INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. 2018/04/07 13:05:38 fuzzer started 2018/04/07 13:05:38 dialing manager at 10.128.0.26:41897 2018/04/07 13:05:44 kcov=true, comps=false 2018/04/07 13:05:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001274, &(0x7f0000004640)) 2018/04/07 13:05:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f6578650000001c03f3") fgetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000140), 0x0) 2018/04/07 13:05:47 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x74}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) 2018/04/07 13:05:47 executing program 4: r0 = socket$inet(0xa, 0x803, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x0, 0x200000cbe}) 2018/04/07 13:05:47 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x689, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00000000c0)={0x1, 0x1}) 2018/04/07 13:05:47 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa2, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 2018/04/07 13:05:47 executing program 2: pkey_mprotect(&(0x7f000040e000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x0) 2018/04/07 13:05:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001580)={0x0, 0x5, 0x80000000}, 0x14) sendto$inet(r0, &(0x7f0000000240)="82", 0x1, 0x7, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) syzkaller login: [ 43.493636] ip (3769) used greatest stack depth: 54672 bytes left [ 44.027425] ip (3819) used greatest stack depth: 54312 bytes left [ 44.978798] ip (3912) used greatest stack depth: 54296 bytes left [ 46.864887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.916912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.008395] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.027170] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.122421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.139706] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.216726] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.277677] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.531924] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.589724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.784534] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.806219] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.829558] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.867511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.903241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.130572] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.265015] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.271306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.287112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.323592] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.329840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.340843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.554818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.561119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.575875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.599540] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.605783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.633211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.654261] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.663150] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.669401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.683551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.705554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.720520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.731202] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.758657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.767722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.966646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.972957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.984579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 