 0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x81, 0x10}}}, @devgroup={'devgroup\x00', 0x18, {{0x2, 0x0, 0x117, 0xffffffffffffffff, 0x6}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@random="761ca8163a57", 0xfffffffffffffffc}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x478) listen(r0, 0x0) io_setup(0xd5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="d9", 0x1}]) 2018/04/09 17:55:01 executing program 7: r0 = inotify_init1(0x0) r1 = getpgrp(0x0) sched_getparam(r1, &(0x7f0000000000)) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x11, r2) ptrace$getregset(0x4204, r2, 0x1, &(0x7f00000000c0)={&(0x7f00000013c0)=""/4096, 0x1000}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) 2018/04/09 17:55:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d2d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005ebfe0)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad40", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000f74fc8)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)="e8a76785e4b69bba81f28e9c69f7046d403df1543e0bb9fd3590b73fbdc99c95f0ad6f5c3e508f54fbcc35fbb60ca1091a7c70023623d6da639e23a50078c9029413559de8417bac69932f9e3bb9a1daad5aa0dc88fba97115a5235fca3e3abf6ceedb1c9473365aa7d5aa118c905102c1f29cd8f00ec56777f64319796d386f", 0x80}], 0x1, &(0x7f0000f78000)}, 0x0) recvmsg(r2, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x6, &(0x7f0000f75000)=[{&(0x7f0000f11000)=""/4096, 0x1000}], 0x1, &(0x7f0000ec7000)=""/107, 0x6b}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)) madvise(&(0x7f00002c0000/0x2000)=nil, 0x2000, 0x1010) r3 = getpgid(0xffffffffffffffff) move_pages(r3, 0x8, &(0x7f0000000000)=[&(0x7f0000006000/0x4000)=nil, &(0x7f000019f000/0x1000)=nil, &(0x7f00006f2000/0x2000)=nil, &(0x7f00001f3000/0x2000)=nil, &(0x7f0000995000/0x4000)=nil, &(0x7f000040a000/0x3000)=nil, &(0x7f0000b56000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000080)=[0x4, 0x0, 0x7, 0x9d2a, 0x6, 0x44, 0x9, 0x100000001], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) 2018/04/09 17:55:01 executing program 3: unshare(0x200000) 2018/04/09 17:55:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000200)={r2, 0x2, &(0x7f0000000100)=[0x10000, 0x1000], &(0x7f0000000140)=[0x97, 0xffff, 0x0], 0x10, 0x1, 0x4, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[0x3, 0xffffffffffffffff]}) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/09 17:55:01 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mount(&(0x7f0000a3dff2)='./file0/file0\x00', &(0x7f0000831000)='./file0/file0\x00', &(0x7f00002e0000)="616e6f6e5f696e6f6402000000", 0x0, &(0x7f0000c6d000)) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='nodev)mime_type.\x00', 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='^\x00', 0xfffffffffffffffc) r2 = request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='%\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r2}, &(0x7f00000002c0)=""/174, 0xae, &(0x7f0000000400)={&(0x7f0000000380)={'vmac(xtea)\x00'}, &(0x7f00000003c0)="8a028c0ef030feff1d109fb6a4d7fd8b8d23a31504143379cfaef20c9a59aa393bb909dda5183e4af2263f8666acd929ae7b5415f9b356a01f0bc3e7dc0c6a", 0x3f}) move_pages(0x0, 0x1, &(0x7f0000e2afe0)=[&(0x7f00003f2000/0x3000)=nil], &(0x7f00003dc000), &(0x7f00004e55fe), 0x0) 2018/04/09 17:55:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') getdents64(r0, &(0x7f0000799000)=""/4096, 0x1000) getdents(r0, &(0x7f0000000000)=""/86, 0x56) getdents(r0, &(0x7f0000000080)=""/48, 0x30) 2018/04/09 17:55:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000200)={r2, 0x2, &(0x7f0000000100)=[0x10000, 0x1000], &(0x7f0000000140)=[0x97, 0xffff, 0x0], 0x10, 0x1, 0x4, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[0x3, 0xffffffffffffffff]}) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 2018/04/09 17:55:02 executing program 3: r0 = userfaultfd(0x0) fcntl$addseals(r0, 