INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2018/04/21 13:53:32 fuzzer started 2018/04/21 13:53:32 dialing manager at 10.128.0.26:39077 2018/04/21 13:53:38 kcov=true, comps=false 2018/04/21 13:53:42 executing program 0: 2018/04/21 13:53:42 executing program 1: 2018/04/21 13:53:42 executing program 7: 2018/04/21 13:53:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2}, {0x2, 0x0, @multicast2=0xe0000002}, {0x2, 0x0, @rand_addr}, 0xab852ebbe6fbd72e, 0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)='syz_tun\x00'}) 2018/04/21 13:53:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x7, {0x2, 0x0, @rand_addr}, "0008000000759b288842f5ac1f020409"}) 2018/04/21 13:53:42 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f000079df88)) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2018/04/21 13:53:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000300), 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 2018/04/21 13:53:42 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00009ecf78)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x2ef) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x312, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) syzkaller login: [ 42.995241] ip (3695) used greatest stack depth: 54672 bytes left [ 43.545439] ip (3747) used greatest stack depth: 54408 bytes left [ 44.516477] ip (3838) used greatest stack depth: 54200 bytes left [ 44.747665] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.754200] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.795159] device bridge_slave_0 entered promiscuous mode [ 44.835017] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.841617] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.853437] device bridge_slave_0 entered promiscuous mode [ 44.863266] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.869815] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.878645] device bridge_slave_0 entered promiscuous mode [ 44.938935] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.945480] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.977094] device bridge_slave_0 entered promiscuous mode [ 44.998848] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.005371] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.044914] device bridge_slave_1 entered promiscuous mode [ 45.067448] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.073982] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.091467] device bridge_slave_0 entered promiscuous mode [ 45.101560] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.108121] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.125198] device bridge_slave_1 entered promiscuous mode [ 45.136460] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.143007] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.153297] device bridge_slave_0 entered promiscuous mode [ 45.170196] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.176705] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.189414] device bridge_slave_1 entered promiscuous mode [ 45.199528] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.206131] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.229315] device bridge_slave_1 entered promiscuous mode [ 45.238502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.247705] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.254189] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.284586] device bridge_slave_0 entered promiscuous mode [ 45.299902] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.306415] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.327659] device bridge_slave_0 entered promiscuous mode [ 45.337908] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.344466] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.355703] device bridge_slave_1 entered promiscuous mode [ 45.364677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.374986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.382457] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.388960] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.423952] device bridge_slave_1 entered promiscuous mode [ 45.454861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.463568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.475065] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.481555] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.528501] device bridge_slave_1 entered promiscuous mode [ 45.538631] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.545231] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.576219] device bridge_slave_1 entered promiscuous mode [ 45.590928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.598689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.610689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.631604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.641085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.759688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.790965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.817173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.854647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.966726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.997894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.044577] ip (3942) used greatest stack depth: 53656 bytes left [ 