13:06:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) dup(0xffffffffffffff9c) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000c60000)={{{@in, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(0x0) getresgid(&(0x7f0000c06000), &(0x7f0000498000), &(0x7f0000843ffc)) gettid() getresuid(&(0x7f0000e8e000), &(0x7f0000657ffc), &(0x7f00008cbffc)) lstat(&(0x7f00000b4000)='./bus\x00', &(0x7f0000ea5fbc)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00004c2000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000326f18)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffe08) lstat(&(0x7f0000c6aff8)='./file0\x00', &(0x7f000041b000)) gettid() lstat(&(0x7f0000589ff8)='./file0\x00', &(0x7f000093bfbc)) getegid() getpid() getresuid(&(0x7f0000c2a000), &(0x7f0000cb0000), &(0x7f0000a41000)) fstat(0xffffffffffffffff, &(0x7f0000352fbc)) getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000001b000)={{{@in6=@loopback, @in6=@mcast1}}, {{}, 0x0, @in6=@local}}, &(0x7f0000e9c000)=0xe8) getgroups(0x0, &(0x7f000039bffc)) fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000a9eff8)='./file0\x00', &(0x7f0000c91000)) getgroups(0x0, &(0x7f0000cc0000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000a2ffe)) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000106ff4), &(0x7f0000322000)=0xc) getpgid(0x0) getresuid(&(0x7f00001e2000), &(0x7f0000c07000), &(0x7f0000d26ffc)) getresgid(&(0x7f0000074000), &(0x7f00003f6000), &(0x7f00002beffc)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000938000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac2fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)=ANY=[@ANYBLOB="1400000000000000fffffffffffffff700001b0a"], 0x1}, 0x1}, 0x48080) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/07 13:06:03 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x12c}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)) 2018/04/07 13:06:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001274, &(0x7f0000004640)) 2018/04/07 13:06:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003a3000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000a44ffc)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x1) 2018/04/07 13:06:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) 2018/04/07 13:06:04 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x689, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00000000c0)={0x1, 0x1}) 2018/04/07 13:06:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) dup(0xffffffffffffff9c) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000c60000)={{{@in, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(0x0) getresgid(&(0x7f0000c06000), &(0x7f0000498000), &(0x7f0000843ffc)) gettid() getresuid(&(0x7f0000e8e000), &(0x7f0000657ffc), &(0x7f00008cbffc)) lstat(&(0x7f00000b4000)='./bus\x00', &(0x7f0000ea5fbc)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00004c2000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000326f18)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffe08) lstat(&(0x7f0000c6aff8)='./file0\x00', &(0x7f000041b000)) gettid() lstat(&(0x7f0000589ff8)='./file0\x00', &(0x7f000093bfbc)) getegid() getpid() getresuid(&(0x7f0000c2a000), &(0x7f0000cb0000), &(0x7f0000a41000)) fstat(0xffffffffffffffff, &(0x7f0000352fbc)) getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000001b000)={{{@in6=@loopback, @in6=@mcast1}}, {{}, 0x0, @in6=@local}}, &(0x7f0000e9c000)=0xe8) getgroups(0x0, &(0x7f000039bffc)) fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000a9eff8)='./file0\x00', &(0x7f0000c91000)) getgroups(0x0, &(0x7f0000cc0000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000a2ffe)) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000106ff4), &(0x7f0000322000)=0xc) getpgid(0x0) getresuid(&(0x7f00001e2000), &(0x7f0000c07000), &(0x7f0000d26ffc)) getresgid(&(0x7f0000074000), &(0x7f00003f6000), &(0x7f00002beffc)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000938000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac2fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)=ANY=[@ANYBLOB="1400000000000000fffffffffffffff700001b0a"], 