0x409, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0xa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) socket$key(0xf, 0x3, 0x2) socketpair$inet6(0xa, 0x80000, 0x7, &(0x7f0000000200)={0xffffffffffffffff}) getpeername(r1, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x1e8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x40200) userfaultfd(0x80000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r3, r4}) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00009de000/0x4000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000012000/0x4000)=nil, 0x4000}) socket$kcm(0x29, 0x2, 0x0) 2018/04/09 17:55:02 executing program 7: perf_event_open(&(0x7f0000348f88)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) r1 = shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() r5 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x9, r2, r3, r4, r5, 0x110, 0x20}, 0x2, 0xe9af, 0xffffffffffff8000, 0x1000, r6, r7, 0x1}) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x18) sendmsg$nl_route(r0, &(0x7f000070d000)={&(0x7f0000775000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000207fdc)=ANY=[@ANYBLOB="1c000000180003030000000000020000020000000000fe0500000000"], 0x1c}, 0x1}, 0x0) 2018/04/09 17:55:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) fcntl$setsig(r0, 0xa, 0xfffffffffffffffe) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x7) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$void(r0, 0xc0045878) dup2(0xffffffffffffffff, r0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) 2018/04/09 17:55:02 executing program 6: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000002c0)='maps\x00') ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000300)=""/4096) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x1c}], 0x1) exit(0x1) readv(r1, &(0x7f000004ffe0)=[{&(0x7f0000000000)=""/128, 0xe6}], 0x222) 2018/04/09 17:55:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-intel)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 2018/04/09 17:55:02 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xee7c0eae4fc361af}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac000000541e8b4c171be21c494fdfc71888354f9447885303954f350ac8684742f70d036be86c1aca1bcf7564ba86ebfd86df39c369c081fc44a03630add5ce37d94ffa54a059b8c05ce7ccdee2c7a61c9c0881f562ff089c838f85c3b3828f072896ec0f866ca5bfe3c910bcdd14d5a88ba9eececad4466ab4f4286fa2dddb7803b63faae6394b24c4f26365d4642e9edb29", @ANYRES16=r0, @ANYBLOB="00002cbd700000000000100000000c00020008000500fffeffff040001004c000100080004004e220000080001000000000014000300ff01000000000000000000000000000108000500020000000c00070008000000000000000800050004000000080002000e14390e13f8d2bf8561cb9ebb00000000080005000700000034000100140003007f000001000000000000000000000000080001000a00000008000800000400"], 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x4000010) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f00000001c0)={{0x5e, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x1, 'ovf\x00'}, {@empty, 0x0, 0x0, 0x0, 0x80, 0x4}}, 0x44) ioctl$LOOP_CLR_FD(r1, 0x4c01) accept$alg(r2, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000000c0)={r3, r4/1000+30000}, 0x10) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180)={0x3}, 0x2) sync() ioctl$TCFLSH(r2, 0x540b, 0x4) 2018/04/09 17:55:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffff}, 0xfffffffffffffee1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)=""/192, &(0x7f0000000140)=0xc0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x8, 0x1, 0x8, 0x5, 0x6}, &(0x7f0000000180)=0xffffffffffffffe8) 2018/04/09 17:55:02 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1db}, &(0x7f0000000140)=0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfffffce5) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0)={0x5, 0x7ff, 0x4, 0xffffffff, 0x4}, 0xc) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r2, r4) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000280)=')\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2018/04/09 