INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. 2018/04/11 21:25:00 fuzzer started 2018/04/11 21:25:00 dialing manager at 10.128.0.26:41677 2018/04/11 21:25:06 kcov=true, comps=false 2018/04/11 21:25:09 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000037fe8), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3) 2018/04/11 21:25:09 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3) syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000001780)) 2018/04/11 21:25:09 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x24080) 2018/04/11 21:25:09 executing program 4: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1f000000a7"]}) 2018/04/11 21:25:09 executing program 5: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/11 21:25:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x2e, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) 2018/04/11 21:25:09 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000000003, 0x3) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x11, &(0x7f0000005f18)={{{@in6=@empty={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) 2018/04/11 21:25:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xa, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) syzkaller login: [ 41.751592] ip (3745) used greatest stack depth: 54672 bytes left [ 42.423985] ip (3804) used greatest stack depth: 54312 bytes left [ 43.241011] ip (3888) used greatest stack depth: 53960 bytes left [ 45.332166] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.402820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.414850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.435948] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.555696] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.712217] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.773845] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.842592] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.269862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.326180] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.340904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.410311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.609466] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.692608] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.768943] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.033933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.040275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.054714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.088193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.101597] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.107935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.131739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.164578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.177706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.184130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.191890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.220887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.264016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.355201] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.361496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.373946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.600618] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.609130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.624855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.644153] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.657756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.692755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.784957] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.791260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.801409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/11 21:25:26 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)) getsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f00000000c0)=""/201, &(0x7f00000001c0)=0xc9) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev={0xac, 0x14, 0x14}, 0x4e22, 0x0, 'sh\x00'}, 0x2c) fchmod(0xffffffffffffffff, 0x0) 2018/04/11 21:25:27 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000300)) 2018/04/11 21:25:27 executing program 6: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1f"]}) 2018/04/11 21:25:27 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 2018/04/11 21:25:27 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) 2018/04/11 21:25:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x0, &(0x7f0000000680)=[{&(0x7f0000000940)='R', 0x1}], 0x1, &(0x7f0000000080)}, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bpq0\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)="009bc30976ae0c8a47e2747bd00aabcc664a39e3b2f7f1a999daaa3070884e0c029aacc6f3202175f906c7a1c43c58c1d6e8b9d0614441c421c9fd4f04d9112fc13aef1dd40ee155", 0x48}], 0x1}, 0x0) 2018/04/11 21:25:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xa, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) 2018/04/11 21:25:27 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') dup3(r0, r1, 0x0) 2018/04/11 21:25:27 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r1, &(0x7f0000001b40)={&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/110, 0x6e}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xa}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x20001000, 0x2, 0x1, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)="d2", 0x1}], 0x1, &(0x7f00000002c0)}, 0x0) 2018/04/11 