0x1}, 0x1}, 0x48080) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/07 13:06:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001580)={0x0, 0x5, 0x80000000}, 0x14) sendto$inet(r0, &(0x7f0000000240)="82", 0x1, 0x7, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 2018/04/07 13:06:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/04/07 13:06:04 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000010c0)="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", 0x5ad}], 0x1}}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xffffffffffffffa9, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x3) 2018/04/07 13:06:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x74}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x4, 0x705000, 0x1, &(0x7f0000000000)) 2018/04/07 13:06:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@sco={0x1f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001380)="e3", 0x1}], 0x1, &(0x7f00000001c0)}}], 0x1, 0x0) 2018/04/07 13:06:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) 2018/04/07 13:06:04 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000080)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612a6f4918bde32f883521dfa4593a56d2e1902c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032641902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/04/07 13:06:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd46}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x0) rename(&(0x7f0000001e00)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f0000ab3ff0)='./file0\x00') 2018/04/07 13:06:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001580)={0x0, 0x5, 0x80000000}, 0x14) sendto$inet(r0, &(0x7f0000000240)="82", 0x1, 0x7, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 2018/04/07 13:06:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/07 13:06:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) dup(0xffffffffffffff9c) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000c60000)={{{@in, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(0x0) getresgid(&(0x7f0000c06000), &(0x7f0000498000), &(0x7f0000843ffc)) gettid() getresuid(&(0x7f0000e8e000), &(0x7f0000657ffc), &(0x7f00008cbffc)) lstat(&(0x7f00000b4000)='./bus\x00', &(0x7f0000ea5fbc)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00004c2000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000326f18)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffe08) lstat(&(0x7f0000c6aff8)='./file0\x00', &(0x7f000041b000)) gettid() lstat(&(0x7f0000589ff8)='./file0\x00', &(0x7f000093bfbc)) getegid() getpid() getresuid(&(0x7f0000c2a000), &(0x7f0000cb0000), &(0x7f0000a41000)) fstat(0xffffffffffffffff, &(0x7f0000352fbc)) getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000001b000)={{{@in6=@loopback, @in6=@mcast1}}, {{}, 0x0, @in6=@local}}, &(0x7f0000e9c000)=0xe8) getgroups(0x0, &(0x7f000039bffc)) fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000a9eff8)='./file0\x00', &(0x7f0000c91000)) getgroups(0x0, &(0x7f0000cc0000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000a2ffe)) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000106ff4), &(0x7f0000322000)=0xc) getpgid(0x0) getresuid(&(0x7f00001e2000), &(0x7f0000c07000), &(0x7f0000d26ffc)) getresgid(&(0x7f0000074000), &(0x7f00003f6000), &(0x7f00002beffc)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000938000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac2fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x27ffe) sendmsg$nl_generic(r1, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)=ANY=[@ANYBLOB="1400000000000000fffffffffffffff700001b0a"], 