INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2018/04/07 01:03:00 fuzzer started 2018/04/07 01:03:01 dialing manager at 10.128.0.26:38639 2018/04/07 01:03:06 kcov=true, comps=false 2018/04/07 01:03:09 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@generic={0x88f5}}}, &(0x7f0000000080)) 2018/04/07 01:03:09 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000d38000)={&(0x7f0000a88ff0)=@can={0x1d}, 0x80, &(0x7f0000cb0000)=[{&(0x7f0000e1dfdc)="dd", 0x1}], 0x1, &(0x7f0000444f00)}, 0x0) sendmsg$kcm(r0, &(0x7f0000f30fc8)={&(0x7f00001cbfed)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f000057b000)=[{&(0x7f000038cf60)='\f', 0x1}], 0x1, &(0x7f000029a000)}, 0x0) sendmsg$kcm(r1, &(0x7f00008acfc8)={&(0x7f0000b1b000)=@rc={0x1f}, 0x80, &(0x7f000000b000)=[{&(0x7f0000303f29)='Y', 0x1}], 0x1}, 0x0) 2018/04/07 01:03:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2003e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) 2018/04/07 01:03:09 executing program 2: r0 = socket$inet(0x2, 0x803, 0x81) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000005c0)}, 0x0) 2018/04/07 01:03:09 executing program 4: mkdir(&(0x7f0000800ff8)='./file0\x00', 0x0) mount(&(0x7f0000879ff8)='./file0\x00', &(0x7f0000106ff8)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f000063bffe)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='.') 2018/04/07 01:03:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x58) 2018/04/07 01:03:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/07 01:03:09 executing program 6: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0xb2) syzkaller login: [ 42.753508] ip (3749) used greatest stack depth: 54688 bytes left [ 43.117397] ip (3786) used greatest stack depth: 54672 bytes left [ 43.289334] ip (3802) used greatest stack depth: 54408 bytes left [ 44.400992] ip (3912) used greatest stack depth: 54200 bytes left [ 46.247664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.281938] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.392348] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.530998] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.540622] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.566396] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.663603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.730141] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.987475] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.076199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.218974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.262970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.276795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.312153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.386792] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.468635] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.744073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.750312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.764625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.828631] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.834909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.847558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.005908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.012200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.026573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.059208] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.089877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.107618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.129227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.136235] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.148278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.185578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.211381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.228864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.244309] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.256595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.273201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.310727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.336707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.369602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 