46.442902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.609013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.661327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.670980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.681519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.786352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.827001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.871011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.923969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.932982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.947584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.969616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.028600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.165148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.184827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.242861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.728360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.771161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.895570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.947429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.961675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.975377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.998661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.111595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.154470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.163229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.182887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.215444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.224632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.232875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.244700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.256408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.285889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.293306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.309948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.353254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.360508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.376801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.416688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.424813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.457722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.480458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.493792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.503834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.512403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.519483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.545917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.562779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.595312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.614341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.623523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.631510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.642990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.664550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.688628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.709358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.730435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.739001] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.750304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.765679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.788479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.804831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.845254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.852591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.863522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.890648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.898629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.914401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.921526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.936288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.961683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.987812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.013621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.031762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.066144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.076381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.093485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.126924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.146675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.178147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.907254] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.913767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.920662] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.927152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.974090] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.982688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.016433] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.022939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.029835] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.036302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.114944] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.211067] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.217580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.224475] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.230948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.311705] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.331391] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.337921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.344852] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.351349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.366533] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.374902] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.381384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.388281] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.394767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.428022] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.435300] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.441812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.448719] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.455218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.466890] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.474234] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.480715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.487574] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.494065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.503926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.535408] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.541915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.548770] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.555260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.655276] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.000289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.018799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.055754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.068494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.088726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.105997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.114421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.478557] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.704106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.735751] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.911822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.925812] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.082910] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.102338] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.143276] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.228247] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.234568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.245610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.527963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.534286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.547706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.594762] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.601695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.619358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.740934] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.747286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.759649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.819399] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.825744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.840254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.976303] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.985128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.002659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.032673] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.039351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.057649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.096558] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.107576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.125316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/21 13:54:09 executing program 2: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) 2018/04/21 13:54:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000034f000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0100000000000000000000000000000000fe80000000000000000000000000000000000200"], 0x38}, 0x1}, 0x0) 2018/04/21 13:54:09 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00009ecf78)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x2ef) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x312, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/21 13:54:09 executing program 2: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) 2018/04/21 13:54:09 executing program 4: r0 = socket(0x10, 0x4000000002, 0x0) write(r0, &(0x7f0000000040)="260000001a0053eb910000f9090000000000000015e0f1ff609b000000ec5501000d69d488d8", 0x26) 2018/04/21 13:54:09 executing program 6: socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/21 13:54:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xffff}, 0x1c) 2018/04/21 13:54:09 executing program 7: 2018/04/21 13:54:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) bind(r0, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) 