21:25:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/04/11 21:25:27 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0x5, 0x100000000000006, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/11 21:25:27 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 2018/04/11 21:25:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000002580), 0x0, &(0x7f00000025c0)={'nouuid,'}) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x2000, &(0x7f000000a000)) 2018/04/11 21:25:27 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800010000000000000000000a0000000000000000000000140005000000000000000000140000"], 0x1}, 0x1}, 0x0) 2018/04/11 21:25:27 executing program 4: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x4, 0x2}) mq_timedsend(r0, &(0x7f0000a0ffff)="c2", 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mq_timedreceive(r0, &(0x7f000033b000)=""/4096, 0x1000, 0x0, &(0x7f0000f36000)={0x0, 0x989680}) 2018/04/11 21:25:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000000) 2018/04/11 21:25:27 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 2018/04/11 21:25:27 executing program 7: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x2}, &(0x7f0000000080)='\x00', 0x0) 2018/04/11 21:25:27 executing program 4: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x4, 0x2}) mq_timedsend(r0, &(0x7f0000a0ffff)="c2", 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mq_timedreceive(r0, &(0x7f000033b000)=""/4096, 0x1000, 0x0, &(0x7f0000f36000)={0x0, 0x989680}) 2018/04/11 21:25:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/04/11 21:25:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$TUNGETSNDBUF(r0, 0x8980, &(0x7f0000000100)) 2018/04/11 21:25:28 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/11 21:25:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000c03f90)=[{&(0x7f0000000000)="18", 0x1}], 0x1) 2018/04/11 21:25:28 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 2018/04/11 21:25:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000000)=""/160, 0xa0, 0x0) 2018/04/11 21:25:28 executing program 4: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x4, 0x2}) mq_timedsend(r0, &(0x7f0000a0ffff)="c2", 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mq_timedreceive(r0, &(0x7f000033b000)=""/4096, 0x1000, 0x0, &(0x7f0000f36000)={0x0, 0x989680}) 2018/04/11 21:25:28 executing program 7: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x2}, &(0x7f0000000080)='\x00', 0x0) 2018/04/11 21:25:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0xfffffffffffffd71) shutdown(r0, 0x1) 2018/04/11 21:25:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x4, 0x440, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000040), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ifb0\x00', 'bridge0\x00', 'bcsh0\x00', 'syz_tun\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xe0, 0x130, 0x1a8, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x3}}}, @cpu={'cpu\x00', 0x8}]}, [@common=@log={'log\x00', 0x28, {{0x0, "5e7666b51431f946a53db9c851cb6ad63761935cb1eabf749a1905863f09"}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "42bb9fd216a99869276bec6b425403b91465a795b325faf607e8f76cb9bb4c1455aa4069454f4263841d7c6a86761fecf4ac46875dee6abd28cc82e5ec79c041"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x1, 0xeabf, 'ip6tnl0\x00', 'syz_tun\x00', 'bcsh0\x00', 'syz_tun\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0xff, 0x103], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0x0, 0xff], 0x130, 0x130, 0x160, [@rateest={'rateest\x00', 0x48, {{'ip6gre0\x00', 'sit0\x00', 0x21, 0x3, 0x0, 0xa651, 0x85, 0x3, 0x3, 0xa0b}}}, @nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x81}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xef123b492917e313}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x9, 0x2, 0x88fb, 'ip_vti0\x00', 'gretap0\x00', 'syzkaller1\x00', 'vcan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0x0, 0x103], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x8ce0be7d2cf6e794, 0x0, 0x0, 0xff, 0xff], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}}]}]}, 0x4b8) 2018/04/11 21:25:28 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 2018/04/11 21:25:28 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000003000)={0x0, 0x0, 0x2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000003000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 2018/04/11 21:25:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xffff) 2018/04/11 21:25:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x22, 0x331, 0x0, 0x0, {0x20000000006}}, 0x14}, 0x1}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001480), 0x0, &(0x7f00000014c0)=""/32, 0x20}, 0x0) 2018/04/11 21:25:28 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 2018/04/11 21:25:28 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x2) socket$netlink(0x10, 0x3, 0x0) 2018/04/11 21:25:28 executing program 4: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x4, 0x2}) mq_timedsend(r0, &(0x7f0000a0ffff)="c2", 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mq_timedreceive(r0, &(0x7f000033b000)=""/4096, 0x1000, 0x0, &(0x7f0000f36000)={0x0, 0x989680}) 2018/04/11 21:25:28 executing program 1: 2018/04/11 21:25:28 executing program 6: 2018/04/11 21:25:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000fa0fff), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/11 21:25:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0xfffffffffffffd71) shutdown(r0, 0x1) 2018/04/11 21:25:28 executing program 6: 2018/04/11 21:25:28 executing program 0: 2018/04/11 21:25:28 