01:03:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000805000)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000512000)) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000465fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f000089a000)) socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) readv(r2, &(0x7f00005cafb0)=[{&(0x7f0000ecff24)=""/220, 0xdc}, {&(0x7f0000f81000)=""/85, 0x55}, {&(0x7f000075dfd8)=""/40, 0x28}, {&(0x7f0000dcf000)}, {&(0x7f0000a72f99)=""/103, 0x67}], 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x10000000001, 0xfd7b) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000c7effc), 0x4) connect(r3, &(0x7f0000117000)=@generic={0x0, "e2536246f43039ce3247c3eba6a49dcbc921590dcc42810eec3852f2c62ff52cdb3dc384220dde7def73fb84a58ae6a867f0204fba7c868f1153fc107ecdb4c1d1ec89121321afda10ab1947e5532fcaa6f527e42db1700af409d7e5435559eb2c519f83d83f1df99ee0fd76eb267cf2e995b67f02115f64d5af81910617"}, 0x80) bind$inet(r3, &(0x7f0000306ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto$inet(r3, &(0x7f00008d7ffd)="b0a40a", 0x3, 0x20020007, &(0x7f00009f1000)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000f8e000)={0xffffffffffffffff, 0x20000000012c6, 0x1000010006, 0x8000400, 0xfffffffffffffffc}, 0x14) shutdown(r3, 0x1) 2018/04/07 01:03:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000057ff0)=[{&(0x7f0000ebffc5)="390000001200090400000000800000000700001a0200000045000107000000141900630004e9016a0000000000000608000300e30900001ee4", 0x39}], 0x1) 2018/04/07 01:03:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4000000011) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000000)) 2018/04/07 01:03:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x1, 0x8002) write(r0, &(0x7f0000542fcf)="6a3db85e1e8d090000000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c678ce22cad160096aa1fae1a1a", 0x31) 2018/04/07 01:03:26 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000a8d000)={&(0x7f0000e4e000)={0x10}, 0xc, &(0x7f0000011000)={&(0x7f00005d5000)=@updsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@dev={0xac, 0x14}}, {@in6, 0xffffffffffffffff, 0x3c}, @in=@loopback=0x7f000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}]}, 0x104}, 0x1}, 0x0) 2018/04/07 01:03:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') lseek(r0, 0x0, 0x4) 2018/04/07 01:03:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/07 01:03:26 executing program 7: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/04/07 01:03:26 executing program 3: r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x29, &(0x7f0000000000)={0x0, @loopback=0x7f000001, 0x0, 0xa, 'ovf\x00'}, 0x2c) 2018/04/07 01:03:26 executing program 2: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f000003f000), 0x155, 0x0) 2018/04/07 01:03:26 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) 2018/04/07 01:03:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:26 executing program 7: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$evdev(r1, &(0x7f00005d7fa0)=[{{0x77359400}}], 0x18) vmsplice(r1, &(0x7f0000fccff0)=[{&(0x7f0000011fff)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) vmsplice(r0, &(0x7f00004c0fd0)=[{&(0x7f0000165f90)="927d66e5e381cf4097f8000000feb41473dfde5668e10b0a", 0x18}], 0x1, 0x0) 2018/04/07 01:03:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) 2018/04/07 01:03:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) [ 57.855586] netlink: 'syz-executor4': attribute type 23 has an invalid length. [ 57.863149] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/07 01:03:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) 2018/04/07 01:03:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) r2 = dup2(r1, r0) ioctl$VT_SETMODE(r2, 0x401054d6, &(0x7f0000000080)) 2018/04/07 01:03:27 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x20, 0x1, 0x1, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @u32}]}, 0x20}, 0x1}, 0x0) 2018/04/07 01:03:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000015fc8)={&(0x7f0000016000)={0x10, 0xfffffffc}, 0xc, &(0x7f000000b000)={&(0x7f0000007000)=@delneigh={0x24, 0x1c, 0x513, 0x0, 0x0, {}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/04/07 01:03:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/07 01:03:27 executing program 7: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$evdev(r1, &(0x7f00005d7fa0)=[{{0x77359400}}], 