0x1}, 0x1}, 0x48080) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/04/07 13:06:04 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x79}, 0x383) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000240)) 2018/04/07 13:06:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 2018/04/07 13:06:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x221}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7fffffffefff, 0x400000, 0x1, &(0x7f0000000280)) 2018/04/07 13:06:04 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f00000006c0)='net/tcp\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00001b4ff6)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x803, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x0, 0x200000cbe}) 2018/04/07 13:06:04 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x8000000000002c) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x2000c080) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}, {0xa, 0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x9, [0x0, 0x1, 0x0, 0xf891, 0x0, 0x8, 0x0, 0xfff]}, 0x5c) writev(r0, &(0x7f0000001c40)=[{&(0x7f0000000c40)="2e8d37a0a468a75cde3972ea1b98047716f40b145c6a9b70c08c2647bdcbd1260be6b6e97db5875d1c935b2a8f191f27325a81079231e1ee6aa810e2f9178c30924843f8dc410c4941b7b613cf3397943eec259b669b99ee2577f419654c2fb3222fb0cb11c1a6ff33fe0b9bcbd6a51f4abb7f024a80de88f115cb2062948ac48efde8d33d4b8655ff1e082a95721e86e9909ddcd47a6756a886bbc6dc82ffdbab31ed0caef04e4d6e37bb06ceb8b1b342ca95daa70b0e85a5352faf14de3eb2ed31838aec89ed4fc062ce934f1a3595bb901236e96fb41af21ba319fb1b82bf3dbab03290047e70561f19b5d0e4691270c9ad2b21b642dd2c9760fa79d824ec22199b8d946f849a42b293e724b18c8d259f93f120f138206c7dc7dcde23f53c4d423fe0ce9fc0a3b2c3be296fa006b0eb0fb27d88b568b2ce7bf59b67ee6547fd196c6ffd7070be0cb1cb238497d5b77c061cc48a26baaf0c258ed25f6b35c354b8f83b3d9649ce73052acc382841dd4ad22f7cd0f921991e90e9ec7a82ee26872ba0c7c41d09b817cfd74d6ccbabc01ef817cf437e79bf03a38130a9b211efcfb474e53cd548613eaa362b60cd52e9cdb4cfd7bdafdd7569231f4c4b71bbcff3dfb59b9cbc0b4eb2c14aa0f675e1e15bb1a53989db07666f2b3f64e1c424665d73f6bef0cb1f359b9e0caf5ba30d4687c444e2956610996e2ca3b92af076432a4896f5e16801e57523bcfabe84417d52d246c04fec6703a5476604ff7598868f90ce3c273229e2635b902f33684f28a9dd0ef01086b67beb4b0717e30312442b7a4a2b552ea0c45f3cc1ab287b750854c0d71050e736571b711991df2ab00445b3a7c02d318299e87f0faa6b64e34bb760cd55a6d906095b994ce7980a4f4cc300bbad3258563d2c7abb790699a92180083332f9a60c736028b1d065f9fc3d0862f0f31050c7ba76b9b6516341474fdcf54fda80d5c46ed832c39b78908175187d80e19963af107375bfea22f090068b72e2ff1b7a44fd647de2ad35803a6fde4385e3850f3006857855d4d7004b0ef6fb4fcb395721c8bb5765e9325b7fb97874d1f3d3e4b47fd12a327172dba3b90dbf233e01f0eda71aa5d3d0d9fc362eaed65d32493c3b286674dbb51e350a5317a1c7b7acdb4c1cfd06748b4bb5278ce259109ff58ef70c9a0501d7fb4d15820dd8a66be2970bcd5cbf363b844c679722ef4e6c7fd5827809af593d436bb7d5a4d9a5c8b26551ef17b05cedce60a1318df7409cf5667cb8cd1ac2bc889eba3a5c757e43629b0a24b9221522676ce0a63aed7831a36a6518242b4c35683bb1794424267a19ca00d4df058c16bd99059b08d5308d70caa4377402fefcc3b96dcb4748fa50dabafdcea15d61396d111617322b3aa61d25335ccc3bcb4f79e0415868f512c861fece33aa07a9ff87e9ef1bc26ae08ba181b96072f183c5b785444c6d474c8ea2b0591ea2f0767de22eaa9698c25abffa0c3f9f696546ca46badd91e05410e60d50a3ab53a5d9bc7a439b68c60d60b783cb11e8ba0ab6d02f59fcae51273ba605062865393ebf2bc771903fcaa3ce88d4e47d81f018b9f4c0c6cab96a68b09d58e7d928c070b359b3dbf147667215cdfadb48b54aa7e08f561d894a0e9be85023ace26804d431a6bf9ae2e6b5a7a1d372035f6a617bcd3d9ddd74356612fdc818dac2818a3dbd2b60183ff62cece553ac9c64e954efaff77ba0e4bdfcd62ad76777d4ffd0c0ea9706120630cc02f52ca831f82a485cd668d21632971f655e334d299893847d0c3048751e49bb58e9221929b945ed60580d40ce38cb101245616165f09192368cfb5538fa5dcaed28e5f252c0cc9361db996d723435087bc276393e09a31d4b137b4b802abbd4653895f63d572924a87ab1bcc651916316d8990fa593cc401ff3e82bae127423221a0e8aba85f9906baf31066b2b9effeee2cf78c18b9826c4e893f0f6f4798fc79bf9da940f3f9c9b25d18ebd2f09e92e2ac2a947f746bbbf332c447daa6ca41f3adddf1ab87d6e05ac2cf3d51cf0be5b13836a7ed0bb2997b7528a04749725b47e7d9e9a52cc30e37b009618eee4d0d2b497b9fe8c7b99b0dd7d581cd171b43c73203de430a11a937d7235c14c63a64a4658c7b356b14d5d7e3dd4b3bc6d", 