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 2018/04/11 21:25:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) shutdown(r0, 0x1) 2018/04/11 21:25:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/04/11 21:25:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000280)) 2018/04/11 21:25:29 executing program 0: 2018/04/11 21:25:29 executing program 2: 2018/04/11 21:25:29 executing program 6: 2018/04/11 21:25:29 executing program 7: 2018/04/11 21:25:29 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[]}) 2018/04/11 21:25:29 executing program 1: 2018/04/11 21:25:29 executing program 3: 2018/04/11 21:25:29 executing program 0: 2018/04/11 21:25:29 executing program 2: 2018/04/11 21:25:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) shutdown(r0, 0x1) 2018/04/11 21:25:29 executing program 3: 2018/04/11 21:25:29 executing program 7: 2018/04/11 21:25:29 executing program 6: 2018/04/11 21:25:29 executing program 1: 2018/04/11 21:25:29 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave\x00', &(0x7f0000000080)=ANY=[@ANYBLOB]}) 2018/04/11 21:25:29 executing program 0: 2018/04/11 21:25:29 executing program 2: 2018/04/11 21:25:29 executing program 6: 2018/04/11 21:25:29 executing program 1: 2018/04/11 21:25:29 executing program 4: 2018/04/11 21:25:29 executing program 7: 2018/04/11 21:25:29 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) read(r0, &(0x7f0000000040)=""/1, 0x233) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/11 21:25:29 executing program 0: 2018/04/11 21:25:29 executing program 5: 2018/04/11 21:25:29 executing program 2: 2018/04/11 21:25:29 executing program 7: 2018/04/11 21:25:29 executing program 1: 2018/04/11 21:25:29 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x1, &(0x7f0000012000)=[{0x6, 0x0, 0x0, 0xfffffffffffffff7}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/04/11 21:25:29 executing program 4: [ 59.832606] audit: type=1326 audit(1523481929.831:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5331 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455279 code=0xffff0000 2018/04/11 21:25:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6}, 0xc) 2018/04/11 21:25:29 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014dfc8)={&(0x7f000085eff4)={0x10}, 0xc, &(0x7f0000f9bff0)={&(0x7f000037df3c)=@updpolicy={0xb8, 0x19, 0x401, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1}, 0x0) 2018/04/11 21:25:29 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/11 21:25:29 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) 2018/04/11 21:25:30 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000f23ff8)={0x0}) sendmsg$key(r0, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1e000200010000000100000000000000"], 0x10}, 0x1}, 0x0) [ 60.109666] ================================================================== [ 60.117097] BUG: KMSAN: uninit-value in tipc_subscrb_rcv_cb+0x418/0xe80 [ 60.123856] CPU: 1 PID: 19 Comm: kworker/u4:1 Not tainted 4.16.0+ #83 [ 60.130432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.139798] Workqueue: tipc_rcv tipc_recv_work [ 60.144382] Call Trace: [ 60.146978] dump_stack+0x185/0x1d0 [ 60.150617] ? tipc_subscrb_rcv_cb+0x418/0xe80 [ 60.155219] kmsan_report+0x142/0x240 [ 60.159029] __msan_warning_32+0x6c/0xb0 [ 60.163186] tipc_subscrb_rcv_cb+0x418/0xe80 [ 60.169182] tipc_receive_from_sock+0x64c/0x800 [ 60.173876] ? tipc_topsrv_start+0x650/0x650 [ 60.178301] ? tipc_accept_from_sock+0x610/0x610 [ 60.183157] tipc_recv_work+0xd8/0x1f0 [ 60.187058] ? tipc_send_work+0xe20/0xe20 [ 60.191219] process_one_work+0x12c6/0x1f60 [ 60.195558] worker_thread+0x113c/0x24f0 [ 60.199632] ? process_one_work+0x1f60/0x1f60 [ 60.204122] kthread+0x539/0x720 [ 60.207486] ? process_one_work+0x1f60/0x1f60 [ 60.211986] ? kthread_blkcg+0xf0/0xf0 [ 60.215872] ret_from_fork+0x35/0x40 [ 60.219580] [ 60.221201] Uninit was created at: [ 60.224745] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 60.229851] kmsan_kmalloc+0x94/0x100 [ 60.233652] kmem_cache_alloc+0xaab/0xb90 [ 60.237805] tipc_receive_from_sock+0x15c/0x800 [ 60.242481] tipc_recv_work+0xd8/0x1f0 [ 60.246375] process_one_work+0x12c6/0x1f60 [ 60.250699] worker_thread+0x113c/0x24f0 [ 60.254760] kthread+0x539/0x720 [ 60.258128] ret_from_fork+0x35/0x40 [ 60.261830] ================================================================== [ 60.269185] Disabling lock debugging due to kernel taint [ 60.274642] Kernel panic - not syncing: panic_on_warn set ... [ 60.274642] [ 60.282017] CPU: 1 PID: 19 Comm: kworker/u4:1 Tainted: G B 4.16.0+ #83 [ 60.289898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.299258] Workqueue: tipc_rcv tipc_recv_work [ 60.303828] Call Trace: [ 60.306406] dump_stack+0x185/0x1d0 [ 60.310024] panic+0x39d/0x940 [ 60.313222] ? tipc_subscrb_rcv_cb+0x418/0xe80 [ 60.317786] kmsan_report+0x238/0x240 [ 60.321574] __msan_warning_32+0x6c/0xb0 [ 60.325616] tipc_subscrb_rcv_cb+0x418/0xe80 [ 60.330015] tipc_receive_from_sock+0x64c/0x800 [ 60.334671] ? tipc_topsrv_start+0x650/0x650 [ 60.339068] ? tipc_accept_from_sock+0x610/0x610 [ 60.343806] tipc_recv_work+0xd8/0x1f0 [ 60.347678] ? tipc_send_work+0xe20/0xe20 [ 60.351808] process_one_work+0x12c6/0x1f60 [ 60.356137] worker_thread+0x113c/0x24f0 [ 60.360191] ? process_one_work+0x1f60/0x1f60 [ 60.364668] kthread+0x539/0x720 [ 60.368021] ? process_one_work+0x1f60/0x1f60 [ 60.372504] ? kthread_blkcg+0xf0/0xf0 [ 60.376372] ret_from_fork+0x35/0x40 [ 60.380537] Dumping ftrace buffer: [ 60.384055] (ftrace buffer empty) [ 60.387751] Kernel Offset: disabled [ 60.391351] Rebooting in 86400 seconds..