0x18) vmsplice(r1, &(0x7f0000fccff0)=[{&(0x7f0000011fff)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) vmsplice(r0, &(0x7f00004c0fd0)=[{&(0x7f0000165f90)="927d66e5e381cf4097f8000000feb41473dfde5668e10b0a", 0x18}], 0x1, 0x0) 2018/04/07 01:03:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) [ 58.769199] netlink: 'syz-executor4': attribute type 23 has an invalid length. [ 58.776721] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/07 01:03:27 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x0, 0x3, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) [ 58.833239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/07 01:03:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:27 executing program 6: r0 = socket$inet(0x11, 0x40000000000803, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[]}, 0x78) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=""/34, 0x22}, 0x0) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@in6={0xa, 0x0, 0x2, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f0000000380), 0x3c5}, 0x0) 2018/04/07 01:03:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) shutdown(r0, 0x1) 2018/04/07 01:03:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) 2018/04/07 01:03:28 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) [ 58.988367] netlink: 'syz-executor4': attribute type 23 has an invalid length. [ 58.995984] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/07 01:03:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) time(&(0x7f0000000000)) 2018/04/07 01:03:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000a7aff1)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x8}}], 0x30) 2018/04/07 01:03:28 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/186, 0xba}], 0x1, &(0x7f0000000480)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/69, 0x45}], 0x1, &(0x7f0000000780)=""/105, 0x69}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/15, 0xf}, {&(0x7f0000000d40)=""/225, 0xe1}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/152, 0x98}], 0x6, &(0x7f00000010c0)=""/29, 0x1d}}, {{&(0x7f0000001100)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/84, 0x54}, {&(0x7f0000001340)=""/252, 0xfc}], 0x2, &(0x7f00000014c0)=""/217, 0xd9}}], 0x4, 0x0, &(0x7f0000001700)={0x0, 0x989680}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x14, 0x23}, 0x14}, 0x1}, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)=""/50, 0x32}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000380)=@alg, 0x58, &(0x7f0000000480), 0x1e5, &(0x7f0000000400)=""/87, 0x49}, 0x0) 2018/04/07 01:03:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) shutdown(r0, 0x1) 2018/04/07 01:03:28 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) 2018/04/07 01:03:28 executing program 7: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$evdev(r1, &(0x7f00005d7fa0)=[{{0x77359400}}], 0x18) vmsplice(r1, &(0x7f0000fccff0)=[{&(0x7f0000011fff)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) vmsplice(r0, &(0x7f00004c0fd0)=[{&(0x7f0000165f90)="927d66e5e381cf4097f8000000feb41473dfde5668e10b0a", 0x18}], 0x1, 0x0) 2018/04/07 01:03:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) [ 59.690193] netlink: 'syz-executor4': attribute type 23 has an invalid length. [ 59.697722] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/07 01:03:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) 2018/04/07 01:03:28 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:28 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) shutdown(r0, 0x1) 2018/04/07 01:03:28 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/186, 0xba}], 0x1, &(0x7f0000000480)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/69, 0x45}], 0x1, &(0x7f0000000780)=""/105, 0x69}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/15, 0xf}, {&(0x7f0000000d40)=""/225, 0xe1}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/152, 0x98}], 0x6, &(0x7f00000010c0)=""/29, 0x1d}}, {{&(0x7f0000001100)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/84, 0x54}, {&(0x7f0000001340)=""/252, 0xfc}], 0x2, &(0x7f00000014c0)=""/217, 0xd9}}], 0x4, 0x0, &(0x7f0000001700)={0x0, 0x989680}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x14, 0x23}, 0x14}, 0x1}, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)=""/50, 0x32}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000380)=@alg, 0x58, &(0x7f0000000480), 0x1e5, &(0x7f0000000400)=""/87, 0x49}, 0x0) 2018/04/07 