0x600}], 0x1) pipe(&(0x7f0000000080)) socketpair(0xc, 0x0, 0x2, &(0x7f0000000100)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @broadcast, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x0, r1}, {0x0, 0x10001, 0x0, 0x4e4, 0x0, 0x6, 0x0, 0x81}, {0x0, 0xfffffffffffffe00, 0x0, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@broadcast=0xffffffff, 0x0, 0x7f}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x34ff, 0x0, 0x0, 0x5, 0x0, 0x7}}, 0xe8) 2018/04/07 13:06:04 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x74}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x10, 0x930000, 0x1, &(0x7f0000000000)) 2018/04/07 13:06:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001580)={0x0, 0x5, 0x80000000}, 0x14) sendto$inet(r0, &(0x7f0000000240)="82", 0x1, 0x7, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 2018/04/07 13:06:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000350468db66cfaf3ccd90a46c03bb"], 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000400)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000140)=""/71, 0x47}], 0x5, &(0x7f0000003040)=""/4096, 0x1000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) [ 58.864184] ================================================================== [ 58.871591] BUG: KMSAN: uninit-value in ipv6_frag_rcv+0xfa5/0x6970 [ 58.877902] CPU: 1 PID: 5148 Comm: syz-executor7 Not tainted 4.16.0+ #82 [ 58.884732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.894073] Call Trace: [ 58.896647] [ 58.898795] dump_stack+0x185/0x1d0 [ 58.902425] ? ipv6_frag_rcv+0xfa5/0x6970 [ 58.906570] kmsan_report+0x142/0x240 [ 58.910368] __msan_warning_32+0x6c/0xb0 [ 58.914426] ipv6_frag_rcv+0xfa5/0x6970 [ 58.918401] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 58.923770] ? ipv6_frag_exit+0x90/0x90 [ 58.927743] ip6_input_finish+0xa62/0x2110 [ 58.931983] ? ip6table_filter_hook+0xb5/0xe0 [ 58.936477] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 58.941838] ip6_input+0x294/0x320 [ 58.945374] ? ip6_input+0x320/0x320 [ 58.949082] ? ipv6_rcv+0x26d0/0x26d0 [ 58.952877] ipv6_rcv+0x20ec/0x26d0 [ 58.956503] ? local_bh_enable+0x40/0x40 [ 58.960572] __netif_receive_skb_core+0x47cf/0x4a80 [ 58.965583] ? rb_insert_color+0xa4/0x1300 [ 58.969816] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 58.975612] ? ip6_rcv_finish+0x4d0/0x4d0 [ 58.979760] process_backlog+0x62d/0xe20 [ 58.983827] ? rps_trigger_softirq+0x2f0/0x2f0 [ 58.988401] net_rx_action+0x7c1/0x1a70 [ 58.992377] ? net_tx_action+0xab0/0xab0 [ 58.996435] __do_softirq+0x56d/0x93d [ 59.000238] ? copy_page_range+0x2e25/0x3f10 [ 59.004645] do_softirq_own_stack+0x2a/0x40 [ 59.008949] [ 59.011187] __local_bh_enable_ip+0x114/0x140 [ 59.015681] local_bh_enable+0x36/0x40 [ 59.019562] ip6_finish_output2+0x1b6c/0x1f20 [ 59.024065] ip6_finish_output+0xb3f/0xc00 [ 59.028304] ip6_output+0x597/0x6c0 [ 59.031926] ? ip6_output+0x6c0/0x6c0 [ 59.035725] ? ac6_seq_show+0x200/0x200 [ 59.039698] ip6_local_out+0x573/0x640 [ 59.043585] ? __ip6_local_out+0x4f0/0x4f0 [ 59.047818] ip6_push_pending_frames+0x218/0x4d0 [ 59.052569] rawv6_sendmsg+0x4500/0x4cc0 [ 59.056630] ? kmsan_set_origin_inline+0x6b/0x120 [ 59.061475] ? futex_wait_queue_me+0x4ba/0x710 [ 59.066056] ? futex_wait_queue_me+0x4ee/0x710 [ 59.070967] ? compat_rawv6_ioctl+0x30/0x30 [ 59.075285] inet_sendmsg+0x48d/0x740 [ 59.079089] ? security_socket_sendmsg+0x9e/0x210 [ 59.083933] ? inet_getname+0x500/0x500 [ 