2018/04/21 13:54:10 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000580)='./file0\x00') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 2018/04/21 13:54:10 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x890b, 0x92fffd, &(0x7f0000000080)) 2018/04/21 13:54:10 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000300), 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f000024bff8), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 2018/04/21 13:54:10 executing program 1: clone(0x200, &(0x7f0000000140), &(0x7f0000744000), &(0x7f00000001c0), &(0x7f0000000100)) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xb41}, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x20, 0x7, 0x0, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8001}, &(0x7f0000000200)={0x77359400}) mknod(&(0x7f0000000080)='./file0\x00', 0x13ad9e113c1e2d, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') read$eventfd(r0, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/21 13:54:10 executing program 4: 2018/04/21 13:54:10 executing program 2: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000ff0)='fdinfo\x00') getdents64(r0, &(0x7f0000000040)=""/74, 0x4a) 2018/04/21 13:54:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/04/21 13:54:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0xf8, "bd82b42b29f04f00351a7b79eb831c496968a6bda4d80cb020c72d980955b814a9770fa6d4bcfd1d8f917300a76bbe54315eb258fd99e3cfd126a733ce3ba3cfb2556497c1957c67eb6c50870b120d74473e860bcc2eccb4a37a7e733f9ace12c8a5972ba46b44fbc99a085afff55385612649f73a7c48cbdcd99568ab509f84ecf4c4b96af0f31beab2f92268b322418137d98594cbb2ab7346200e40634251ac45feb6e22da42d72eee570e7e757c5462b647faf05121d7ebb1c15d8abe2a5b064085e0053db505998eee0c262bb5c4fede741eb0cbe4194ff02fb6f22d11374282b87e6f6bc8c841b8290933a5f04d6f59d8b2a05a8c1"}, &(0x7f00000006c0)=0x11c) 2018/04/21 13:54:11 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 13:54:11 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:11 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:11 executing program 4: syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/21 13:54:11 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x890b, 0x92fffd, &(0x7f0000000080)) 2018/04/21 13:54:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/04/21 13:54:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000a0afdff000000000000000000000000"], 0x14}, 0x1}, 0x0) 2018/04/21 13:54:11 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '%\'(trusted#\x00'}) 2018/04/21 13:54:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000588fff), 0xffffffffffffff3e, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/21 13:54:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/04/21 13:54:11 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 13:54:11 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000fc8)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) 2018/04/21 13:54:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ac0200446237d39467c383f12037b961ad0c1a4948851387ab1abd2b8d7e4101163acc5d6f7fb5aa3258ff57881a8128225e0783d1ce3c0000000000000001b4", "afdbd63d99d871b94c3cad26a50b1d914d9ac8fd05291a0dd010f7a9a3b7dab38c729833c1484f5844cab982d31c1d3ed4f39f0705205761e69c460389d1c4fd", "b857bf0485ceca379a70b0b783c8c154055347d32c3bc5678afe5e29f3d8c68c"}) 2018/04/21 13:54:11 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:11 executing program 4: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000200)=""/211) 2018/04/21 13:54:11 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f00002e8f1e)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d6696b208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8040705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000386fa0)='\x00', 0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$netlink(r1, &(0x7f0000009800)={&(0x7f0000000000)=@proc={0x10}, 0xc, &(0x7f0000003600)=[{&(0x7f0000001b80)={0xb0, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xa0, 0x0, [@generic="2db39e5faff17c863108060a0805d715bc943d7d0901315f5a92653156ff3beb2478da8c654c92516838a96b737783ffb113f0a3aebc86f3c753108d56c34c2bdaeeb5b0720e96751aa62d7b7c9fcb07fa6463831f16cf4a4a83d5172d5938d1c3e7865ec08de33b80dce4d980fe5c5b9c7a203a2979380f81fd3dbafa7e23cf2e9055dfaad34efaa3a4f7adfa0e1bdd8afa89d8d53842070c"]}]}, 0xb0}, {&(0x7f0000003080)=ANY=[@ANYBLOB="10c671d2848e3c1a2bbd7400fbdbdf25"], 0x1}], 0x2, &(0x7f0000009740)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}], 0x88, 0x4000001}, 0x40000) sendto$inet(r1, &(0x7f00002bff1e)="f98fbed0d3f90d55acb99e6f7b25b83d7c43d63282f753c6f22c36e47dc8d368b0fb3b320352220356c733fb10e4a67a359dcc510b522fe8f85b3decbaf376406d4786d3de3436ddf2473fd358b9237640efeaaa5c8ab8c4aa3fd00356ae39c1b90ab925909110c68935b8f74f42677699a2208cb11d21a2e3038194f872091e531bc1e526e8bfa2f97f4ad681e3136b9c8cb1f42d022a4f23ede6c4e33d4d3a9bd5ef18a725bac6499d183a2472f70269708284da8202e014d0fe9993b462", 0xbf, 0x10, &(0x7f0000000040)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x0, &(0x7f0000276fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/159, 0x9f, 0x0, 0x0, 0x0) 2018/04/21 13:54:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000a0afdff000000000000000000000000"], 0x14}, 0x1}, 0x0) 2018/04/21 13:54:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x400000004e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffe70, 0x0, 0x0, 0xdaf0) 