17:55:02 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000e01000)) epoll_pwait(r1, &(0x7f0000297000)=[{}], 0x1, 0x0, &(0x7f0000197000), 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x6, 0x400) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000180)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200200, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000040)=""/245) 2018/04/09 17:55:02 executing program 1: unshare(0x4002002) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000180)={@multicast1, @dev, @local}, &(0x7f0000000080)=0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x4da, 0x7}, {0x7, 0x1}, 0x6, 0x2, 0xffff}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x6}) 2018/04/09 17:55:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x1, 0x7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x10001, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x4, 0x10}, &(0x7f00000001c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0xac8d}) 2018/04/09 17:55:02 executing program 0: mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000a5ff3)='/dev/snd/seq\x00', 0x0, 0x1) write$sndseq(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0x30) 2018/04/09 17:55:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x82) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) fcntl$notify(r0, 0x402, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x100, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, {0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x10000}, 0xffffffffffffffc1, [0x7, 0x4, 0x36e5eed9, 0x5, 0x4fa1, 0x8, 0xffffffffffffffc0, 0x1000]}, 0x5c) 2018/04/09 17:55:03 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1db}, &(0x7f0000000140)=0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfffffce5) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0)={0x5, 0x7ff, 0x4, 0xffffffff, 0x4}, 0xc) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r2, r4) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000280)=')\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2018/04/09 17:55:03 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000e01000)) epoll_pwait(r1, &(0x7f0000297000)=[{}], 0x1, 0x0, &(0x7f0000197000), 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x6, 0x400) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000180)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200200, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000040)=""/245) 2018/04/09 17:55:03 executing program 0: syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.advise\x00', &(0x7f0000000140)='+cpuset(system\x00', 0xf, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x1c) tee(r1, r0, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = dup2(r1, r3) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000000)) 2018/04/09 17:55:03 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{r1, r2+30000000}, {0x77359400}}, &(0x7f0000000240)) r3 = userfaultfd(0x0) r4 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@un=@abs, &(0x7f0000000100)=0x80, 0x80000) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getdents64(r0, &(0x7f0000000280)=""/54, 0x36) syz_emit_ethernet(0x7ffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08f931144400001c00000000000090787f000001ac1414bb000000000008"], &(0x7f0000000000)) epoll_create1(0x80000) close(r3) 2018/04/09 17:55:03 executing program 6: mmap(&(0x7f0000000000/0xdc8000)=nil, 0xdc8000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080), 0x10) getsockopt(r0, 0x100000114, 0x170, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0xfffffffffffffed9) 2018/04/09 17:55:03 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r0, 0x0, 0x200000025, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) ioprio_set$uid(0x0, r1, 0x9) 2018/04/09 17:55:03 executing program 4: r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x4}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000680)={0x1, 