59.087906] sock_write_iter+0x3b9/0x470 [ 59.091969] ? sock_read_iter+0x480/0x480 [ 59.096116] do_iter_readv_writev+0x7bb/0x970 [ 59.100613] ? sock_read_iter+0x480/0x480 [ 59.104754] do_iter_write+0x30d/0xd40 [ 59.108643] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 59.114091] do_writev+0x3c9/0x830 [ 59.117639] ? syscall_return_slowpath+0xe9/0x700 [ 59.122474] ? SYSC_setsockopt+0x1be/0x570 [ 59.126707] SYSC_writev+0x9b/0xb0 [ 59.130247] SyS_writev+0x56/0x80 [ 59.133700] do_syscall_64+0x309/0x430 [ 59.137591] ? SYSC_readv+0xb0/0xb0 [ 59.141216] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.146395] RIP: 0033:0x455259 [ 59.149573] RSP: 002b:00007f3396216c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 59.157274] RAX: ffffffffffffffda RBX: 00007f33962176d4 RCX: 0000000000455259 [ 59.164533] RDX: 0000000000000001 RSI: 0000000020001c40 RDI: 0000000000000013 [ 59.171791] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 59.179057] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 59.186320] R13: 00000000000006cd R14: 00000000006fd3d8 R15: 0000000000000000 [ 59.193586] [ 59.195201] Uninit was stored to memory at: [ 59.199520] kmsan_internal_chain_origin+0x12b/0x210 [ 59.204615] kmsan_memcpy_origins+0x11d/0x170 [ 59.209103] __msan_memcpy+0x19f/0x1f0 [ 59.212985] skb_copy_bits+0x63a/0xdb0 [ 59.216861] __pskb_pull_tail+0x483/0x22e0 [ 59.221089] ipv6_frag_rcv+0x1894/0x6970 [ 59.225142] ip6_input_finish+0xa62/0x2110 [ 59.229368] ip6_input+0x294/0x320 [ 59.232901] ipv6_rcv+0x20ec/0x26d0 [ 59.236527] __netif_receive_skb_core+0x47cf/0x4a80 [ 59.241537] process_backlog+0x62d/0xe20 [ 59.245589] net_rx_action+0x7c1/0x1a70 [ 59.249559] __do_softirq+0x56d/0x93d [ 59.253343] Uninit was created at: [ 59.256875] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 59.261882] kmsan_alloc_page+0x82/0xe0 [ 59.265854] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 59.270601] alloc_pages_current+0x6b5/0x970 [ 59.275008] skb_page_frag_refill+0x3ba/0x5e0 [ 59.279500] sk_page_frag_refill+0xa4/0x340 [ 59.283817] __ip6_append_data+0x1a20/0x4bb0 [ 59.288222] ip6_append_data+0x40e/0x6b0 [ 59.292277] rawv6_sendmsg+0x2787/0x4cc0 [ 59.296334] inet_sendmsg+0x48d/0x740 [ 59.300134] sock_write_iter+0x3b9/0x470 [ 59.304189] do_iter_readv_writev+0x7bb/0x970 [ 59.308677] do_iter_write+0x30d/0xd40 [ 59.312556] do_writev+0x3c9/0x830 [ 59.316090] SYSC_writev+0x9b/0xb0 [ 59.319625] SyS_writev+0x56/0x80 [ 59.323074] do_syscall_64+0x309/0x430 [ 59.326956] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.332130] ================================================================== [ 59.339477] Disabling lock debugging due to kernel taint [ 59.344916] Kernel panic - not syncing: panic_on_warn set ... [ 59.344916] [ 59.352276] CPU: 1 PID: 5148 Comm: syz-executor7 Tainted: G B 4.16.0+ #82 [ 59.360401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.369740] Call Trace: [ 59.372315] [ 59.374463] dump_stack+0x185/0x1d0 [ 59.378088] panic+0x39d/0x940 [ 59.381300] ? ipv6_frag_rcv+0xfa5/0x6970 [ 59.385439] kmsan_report+0x238/0x240 [ 59.389234] __msan_warning_32+0x6c/0xb0 [ 59.393292] ipv6_frag_rcv+0xfa5/0x6970 [ 59.397270] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 59.402641] ? ipv6_frag_exit+0x90/0x90 [ 59.406613] ip6_input_finish+0xa62/0x2110 [ 59.410851] ? ip6table_filter_hook+0xb5/0xe0 [ 59.415347] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 59.420712] ip6_input+0x294/0x320 [ 59.424248] ? ip6_input+0x320/0x320 [ 59.427963] ? ipv6_rcv+0x26d0/0x26d0 [ 59.431764] ipv6_rcv+0x20ec/0x26d0 [ 59.435385] ? local_bh_enable+0x40/0x40 [ 59.439451] __netif_receive_skb_core+0x47cf/0x4a80 [ 59.444463] ? rb_insert_color+0xa4/0x1300 [ 59.448695] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 59.454496] ? ip6_rcv_finish+0x4d0/0x4d0 [ 59.458642] process_backlog+0x62d/0xe20 2018/04/07 13:06:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00'}) 