2018/04/21 13:54:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCXONC(r1, 0x540a, 0x0) dup3(r1, r0, 0x0) 2018/04/21 13:54:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000840)={0x3, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x104) 2018/04/21 13:54:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, 'lo\x00'}) 2018/04/21 13:54:12 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000440)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr}}, {{0x2, 0x0, @broadcast=0xffffffff}}]}, 0x18c) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x108) 2018/04/21 13:54:12 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f00007d8ff6)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000000fc8)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000900)=@ipx, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/136, 0x88}}], 0x1, 0x0, &(0x7f00000037c0)) 2018/04/21 13:54:12 executing program 4: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f10101c7033400b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) readv(r0, &(0x7f0000001200)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1) 2018/04/21 13:54:12 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0x0) 2018/04/21 13:54:13 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:13 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x890b, 0x0, &(0x7f0000000080)) 2018/04/21 13:54:13 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) close(r2) bind$unix(r1, &(0x7f00007d8ff6)=@file={0x1, './file0\x00'}, 0xa) open(&(0x7f00006aa000)='./file0\x00', 0x200000, 0x0) sendmsg$unix(r0, &(0x7f0000000fc8)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000026000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000900)=@ipx, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/136, 0x88}}], 0x1, 0x0, &(0x7f00000037c0)) 2018/04/21 13:54:13 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) 2018/04/21 13:54:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCXONC(r1, 0x540a, 0x0) dup3(r1, r0, 0x0) 2018/04/21 13:54:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x400000004e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffe70, 0x0, 0x0, 0xdaf0) 2018/04/21 13:54:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCXONC(r1, 0x540a, 0x0) dup3(r1, r0, 0x0) 2018/04/21 13:54:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:13 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/21 13:54:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/155) 2018/04/21 13:54:14 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:14 executing program 0: io_setup(0x3, &(0x7f0000000740)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f00000000c0)={0x77359400}) r1 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)}]) io_destroy(r0) getpid() ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000100)) 2018/04/21 13:54:14 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) vmsplice(r0, &(0x7f0000001640)=[{&(0x7f0000000000)="c967ca0b7d8d7ea69ad05095a57cfc603f3a5930308e20345a2ae58707ba7c1258a48b42fb7a6c287ce6c7c11d4e3614496fb259226cbcd9729c8b2b782f5c2f57ece3100d8ba0de25823ba45c8b6ea16eb80c6ea05bd4a6f066d08f608db8d52919170a23a683087718634c6bbbc518ff0c23b123e3", 0x76}, {&(0x7f0000000180)}, {&(0x7f00000002c0)}, {&(0x7f0000000480)="f44de1044d9fb7834c77c467e9f6b349f805017a4fe6939309e4744cbd54e609996c9ea2d9ed1f5e15df74d9d7efc22139f9b91c05408be5345b5bf112d3d1c3789b44a71ce20754c0de185cc91c40b40eadc2a900fb874c04b7a5624204b3e66cc8f4a295af0312e3a7009c1c7519c4671a4fa6206863f8f8410d97b7df2aa2a1636ae80ff6e55160aa2a39df88533702959bf6fcc0d3682b00b90de0954d33fea680c6528dfe5bdb3edb822e3ae0b5a7bb4098db51a9d8674c3397ec13bf3cf3b121", 0xc3}, {&(0x7f0000001580)="4ab250d74e0dcbb5f0749f37da402f9ed0028ebb1a7ad09717196e4166f9d50a98229ffca06d5303e5db2f027fc3ceeb0cbf514bc8bbba6c2afb458c440d060316bbad5b15d5032818eb09793d455dbc7cbe5990ded571a89926f6673e8e6cdc540417232ad3dc7a8fce76c5fa9563e11371", 0x72}], 0x5, 0xa) 2018/04/21 13:54:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:14 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:14 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCXONC(r1, 0x540a, 0x0) dup3(r1, r0, 0x0) 2018/04/21 13:54:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 13:54:14 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000080)) 2018/04/21 13:54:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000003640)='./file0\x00', 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003840)={@loopback, @rand_addr, 0x0}, &(0x7f0000003880)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000038c0)={@remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, 0x10000, 0x10001, 0x3, 0x100, 0xda6, 0x4000040, r2}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300020e000000e503821e199129ee04000800d3000000000000000000001c00000000000000000000000000000000030006000000000002000000000000000000000000e1000002000100000000000006070000000000030005000000000002000000e00000010000000000000000"], 0x70}, 0x1}, 0x0) socketpair(0x10015, 0x2, 0x4, &(0x7f0000000080)) 2018/04/21 13:54:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000f8ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) 2018/04/21 13:54:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000002280)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)={[0x32]}, 0x1) 2018/04/21 13:54:15 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:15 