0x2, 0xffffffff, 0x9}, 0x10) sendmsg$netrom(r1, &(0x7f0000000640)={&(0x7f0000000140)=@full={{0x3, {"af77b54c5032c6"}, 0x8}, [{"bb030991af30b2"}, {"b78aa855032ee6"}, {"e63ed83485e737"}, {"4e91356b94e4ae"}, {"453fd2f2d8ebb5"}, {"60a25f00e18ee2"}, {"7b55eaf80dc157"}, {"0f4eb5739ce220"}]}, 0x48, &(0x7f00000005c0)=[{&(0x7f00000001c0)="d1cb707232f3a56df2d304c4317a79fe8980e796", 0x14}, {&(0x7f0000000200)="8c142347b858e935a378ce6d0de1bd96b7a7a9081034bf9ba60312f5cbd24eb9be0284fdb26a2c9a055c57c17753a5037f050fab1aeeb1a57f9a8a4afa69eb703729", 0x42}, {&(0x7f0000000280)="800c91f32a378c117d68182a412739e9a7c652b36eec64ea8b1a923705e33b9a623a035c3d28d33583e7e3734b311fc651ffe8f16c692a70ab72238f8d231717821d996892aa6cfc1d66c3beab71637638e5139e62bf4c57ad78f1ed864b01141ec9807f516cc37882c71526a65baa14ec8ed752849f4d", 0x77}, {&(0x7f0000000300)="d25e4c7b5aa864e6e9a09b904b004178e34c6ddb7c9db0d16e7ac57dd750265a4db58a76fd36f9e1dec7edfae0948214af41f6e16e3c4bd0acf1646726b5aaa686085aa07ba136015b4a0c080792208855ed5a4843c17b37872ef553e8d3489dd7c00be78a9b1d3b27ace27c5c91d9f36966e3ea6a4bf827483a8a27ac1383fb1e1ec6aef516075912c759ada956732aeb4c1862a0e281604c4a344cbfa2d85df80998f9066fe7e716882e598e0c0b47ccf6fa6b258cf4f8703acff0f3e07c3cae6d29e297c9c94037eef74546f1ee6cb4497310ad261f127700d6", 0xdb}, {&(0x7f0000000400)="5879241afcae73c272680577c422a3069d40a81839f7b1b1a107eed2d361", 0x1e}, {&(0x7f0000000440)="11299574", 0x4}, {&(0x7f0000000480)="229d0840b1ace3da56889b661f3ff24e21200f986c57a7cbdde04b4a670dd27a10d7", 0x22}, {&(0x7f00000004c0)="81b1cdba84a287c7dca79ee8517b4101a9d29d67fbb5e49e14c4e0f40d7c0cf3d57801f4924ef4d7748dc4e18e2662d9e22011999d3d72260537865c848e82946d0f73e40f930633ebfcd7a19aca312126b77c96db8a1de8fd596c7531a0dee7da47a8589ef97783f62d12c333a1c91bcc8b8c415737293e0a582ed92d85e89bda4a82edad1a2db0b91b8fc040a20f7f1ca7b12f326c83d7dd9685b4fcf0233e5e250a3f2b48b557cfe2b2ed2ef142e3b7f2dd6d92d090ec575825809d5c25a62ba46b2a0e7e2fd6e13d453dd5adab1a2f572b320f07f1285b3a503edaec4c0342f22e", 0xe3}], 0x8, 0x0, 0x0, 0x20000000}, 0x800) semop(r0, &(0x7f0000000040), 0x19a) semop(r0, &(0x7f0000000000)=[{}], 0x1) pause() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/04/09 17:55:03 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x3ff, 0x0, 0x4728}) 2018/04/09 17:55:03 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) write$sndseq(r2, &(0x7f0000000280), 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/04/09 17:55:03 executing program 5: r0 = socket(0xb, 0x0, 0x7ff) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2000000000001, 0x8000) connect$inet(r1, &(0x7f0000cd0ff0)={0x2}, 0x10) recvmmsg(r0, &(0x7f000094f000), 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x80000005, 0x4}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r2, 0x1000, "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"}, &(0x7f0000001100)=0x1008) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 2018/04/09 17:55:03 executing program 6: r0 = memfd_create(&(0x7f0000029000)='\\\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000032ff3)='/dev/snd/seq\x00', 0x0, 0x6) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2f, 'pids', 0x20}, {0x2b, 'io', 0x20}]}, 0xa) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000051f50)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "ffffffff2b000006", "a6e7fdc21ca077ef1dae8000000000000000f6ff2ecd959baa11b5dda31cd901"}) dup(r2) setsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000000)=0xeed9, 0x4) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x4}}], 0x90) 2018/04/09 17:55:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x82) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) fcntl$notify(r0, 0x402, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x100, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, {0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x10000}, 0xffffffffffffffc1, [0x7, 0x4, 0x36e5eed9, 