01:03:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) 2018/04/07 01:03:28 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:29 executing program 4: r0 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) shutdown(r0, 0x1) 2018/04/07 01:03:29 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="d3c3c2ba1f6a434d56d335ddab611392c3353e32851b4275d7a0ea7b6850eeea0f6c94804faacf8e7f6cf95f25f144e34346a40be6c112a0b6f24da1d01f595f578b88133935f2fa54ded9670fd6743254c235a86839dc61c559f4a031c4de5b937e232f4a43af18625194e3e2c3e84e4207031eeb5f9a0b4a121954c2f8187cb41aeec5b66eb79cb116b636cbcca9023f7688bc02cc6060e9754c912703f5ee4610c56c335093ba92374d35b63dc4a879662f8a8058783fb279b7be76eec0671e4e1995071c47b91444859663aa38a75f02dc5c206ff9ff6235d52409a93bea9cd7e3b06bbe1e756802d79e076107464d97d0fb372377381c3b4555c85b32f28583862fd9ad043e6f472dd25f88679f37e48e3aee815601d2a149200eea960b9dd611b87b61be80ad15e94ddec3cfe95d52c478a8b2538b41c120772788e4e9c51c762a0ec264bbf5358971b67e3fa2e447bd3fdbd4d99daee62bc27522676c72554b39e848ad8ef33c1ccb2ee9f36b0127f7e9cff47befdbedada5ad51bd06d10f24c1770ff2f42c8a60f5b2b0a3c4011c2ca9ba6715a883c1e1373b54cc3e141b0e68fe1b5420238a934671cc7d1a7e1c135fb3fb158ec768b21198dd237e773bf15edaf60d4fbe0b9ed228a35e3165b2770f566a1b61f33adb1edbf464d3b01e0d8a03ed91a72d0a90a5a95188d6cb4aa43c412704cd528a86766248ceecb1f1d2149f8104d1d087079bed01abd9f93defb6445553a78d33ac054002b65c90bbd9a1814a34a542a59d4661aa02ba92ee038bc304e78eb1676d1ace2cb43e04c7660ee199e5fed679639ce2ca5a40cf33dc3e0a6e053859916eeec234411265a701ddaa1f213070e4c3d72388b52ba1b088d1542bbd852eddb7851b1dd403d795a746949f82fb5cd44cd296f135004d751a0b82", 0x295}], 0x1) 2018/04/07 01:03:29 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/186, 0xba}], 0x1, &(0x7f0000000480)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/69, 0x45}], 0x1, &(0x7f0000000780)=""/105, 0x69}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/15, 0xf}, {&(0x7f0000000d40)=""/225, 0xe1}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/152, 0x98}], 0x6, &(0x7f00000010c0)=""/29, 0x1d}}, {{&(0x7f0000001100)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/84, 0x54}, {&(0x7f0000001340)=""/252, 0xfc}], 0x2, &(0x7f00000014c0)=""/217, 0xd9}}], 0x4, 0x0, &(0x7f0000001700)={0x0, 0x989680}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x14, 0x23}, 0x14}, 0x1}, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)=""/50, 0x32}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000380)=@alg, 0x58, &(0x7f0000000480), 0x1e5, &(0x7f0000000400)=""/87, 0x49}, 0x0) 2018/04/07 01:03:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) 2018/04/07 01:03:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) 2018/04/07 01:03:29 executing program 7: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$evdev(r1, &(0x7f00005d7fa0)=[{{0x77359400}}], 0x18) vmsplice(r1, &(0x7f0000fccff0)=[{&(0x7f0000011fff)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) vmsplice(r0, &(0x7f00004c0fd0)=[{&(0x7f0000165f90)="927d66e5e381cf4097f8000000feb41473dfde5668e10b0a", 0x18}], 0x1, 0x0) 2018/04/07 01:03:29 executing program 0: r0 = socket(0x1e, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:29 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/186, 0xba}], 0x1, &(0x7f0000000480)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/69, 0x45}], 0x1, &(0x7f0000000780)=""/105, 0x69}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/15, 0xf}, {&(0x7f0000000d40)=""/225, 0xe1}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/152, 0x98}], 0x6, &(0x7f00000010c0)=""/29, 0x1d}}, {{&(0x7f0000001100)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/84, 0x54}, {&(0x7f0000001340)=""/252, 0xfc}], 0x2, &(0x7f00000014c0)=""/217, 0xd9}}], 0x4, 0x0, &(0x7f0000001700)={0x0, 0x989680}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x14, 0x23}, 0x14}, 0x1}, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)=""/50, 0x32}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000380)=@alg, 0x58, &(0x7f0000000480), 0x1e5, &(0x7f0000000400)=""/87, 0x49}, 0x0) 2018/04/07 