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000034f000)=ANY=[@ANYBLOB="020a000007000000000600000000000005001a0000000000000000000000000000000000fe80000000000000000000000000000000000000"], 0x38}, 0x1}, 0x0) 2018/04/21 13:54:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffff9c}) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xffd5}], 0x1, &(0x7f0000000100)}, 0x2000c080) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) 2018/04/21 13:54:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x0, {0x2, 0x0, @rand_addr}, "0008000000759b288842f5ac1f020409"}) 2018/04/21 13:54:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000791fd1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @rand_addr}}}}}, &(0x7f0000ae3000)) 2018/04/21 13:54:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x40]}) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x0, 0x0) 2018/04/21 13:54:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00008d1000), 0x3ef, 0x4c080, &(0x7f00005fa000)={0xa, 0x4e22}, 0x1c) sendmsg(r0, &(0x7f0000001a80)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000003fc0)="b2", 0x1}], 0x1}, 0x2404c040) sendmsg(r0, &(0x7f0000610fc8)={0x0, 0x0, &(0x7f00009f8000)=[{&(0x7f0000002800)="ed", 0x1}], 0x1, &(0x7f0000000200)}, 0x0) 2018/04/21 13:54:15 executing program 0: io_setup(0x3, &(0x7f0000000740)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f00000000c0)={0x77359400}) r1 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)}]) io_destroy(r0) getpid() ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000100)) 2018/04/21 13:54:15 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/21 13:54:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00008d1000), 0x241, 0x24000841, &(0x7f00005fa000)={0xa, 0x5e22}, 0x1c) [ 73.865672] ================================================================== [ 73.873124] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 73.879279] CPU: 0 PID: 5988 Comm: syz-executor3 Not tainted 4.16.0+ #84 [ 73.886119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.895591] Call Trace: [ 73.898180] [ 73.900341] dump_stack+0x185/0x1d0 [ 73.903982] ? csum_partial+0x78e/0x850 [ 73.907964] kmsan_report+0x142/0x240 [ 73.911780] __msan_warning_32+0x6c/0xb0 2018/04/21 13:54:15 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f00000000c0)="2b95", 0x2, 0x0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) [ 73.915857] csum_partial+0x78e/0x850 [ 73.919675] csum_partial_ext+0x89/0xa0 [ 73.923663] __skb_checksum+0x6d4/0x1010 [ 73.927741] ? skb_checksum+0x120/0x120 [ 73.931731] skb_checksum+0xec/0x120 [ 73.935450] ? skb_checksum+0x120/0x120 [ 73.939432] ? csum_partial_ext+0xa0/0xa0 [ 73.943597] __skb_checksum_complete+0x90/0x400 [ 73.948281] __udp6_lib_rcv+0x21e1/0x3920 [ 73.952441] ? ip6_input_finish+0x55c/0x2110 [ 73.956885] ? __msan_metadata_ptr_for_load_8+0x10/0x20 2018/04/21 13:54:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='Z', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 2018/04/21 13:54:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'irlan0\x00'}, 0x18) [ 73.962290] ? __local_bh_enable_ip+0x3b/0x140 [ 73.966895] udpv6_rcv+0x5c/0x70 [ 73.970274] ? udp_v6_early_demux+0x11a0/0x11a0 [ 73.974957] ip6_input_finish+0xa62/0x2110 [ 73.979209] ? ip6table_filter_hook+0xb5/0xe0 [ 73.983840] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 73.989222] ? ip6_input_finish+0x12a1/0x2110 [ 73.993733] ip6_input+0x294/0x320 [ 73.997284] ? ip6_input+0x320/0x320 [ 74.001007] ? ipv6_rcv+0x26d0/0x26d0 [ 74.004823] ipv6_rcv+0x20ec/0x26d0 [ 74.008471] ? local_bh_enable+0x40/0x40 [ 74.012563] __netif_receive_skb_core+0x47cf/0x4a80 [ 74.017593] ? rb_insert_color+0xa4/0x1300 [ 74.021848] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 74.027667] ? ip6_rcv_finish+0x4d0/0x4d0 [ 74.031836] process_backlog+0x62d/0xe20 [ 74.035923] ? rps_trigger_softirq+0x2f0/0x2f0 [ 74.040515] net_rx_action+0x7c1/0x1a70 [ 74.044623] ? net_tx_action+0xab0/0xab0 [ 74.048709] __do_softirq+0x56d/0x93d [ 74.052541] do_softirq_own_stack+0x2a/0x40 [ 74.056866] [ 74.059119] __local_bh_enable_ip+0x114/0x140 2018/04/21 13:54:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00008d1000), 0x0, 0x4c080, &(0x7f00005fa000)={0xa, 0x4e24}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7) sendmsg(r0, &(0x7f0000610fc8)={0x0, 0x0, &(0x7f00009f8000), 0x0, &(0x7f0000000200)}, 0x0) [ 74.063632] local_bh_enable+0x36/0x40 [ 74.067544] ip6_finish_output2+0x1b6c/0x1f20 [ 74.072066] ip6_finish_output+0xb3f/0xc00 [ 74.076320] ip6_output+0x597/0x6c0 [ 74.079993] ? ip6_output+0x6c0/0x6c0 [ 74.084858] ? ac6_seq_show+0x200/0x200 [ 74.088860] ip6_local_out+0x573/0x640 [ 74.092770] ? __ip6_local_out+0x4f0/0x4f0 [ 74.097033] ip6_send_skb+0xfa/0x380 [ 74.100776] udp_v6_send_skb+0x116a/0x1880 [ 74.105043] udpv6_sendmsg+0x15f4/0x45b0 [ 74.109125] ? rw_copy_check_uvector+0x5af/0x6c0 [ 74.113895] ? rw_copy_check_uvector+0x643/0x6c0 [ 74.118669] ? ip_copy_metadata+0xac0/0xac0 [ 74.123017] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 74.127783] inet_sendmsg+0x48d/0x740 [ 74.131597] ? security_socket_sendmsg+0x9e/0x210 [ 74.136453] ? inet_getname+0x500/0x500 [ 74.140442] ___sys_sendmsg+0xec0/0x1310 [ 74.144523] ? __fdget+0x4e/0x60 [ 74.147909] ? __fget_light+0x56/0x710 [ 74.151811] ? __fdget+0x4e/0x60 [ 74.155210] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 