0x5, 0x4fa1, 0x8, 0xffffffffffffffc0, 0x1000]}, 0x5c) 2018/04/09 17:55:03 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000474fec)={0x1, 0x800000000000003b, 0x7, 0x4}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000484fe0)={r0, &(0x7f00006d3000), &(0x7f0000488000)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="443a2bca5132cbd22a4a282360ab94dac63e87310b58aafce1f2de71c47b62021939ccdee8321c92fa5466569cd4183bd57f18550d6c20753b7fa1", &(0x7f00000000c0)=""/207}, 0x18) 2018/04/09 17:55:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="37af3835f986a62c01db8fd0b2c5cdbc8735c38e2e137d33424bb595596a437d9d627054cac3527cd8fa0d5a8bd774c468eb16e0191aa40d13cc42f6e319ecea0c35b7cc5f51827bc1c21d607028cc214e92921b5be04bf076cba083cf4826d7c40c2e9ef27ca4b9", 0x68) recvmmsg(r1, &(0x7f0000006080)=[{{&(0x7f0000005f00)=@ipx, 0x8, &(0x7f0000006000), 0x0, &(0x7f0000000080)=""/51, 0xfffffffffffffda5}}], 0x53, 0x0, 0x0) 2018/04/09 17:55:03 executing program 3: r0 = socket(0xa, 0x200000001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) accept4$ipx(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'vcan0\x00', {0x4, 0x5, 0x2, "dff38edb2f01"}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfb, r1}) connect$ax25(r0, &(0x7f0000000140)={0x3, {"565b9004eec53a"}, 0x8}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000100)={{0x2ee, 0x8, 0x8, 0x1, 0x1, 0x5}, 0x3, 0x5, 0x40}) 2018/04/09 17:55:03 executing program 6: r0 = memfd_create(&(0x7f0000dcf000)='proc.wlan0ppp0keyring\x00', 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x40000000}) fallocate(r0, 0x0, 0x2, 0x101) 2018/04/09 17:55:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x4000000000046800) fgetxattr(r0, &(0x7f0000000040)=@known='security.evm\x00', &(0x7f0000000140)=""/204, 0xcc) io_setup(0x8000000007, &(0x7f0000001540)=0x0) r2 = getpid() tkill(r2, 0xe) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001200)="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", 0x200}]) 2018/04/09 17:55:04 executing program 7: pipe(&(0x7f0000362ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) dup2(r1, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000de6000)) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) epoll_pwait(r2, &(0x7f000003cf94)=[{}], 0x1, 0x0, &(0x7f00004c7000), 0x8) 2018/04/09 17:55:04 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x6, 0x2, &(0x7f0000004ac0)={0xffffffffffffffff}) getsockname$llc(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000004bc0)=0x10) r1 = userfaultfd(0x1000004) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000013000)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xfffd}, &(0x7f0000002000)=0xfd6e) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000a, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000004c40)='/proc/self/net/pfkey\x00', 0x103481, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000004b40)={0x0, 0x7, 0xffffffffffffff5a, {0x0, 0x989680}, 0x0, 0x1007}) close(r1) sendto$inet6(r3, &(0x7f0000004cc0)="8a4ecd015ab12cd57ab530e9139e5e3752521472da0b55b95930fb2f4ab95501459e96aef117ed30e27bac52ba3441dacfa4388af8f4dc80ab0c0b803703095ae287ae891ad37e197228603fdec7921baaac47e8bd5f9a7800bb8c06ce8dce919efdd8183c3deb7619b8890bed6c39773d0cdb133b9744ab90d3e65ad19289ea08bc61ff9fca94c84652902a6592081fcdb72e0904a822154ad3d7158c1338a2bd1c09a2c53c23107973a3fc0cf245198a", 0xb1, 0x4, &(0x7f0000004a40)={0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}, 0x8}, 0x1c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000004c80)=0x5, 0x4) 2018/04/09 17:55:04 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet(0x2, 0x413b30b9a44ff05d, 0x100000000) r1 = gettid() process_vm_readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/125, 0x7d}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000200)=""/227, 0xe3}, {&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/101, 0x65}], 0x8, &(0x7f0000001640)=[{&(0x7f0000001540)=""/153, 