01:03:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="d3c3c2ba1f6a434d56d335ddab611392c3353e32851b4275d7a0ea7b6850eeea0f6c94804faacf8e7f6cf95f25f144e34346a40be6c112a0b6f24da1d01f595f578b88133935f2fa54ded9670fd6743254c235a86839dc61c559f4a031c4de5b937e232f4a43af18625194e3e2c3e84e4207031eeb5f9a0b4a121954c2f8187cb41aeec5b66eb79cb116b636cbcca9023f7688bc02cc6060e9754c912703f5ee4610c56c335093ba92374d35b63dc4a879662f8a8058783fb279b7be76eec0671e4e1995071c47b91444859663aa38a75f02dc5c206ff9ff6235d52409a93bea9cd7e3b06bbe1e756802d79e076107464d97d0fb372377381c3b4555c85b32f28583862fd9ad043e6f472dd25f88679f37e48e3aee815601d2a149200eea960b9dd611b87b61be80ad15e94ddec3cfe95d52c478a8b2538b41c120772788e4e9c51c762a0ec264bbf5358971b67e3fa2e447bd3fdbd4d99daee62bc27522676c72554b39e848ad8ef33c1ccb2ee9f36b0127f7e9cff47befdbedada5ad51bd06d10f24c1770ff2f42c8a60f5b2b0a3c4011c2ca9ba6715a883c1e1373b54cc3e141b0e68fe1b5420238a934671cc7d1a7e1c135fb3fb158ec768b21198dd237e773bf15edaf60d4fbe0b9ed228a35e3165b2770f566a1b61f33adb1edbf464d3b01e0d8a03ed91a72d0a90a5a95188d6cb4aa43c412704cd528a86766248ceecb1f1d2149f8104d1d087079bed01abd9f93defb6445553a78d33ac054002b65c90bbd9a1814a34a542a59d4661aa02ba92ee038bc304e78eb1676d1ace2cb43e04c7660ee199e5fed679639ce2ca5a40cf33dc3e0a6e053859916eeec234411265a701ddaa1f213070e4c3d72388b52ba1b088d1542bbd852eddb7851b1dd403d795a746949f82fb5cd44cd296f135004d751a0b82", 0x295}], 0x1) 2018/04/07 01:03:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) shutdown(r0, 0x1) 2018/04/07 01:03:29 executing program 0: r0 = socket(0x1e, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:30 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000006000)}, 0x0) 2018/04/07 01:03:30 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/186, 0xba}], 0x1, &(0x7f0000000480)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/69, 0x45}], 0x1, &(0x7f0000000780)=""/105, 0x69}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/15, 0xf}, {&(0x7f0000000d40)=""/225, 0xe1}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/152, 0x98}], 0x6, &(0x7f00000010c0)=""/29, 0x1d}}, {{&(0x7f0000001100)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/84, 0x54}, {&(0x7f0000001340)=""/252, 0xfc}], 0x2, &(0x7f00000014c0)=""/217, 0xd9}}], 0x4, 0x0, &(0x7f0000001700)={0x0, 0x989680}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x14, 0x23}, 0x14}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000380)=@alg, 0x58, &(0x7f0000000480), 0x1e5, &(0x7f0000000400)=""/87, 0x49}, 0x0) 2018/04/07 01:03:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="d3c3c2ba1f6a434d56d335ddab611392c3353e32851b4275d7a0ea7b6850eeea0f6c94804faacf8e7f6cf95f25f144e34346a40be6c112a0b6f24da1d01f595f578b88133935f2fa54ded9670fd6743254c235a86839dc61c559f4a031c4de5b937e232f4a43af18625194e3e2c3e84e4207031eeb5f9a0b4a121954c2f8187cb41aeec5b66eb79cb116b636cbcca9023f7688bc02cc6060e9754c912703f5ee4610c56c335093ba92374d35b63dc4a879662f8a8058783fb279b7be76eec0671e4e1995071c47b91444859663aa38a75f02dc5c206ff9ff6235d52409a93bea9cd7e3b06bbe1e756802d79e076107464d97d0fb372377381c3b4555c85b32f28583862fd9ad043e6f472dd25f88679f37e48e3aee815601d2a149200eea960b9dd611b87b61be80ad15e94ddec3cfe95d52c478a8b2538b41c120772788e4e9c51c762a0ec264bbf5358971b67e3fa2e447bd3fdbd4d99daee62bc27522676c72554b39e848ad8ef33c1ccb2ee9f36b0127f7e9cff47befdbedada5ad51bd06d10f24c1770ff2f42c8a60f5b2b0a3c4011c2ca9ba6715a883c1e1373b54cc3e141b0e68fe1b5420238a934671cc7d1a7e1c135fb3fb158ec768b21198dd237e773bf15edaf60d4fbe0b9ed228a35e3165b2770f566a1b61f33adb1edbf464d3b01e0d8a03ed91a72d0a90a5a95188d6cb4aa43c412704cd528a86766248ceecb1f1d2149f8104d1d087079bed01abd9f93defb6445553a78d33ac054002b65c90bbd9a1814a34a542a59d4661aa02ba92ee038bc304e78eb1676d1ace2cb43e04c7660ee199e5fed679639ce2ca5a40cf33dc3e0a6e053859916eeec234411265a701ddaa1f213070e4c3d72388b52ba1b088d1542bbd852eddb7851b1dd403d795a746949f82fb5cd44cd296f135004d751a0b82", 0x295}], 0x1) 2018/04/07 01:03:30 executing program 0: r0 = socket(0x1e, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) lookup_dcookie(0x5, &(0x7f0000000080)=""/26, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) shutdown(r0, 0x1) 2018/04/07 01:03:30 executing program 7: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$evdev(r0, &(0x7f00005d7fa0)=[{{0x77359400}}], 0x18) vmsplice(r0, &(0x7f0000fccff0)=[{&(0x7f0000011fff)}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/07 01:03:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) 2018/04/07 01:03:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) 2018/04/07 01:03:30 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) 2018/04/07 01:03:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) [ 61.605134] ================================================================== [ 