2018/04/07 13:06:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000350468db66cfaf3ccd90a46c03bb"], 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000400)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000140)=""/71, 0x47}], 0x5, &(0x7f0000003040)=""/4096, 0x1000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/07 13:06:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000886ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d59f8d), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000080)=[{r0, 0xc201}], 0x1, 0x0) 2018/04/07 13:06:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000350468db66cfaf3ccd90a46c03bb"], 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000400)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000140)=""/71, 0x47}], 0x5, &(0x7f0000003040)=""/4096, 0x1000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/07 13:06:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000886ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000d59f8d), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000080)=[{r0, 0xc201}], 0x1, 0x0) 2018/04/07 13:06:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000350468db66cfaf3ccd90a46c03bb"], 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000400)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000140)=""/71, 0x47}], 0x5, &(0x7f0000003040)=""/4096, 0x1000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/07 13:06:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000350468db66cfaf3ccd90a46c03bb"], 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) [ 59.462705] ? rps_trigger_softirq+0x2f0/0x2f0 [ 59.467279] net_rx_action+0x7c1/0x1a70 [ 59.471254] ? net_tx_action+0xab0/0xab0 [ 59.475311] __do_softirq+0x56d/0x93d [ 59.479112] ? copy_page_range+0x2e25/0x3f10 [ 59.483517] do_softirq_own_stack+0x2a/0x40 [ 59.487824] [ 59.490059] __local_bh_enable_ip+0x114/0x140 [ 59.494553] local_bh_enable+0x36/0x40 [ 59.498436] ip6_finish_output2+0x1b6c/0x1f20 [ 59.502936] ip6_finish_output+0xb3f/0xc00 [ 59.507176] ip6_output+0x597/0x6c0 [ 59.510793] ? ip6_output+0x6c0/0x6c0 [ 59.514598] ? ac6_seq_show+0x200/0x200 [ 59.518574] ip6_local_out+0x573/0x640 [ 59.522457] ? __ip6_local_out+0x4f0/0x4f0 [ 59.526694] ip6_push_pending_frames+0x218/0x4d0 [ 59.531446] rawv6_sendmsg+0x4500/0x4cc0 [ 59.535507] ? kmsan_set_origin_inline+0x6b/0x120 [ 59.540351] ? futex_wait_queue_me+0x4ba/0x710 [ 59.544932] ? futex_wait_queue_me+0x4ee/0x710 [ 59.549519] ? compat_rawv6_ioctl+0x30/0x30 [ 59.553840] inet_sendmsg+0x48d/0x740 [ 59.557638] ? security_socket_sendmsg+0x9e/0x210 [ 59.562480] ? inet_getname+0x500/0x500 [ 59.566466] sock_write_iter+0x3b9/0x470 [ 59.570527] ? sock_read_iter+0x480/0x480 [ 59.574657] do_iter_readv_writev+0x7bb/0x970 [ 59.579143] ? sock_read_iter+0x480/0x480 [ 59.583276] do_iter_write+0x30d/0xd40 [ 59.587145] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 59.592588] do_writev+0x3c9/0x830 [ 59.596114] ? syscall_return_slowpath+0xe9/0x700 [ 59.600947] ? SYSC_setsockopt+0x1be/0x570 [ 59.605162] SYSC_writev+0x9b/0xb0 [ 59.608683] SyS_writev+0x56/0x80 [ 59.612113] do_syscall_64+0x309/0x430 [ 59.615983] ? SYSC_readv+0xb0/0xb0 [ 59.619594] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.624759] RIP: 0033:0x455259 [ 59.627927] RSP: 002b:00007f3396216c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 59.635612] RAX: ffffffffffffffda RBX: 00007f33962176d4 RCX: 0000000000455259 [ 59.642862] RDX: 0000000000000001 RSI: 0000000020001c40 RDI: 0000000000000013 [ 59.650110] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 59.657357] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 59.664603] R13: 00000000000006cd R14: 00000000006fd3d8 R15: 0000000000000000 [ 59.672262] Dumping ftrace buffer: [ 59.675780] (ftrace buffer empty) [ 59.679464] Kernel Offset: disabled [ 59.683067] Rebooting in 86400 seconds..