0x99}, {&(0x7f0000001600)=""/18, 0x12}], 0x2, 0x0) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x2000004, 0x8012, r0, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e30fff)) recvmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000001680)=""/121, 0x79}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/111, 0x6f}, {&(0x7f0000002780)=""/172, 0xac}, {&(0x7f0000002840)=""/191, 0xbf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/122, 0x7a}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/42, 0x2a}], 0xa, &(0x7f0000005a80)=""/174, 0xae, 0x8}, 0xee2}], 0x1, 0x40002001, &(0x7f0000005b80)={0x77359400}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00009ecff8), 0x2, 0x3) 2018/04/09 17:55:04 executing program 1: mkdir(&(0x7f0000be0ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000e06000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00008deff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0\x00', r2, &(0x7f000001fff8)='./file0\x00') symlinkat(&(0x7f0000000000)='./file0/file0/file0\x00', r2, &(0x7f0000000040)='./file0\x00') renameat(r2, &(0x7f0000da2fec)='./file0/file0/file0\x00', r2, &(0x7f0000000100)='./file0/file0/file0\x00') 2018/04/09 17:55:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000d6c000)='1', 0x1, r1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101400, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) keyctl$setperm(0x5, r2, 0x0) keyctl$unlink(0x11, r2, 0x0) 2018/04/09 17:55:04 executing program 0: syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.advise\x00', &(0x7f0000000140)='+cpuset(system\x00', 0xf, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x1c) tee(r1, r0, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = dup2(r1, r3) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000000)) 2018/04/09 17:55:04 executing program 2: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3, 0x44031, 0xffffffffffffffff, 0x40000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) [ 62.179419] ================================================================== [ 62.186858] BUG: KMSAN: uninit-value in copy_page_to_iter+0x754/0x1b70 [ 62.193543] CPU: 1 PID: 5251 Comm: syz-executor3 Not tainted 4.16.0+ #82 [ 62.200385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.209746] Call Trace: [ 62.212361] dump_stack+0x185/0x1d0 [ 62.216001] ? kmsan_internal_check_memory+0x145/0x1d0 [ 62.221291] kmsan_report+0x142/0x240 [ 62.225105] kmsan_internal_check_memory+0x164/0x1d0 [ 62.230224] ? copy_page_to_iter+0x5f6/0x1b70 [ 62.234736] kmsan_copy_to_user+0x69/0x160 [ 62.238987] copy_page_to_iter+0x754/0x1b70 [ 62.243335] process_vm_rw_core+0xf6a/0x1930 [ 62.247771] ? process_vm_rw+0x356/0x500 [ 62.251837] process_vm_rw+0x3d5/0x500 [ 62.255736] ? syscall_return_slowpath+0xe9/0x700 [ 62.260583] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 62.265523] SYSC_process_vm_readv+0x126/0x140 [ 62.270112] SyS_process_vm_readv+0x8a/0xb0 [ 62.274446] do_syscall_64+0x309/0x430 2018/04/09 17:55:04 executing program 6: unshare(0x40600) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) uname(&(0x7f0000000040)=""/96) bind$alg(r1, &(0x7f0000cab000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x401, 0x0, {0x3, 0x3, 0x0, 0x2, 0x400}}) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) [ 62.278346] ? s_show+0xe80/0xe80 [ 62.281814] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 62.287018] RIP: 0033:0x455259 [ 62.290212] RSP: 002b:00007f7a704a5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 62.297933] RAX: ffffffffffffffda RBX: 00007f7a704a66d4 RCX: 0000000000455259 [ 62.305212] RDX: 0000000000000008 RSI: 00000000200014c0 RDI: 00000000000000be [ 62.312489] RBP: 000000000072bea0 R08: 0000000000000002 R09: 0000000000000000 [ 62.319853] R10: 0000000020001640 R11: 0000000000000246 R12: 00000000ffffffff 2018/04/09 17:55:04 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00007b5000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@loopback={0x0, 