61.612564] BUG: KMSAN: uninit-value in af_alg_free_areq_sgls+0x5ff/0xb20 [ 61.619490] CPU: 0 PID: 5297 Comm: syz-executor6 Not tainted 4.16.0+ #81 [ 61.626325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.635670] Call Trace: [ 61.638261] dump_stack+0x185/0x1d0 [ 61.641893] ? af_alg_free_areq_sgls+0x5ff/0xb20 [ 61.646650] kmsan_report+0x142/0x240 [ 61.650462] __msan_warning_32+0x6c/0xb0 [ 61.654533] af_alg_free_areq_sgls+0x5ff/0xb20 [ 61.659129] af_alg_free_resources+0x66/0xf0 [ 61.663551] skcipher_recvmsg+0x599/0x1940 [ 61.667803] sock_recvmsg+0x1d0/0x230 [ 61.671604] ? skcipher_sendmsg+0x160/0x160 [ 61.675935] ___sys_recvmsg+0x3fb/0x810 [ 61.679925] ? __fget_light+0x56/0x710 [ 61.683812] ? __fdget+0x4e/0x60 [ 61.687192] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 61.692569] ? __fget_light+0x6b9/0x710 [ 61.696557] SYSC_recvmsg+0x298/0x3c0 [ 61.700368] SyS_recvmsg+0x54/0x80 2018/04/07 01:03:30 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) [ 61.703906] do_syscall_64+0x309/0x430 [ 61.707801] ? ___sys_recvmsg+0x810/0x810 [ 61.711963] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.717148] RIP: 0033:0x455259 [ 61.720328] RSP: 002b:00007f6389f1ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 61.728040] RAX: ffffffffffffffda RBX: 00007f6389f1b6d4 RCX: 0000000000455259 [ 61.735307] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000014 [ 61.742572] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/07 01:03:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) [ 61.749841] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.757106] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 61.764369] [ 61.765984] Uninit was created at: [ 61.769538] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 61.774641] kmsan_kmalloc+0x94/0x100 [ 61.778441] __kmalloc+0x23c/0x350 [ 61.781977] sock_kmalloc+0x14e/0x270 [ 61.785776] af_alg_get_rsgl+0x427/0xe10 [ 61.789832] skcipher_recvmsg+0x546/0x1940 [ 61.794064] sock_recvmsg+0x1d0/0x230 [ 61.797865] ___sys_recvmsg+0x3fb/0x810 [ 61.801842] SYSC_recvmsg+0x298/0x3c0 2018/04/07 01:03:30 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) [ 61.805644] SyS_recvmsg+0x54/0x80 [ 61.809187] do_syscall_64+0x309/0x430 [ 61.813077] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.818254] ================================================================== [ 61.825603] Disabling lock debugging due to kernel taint [ 61.831044] Kernel panic - not syncing: panic_on_warn set ... [ 61.831044] [ 61.838409] CPU: 0 PID: 5297 Comm: syz-executor6 Tainted: G B 4.16.0+ #81 [ 61.846549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/04/07 01:03:30 executing program 0: r0 = socket(0x0, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/04/07 01:03:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8e}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x295}], 0x1) [ 61.855893] Call Trace: [ 61.858477] dump_stack+0x185/0x1d0 [ 61.862106] panic+0x39d/0x940 [ 61.865315] ? af_alg_free_areq_sgls+0x5ff/0xb20 [ 61.870065] kmsan_report+0x238/0x240 [ 61.873870] __msan_warning_32+0x6c/0xb0 [ 61.877932] af_alg_free_areq_sgls+0x5ff/0xb20 [ 61.882529] af_alg_free_resources+0x66/0xf0 [ 61.886940] skcipher_recvmsg+0x599/0x1940 [ 61.891187] sock_recvmsg+0x1d0/0x230 [ 61.894985] ? skcipher_sendmsg+0x160/0x160 [ 61.899306] ___sys_recvmsg+0x3fb/0x810 [ 61.903287] ? __fget_light+0x56/0x710 [ 61.907167] ? __fdget+0x4e/0x60 [ 61.910546] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 61.915910] ? __fget_light+0x6b9/0x710 [ 61.919894] SYSC_recvmsg+0x298/0x3c0 [ 61.923702] SyS_recvmsg+0x54/0x80 [ 61.927245] do_syscall_64+0x309/0x430 [ 61.931137] ? ___sys_recvmsg+0x810/0x810 [ 61.935290] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.940477] RIP: 0033:0x455259 [ 61.943663] RSP: 002b:00007f6389f1ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 61.951373] RAX: ffffffffffffffda RBX: 00007f6389f1b6d4 RCX: 0000000000455259 [ 61.958636] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000014 [ 61.965886] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 61.973138] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.980390] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 61.988108] Dumping ftrace buffer: [ 61.991628] (ftrace buffer empty) [ 61.995307] Kernel Offset: disabled [ 61.998906] Rebooting in 86400 seconds..