74.160595] ? __fget_light+0x6b9/0x710 [ 74.164591] SYSC_sendmsg+0x2a3/0x3d0 [ 74.168411] SyS_sendmsg+0x54/0x80 [ 74.171960] do_syscall_64+0x309/0x430 [ 74.175865] ? ___sys_sendmsg+0x1310/0x1310 [ 74.180203] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 74.185405] RIP: 0033:0x455389 [ 74.188605] RSP: 002b:00007fe66c843c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.196329] RAX: ffffffffffffffda RBX: 00007fe66c8446d4 RCX: 0000000000455389 [ 74.203615] RDX: 0000000000000000 RSI: 0000000020610fc8 RDI: 0000000000000013 [ 74.210904] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 74.218191] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 74.225478] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000000 [ 74.232767] [ 74.234482] Uninit was created at: [ 74.238030] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 74.243062] kmsan_alloc_page+0x82/0xe0 [ 74.247054] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 74.251824] alloc_pages_current+0x6b5/0x970 [ 74.256249] skb_page_frag_refill+0x3ba/0x5e0 [ 74.260761] sk_page_frag_refill+0xa4/0x340 [ 74.265100] __ip6_append_data+0x1a20/0x4bb0 [ 74.269536] ip6_append_data+0x40e/0x6b0 [ 74.273613] udpv6_sendmsg+0xfd5/0x45b0 [ 74.277600] inet_sendmsg+0x48d/0x740 [ 74.281409] ___sys_sendmsg+0xec0/0x1310 [ 74.285481] SYSC_sendmsg+0x2a3/0x3d0 [ 74.289291] SyS_sendmsg+0x54/0x80 [ 74.292836] do_syscall_64+0x309/0x430 [ 74.296736] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 74.301917] ================================================================== [ 74.309272] Disabling lock debugging due to kernel taint [ 74.314728] Kernel panic - not syncing: panic_on_warn set ... [ 74.314728] [ 74.322106] CPU: 0 PID: 5988 Comm: syz-executor3 Tainted: G B 4.16.0+ #84 [ 74.330251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.339619] Call Trace: [ 74.342215] [ 74.344380] dump_stack+0x185/0x1d0 [ 74.348017] panic+0x39d/0x940 [ 74.351241] ? csum_partial+0x78e/0x850 [ 74.355221] kmsan_report+0x238/0x240 [ 74.359030] __msan_warning_32+0x6c/0xb0 [ 74.363097] csum_partial+0x78e/0x850 [ 74.366906] csum_partial_ext+0x89/0xa0 [ 74.370886] __skb_checksum+0x6d4/0x1010 [ 74.374960] ? skb_checksum+0x120/0x120 [ 74.378945] skb_checksum+0xec/0x120 [ 74.382664] ? skb_checksum+0x120/0x120 [ 74.386653] ? csum_partial_ext+0xa0/0xa0 [ 74.390811] __skb_checksum_complete+0x90/0x400 [ 74.395506] __udp6_lib_rcv+0x21e1/0x3920 [ 74.399671] ? ip6_input_finish+0x55c/0x2110 [ 74.404097] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 74.409473] ? __local_bh_enable_ip+0x3b/0x140 [ 74.414089] udpv6_rcv+0x5c/0x70 [ 74.417483] ? udp_v6_early_demux+0x11a0/0x11a0 [ 74.422158] ip6_input_finish+0xa62/0x2110 [ 74.426403] ? ip6table_filter_hook+0xb5/0xe0 [ 74.430910] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 74.436288] ? ip6_input_finish+0x12a1/0x2110 [ 74.440812] ip6_input+0x294/0x320 [ 74.444362] ? ip6_input+0x320/0x320 [ 74.448081] ? ipv6_rcv+0x26d0/0x26d0 [ 74.451888] ipv6_rcv+0x20ec/0x26d0 [ 74.455533] ? local_bh_enable+0x40/0x40 [ 74.459617] __netif_receive_skb_core+0x47cf/0x4a80 [ 74.464641] ? rb_insert_color+0xa4/0x1300 [ 74.468928] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 74.474833] ? ip6_rcv_finish+0x4d0/0x4d0 [ 74.478998] process_backlog+0x62d/0xe20 [ 74.483084] ? rps_trigger_softirq+0x2f0/0x2f0 [ 74.487683] net_rx_action+0x7c1/0x1a70 [ 74.491682] ? net_tx_action+0xab0/0xab0 [ 74.495762] __do_softirq+0x56d/0x93d [ 74.499669] do_softirq_own_stack+0x2a/0x40 [ 74.503993] [ 74.506246] __local_bh_enable_ip+0x114/0x140 [ 74.510758] local_bh_enable+0x36/0x40 [ 74.514662] ip6_finish_output2+0x1b6c/0x1f20 [ 74.519185] ip6_finish_output+0xb3f/0xc00 [ 74.523440] ip6_output+0x597/0x6c0 [ 74.527085] ? ip6_output+0x6c0/0x6c0 [ 74.530907] ? ac6_seq_show+0x200/0x200 [ 74.534899] ip6_local_out+0x573/0x640 [ 74.538815] ? __ip6_local_out+0x4f0/0x4f0 [ 74.543075] ip6_send_skb+0xfa/0x380 [ 74.546806] udp_v6_send_skb+0x116a/0x1880 [ 74.551064] udpv6_sendmsg+0x15f4/0x45b0 [ 74.555152] ? rw_copy_check_uvector+0x5af/0x6c0 [ 74.559930] ? rw_copy_check_uvector+0x643/0x6c0 [ 74.564708] ? ip_copy_metadata+0xac0/0xac0 [ 74.569055] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 74.573828] inet_sendmsg+0x48d/0x740 [ 74.577643] ? security_socket_sendmsg+0x9e/0x210 [ 74.582515] ? inet_getname+0x500/0x500 [ 74.586507] ___sys_sendmsg+0xec0/0x1310 [ 74.590595] ? __fdget+0x4e/0x60 [ 74.593974] ? __fget_light+0x56/0x710 [ 74.597870] ? __fdget+0x4e/0x60 [ 74.601244] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 74.606620] ? __fget_light+0x6b9/0x710 [ 74.610619] SYSC_sendmsg+0x2a3/0x3d0 [ 74.614444] SyS_sendmsg+0x54/0x80 [ 74.618001] do_syscall_64+0x309/0x430 [ 74.621904] ? ___sys_sendmsg+0x1310/0x1310 [ 74.626233] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 74.631422] RIP: 0033:0x455389 [ 74.634610] RSP: 002b:00007fe66c843c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.642324] RAX: ffffffffffffffda RBX: 00007fe66c8446d4 RCX: 0000000000455389 [ 74.649580] RDX: 0000000000000000 RSI: 0000000020610fc8 RDI: 0000000000000013 [ 74.656831] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 74.664085] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 74.671335] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000000 [ 74.679085] Dumping ftrace buffer: [ 74.682606] (ftrace buffer empty) [ 74.686294] Kernel Offset: disabled [ 74.689899] Rebooting in 86400 seconds..