0x1}, r2}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x402, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3cb) signalfd4(r1, &(0x7f00000002c0)={0xffff}, 0x8, 0x80000) sendto(r0, &(0x7f0000000200)="8d", 0x1, 0x0, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'bcsh0\x00'}}, 0x80) sendto(r0, &(0x7f0000000100)="ae", 0x1, 0x4008004, &(0x7f0000001b00)=ANY=[], 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100, 0x4000) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x1000080) ioctl$KDADDIO(r3, 0x4b34, 0xfffffffffffffffd) connect(r0, &(0x7f0000000040)=@nl=@unspec, 0x80) [ 62.327131] R13: 0000000000000471 R14: 00000000006f9b38 R15: 0000000000000000 [ 62.334417] [ 62.336051] Uninit was created at: [ 62.339608] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 62.344739] kmsan_alloc_page+0x82/0xe0 [ 62.348722] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 62.353501] alloc_pages_vma+0x1565/0x1800 [ 62.357829] do_huge_pmd_anonymous_page+0xf80/0x2520 [ 62.362942] handle_mm_fault+0x30ba/0x7ba0 [ 62.367179] __do_page_fault+0xec4/0x1a10 [ 62.371330] do_page_fault+0xd3/0x260 [ 62.375147] page_fault+0x45/0x50 [ 62.378591] 2018/04/09 17:55:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='ip6_vti0\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xfffffffffffffed7) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) sendto$inet(r0, &(0x7f0000dd9000)="b7", 0x1, 0x0, &(0x7f00007a5000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) getpeername$inet(r0, &(0x7f00000001c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000200)=0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="e1", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 62.380217] Bytes 0-124 of 125 are uninitialized [ 62.384962] ================================================================== [ 62.392312] Disabling lock debugging due to kernel taint [ 62.397767] Kernel panic - not syncing: panic_on_warn set ... [ 62.397767] [ 62.405168] CPU: 1 PID: 5251 Comm: syz-executor3 Tainted: G B 4.16.0+ #82 [ 62.413421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.422776] Call Trace: [ 62.425381] dump_stack+0x185/0x1d0 [ 62.429020] panic+0x39d/0x940 [ 62.432254] ? kmsan_internal_check_memory+0x145/0x1d0 [ 62.437541] kmsan_report+0x238/0x240 [ 62.441710] kmsan_internal_check_memory+0x164/0x1d0 [ 62.446833] ? copy_page_to_iter+0x5f6/0x1b70 [ 62.451345] kmsan_copy_to_user+0x69/0x160 [ 62.455594] copy_page_to_iter+0x754/0x1b70 [ 62.459936] process_vm_rw_core+0xf6a/0x1930 [ 62.464375] ? process_vm_rw+0x356/0x500 [ 62.468450] process_vm_rw+0x3d5/0x500 [ 62.472351] ? syscall_return_slowpath+0xe9/0x700 2018/04/09 17:55:04 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x8000000000000005, 0x8, 0x1000000000000008}, 0x2c) r1 = getpid() sched_getscheduler(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000014000), &(0x7f0000012000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) [ 62.477213] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 62.482159] SYSC_process_vm_readv+0x126/0x140 [ 62.486768] SyS_process_vm_readv+0x8a/0xb0 [ 62.491102] do_syscall_64+0x309/0x430 [ 62.495004] ? s_show+0xe80/0xe80 [ 62.498477] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 62.503680] RIP: 0033:0x455259 [ 62.506878] RSP: 002b:00007f7a704a5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 62.514687] RAX: ffffffffffffffda RBX: 00007f7a704a66d4 RCX: 0000000000455259 [ 62.521970] RDX: 0000000000000008 RSI: 00000000200014c0 RDI: 00000000000000be [ 62.529252] RBP: 000000000072bea0 R08: 0000000000000002 R09: 0000000000000000 [ 62.536535] R10: 0000000020001640 R11: 0000000000000246 R12: 00000000ffffffff [ 62.543815] R13: 0000000000000471 R14: 00000000006f9b38 R15: 0000000000000000 [ 62.551559] Dumping ftrace buffer: [ 62.555090] (ftrace buffer empty) [ 62.558777] Kernel Offset: disabled [ 62.562391] Rebooting in 86400 seconds..