2017/10/26 22:36:22 fuzzer started 2017/10/26 22:36:22 dialing manager at 10.0.2.10:40164 2017/10/26 22:36:32 kcov=true, comps=true 2017/10/26 22:36:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000004b000-0xf)="2f6465762f73657175656e63657200", 0x0, 0x0) memfd_create(&(0x7f000004c000-0x7)="766d6e65743000", 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00007ef000-0xc)="2f6465762f6175746f667300", 0x4001, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000005000)={0x0, 0x10001}, &(0x7f000084b000)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f000006f000)={r2, @in6={{0xa, 0x1, 0x10001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000702000-0x4)=0x8c) sched_getparam(r0, &(0x7f0000798000-0x4)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000d9f000-0x14)={0x6, 0x4, 0x8000, 0x3f, 0x0, 0x0, 0x0}, 0x14) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000b49000-0x44)={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xc, {0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="697036746e6c30000000000000000000"}) 2017/10/26 22:36:32 executing program 1: r0 = socket$inet(0x2, 0x805, 0x7) fdatasync(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00006ab000)={0x0, 0x0}) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000685000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000d71000)=0xa2) bind$alg(r2, &(0x7f0000020000-0x58)={0x26, "6861736800000000000000000000", 0x0, 0x0, "636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r4 = syz_open_dev$sg(&(0x7f000039b000-0x9)="2f6465762f73672300", 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000789000-0xc)={0x6, r2, 0x1}) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000472000)={0x4000, 0xf000, 0x4, 0x4, 0xef, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00005a2000-0x1000)="7f000000357be11d2fb6a90000000700000049c8b468d85b20703b577725d0f9", 0x20) r6 = creat(&(0x7f000073f000-0x8)="2e2f66696c653000", 0x20) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f00003e4000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000142000-0x4)=0x83) getsockname$inet(r6, &(0x7f0000aa1000)={0x0, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000700000-0x4)=0x10) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000162000-0x4)=0x0, &(0x7f0000525000)=0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000560000)=0x0) get_robust_list(r7, &(0x7f0000ae0000)=&(0x7f0000b42000)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000119000-0x4)=0xc) 2017/10/26 22:36:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0xa, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00009a6000-0x8)={0x0, 0x10000}, &(0x7f0000c34000)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f000080a000)={r2, @in6={{0xa, 0x0, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xc98}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00005d1000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x200000, 0x0) readahead(r3, 0xa, 0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000f00000)=0x0) r4 = fcntl$getown(r1, 0x9) r5 = getpgid(r4) r6 = getpgid(r5) prlimit64(r6, 0xc, &(0x7f0000662000)={0xffff, 0xde18}, &(0x7f00007c0000)={0x0, 0x0}) prlimit64(r6, 0x6, &(0x7f0000ec8000)={0x3, 0x3}, &(0x7f00009c5000-0x10)={0x0, 0x0}) preadv(r3, &(0x7f00003e7000)=[{&(0x7f00009c6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x45}, {&(0x7f0000a7e000-0xdd)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdd}, {&(0x7f0000872000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa1}, {&(0x7f0000a98000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3d}, {&(0x7f000049d000-0x3e)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3e}, {&(0x7f000027d000-0x90)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x90}, {&(0x7f00007e1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdc}, {&(0x7f000034e000-0x42)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x42}], 0x8, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x5, 0x20000a, 0xa13) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000ca3000-0xa0)={0x0, @in={{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xed69000, 0x6, 0x7f, 0x7ff, 0x1}, &(0x7f0000f85000)=0xa0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000dd7000)={0x20, 0x8, 0x200, 0x7fffffff, 0x7, 0x10001, 0x4, 0x0, r2}, 0x20) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00004c2000-0x4)=0x3f, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000892000-0xe8)={{{@in=@loopback=0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000045b000-0x4)=0xe8) writev(r7, &(0x7f0000fd7000)=[{&(0x7f00003b8000-0x29)="290000001800fffdfeff7500000a002102009a0000000007000000000900080005000a00000000c000", 0x29}], 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00008f2000-0x10)=@common="00000000000000000000000000000000", 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000456000-0x4)=0x0, 0x4) r9 = dup2(r3, r0) r10 = dup2(r0, 0xffffffffffffff9c) fcntl$setstatus(r3, 0x4, 0xbfc) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r10) fcntl$setownex(r8, 0xf, &(0x7f0000a0c000-0x8)={0x0, r6}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00003aa000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f000001b000)={@loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x811ffdff, r12}) r13 = request_key(&(0x7f0000b41000-0x8)="6269675f6b657900", &(0x7f000011f000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000195000-0x7)="6367726f757028", 0x0) keyctl$clear(0x7, r13) 2017/10/26 22:36:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f00005fa000-0x8)="2e2f66696c653000", &(0x7f00001d1000)=@random={"73797374656d2e00", "00"}, &(0x7f0000122000-0x6b)="", 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000875000)={@local={0x0, 0x0, 0x0, 0x0}, @loopback=0x0, 0x0}, &(0x7f0000c81000-0x4)=0xc) bind$inet(r0, &(0x7f0000d6a000-0x10)={0x2, 0x2, @rand_addr=0xfffffffffffffffc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$inet(0x2, 0x1, 0xff) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) getcwd(&(0x7f00005aa000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x18cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x3, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$bt_l2cap(0x1f, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000fcf000)="227070703000") 2017/10/26 22:36:32 executing program 4: mmap(&(0x7f0000000000/0xff2000)=nil, 0xff2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xb, &(0x7f0000b78000)={0x0, 0x0}) sched_rr_get_interval(0x0, &(0x7f0000b46000-0x10)={0x0, 0x0}) r0 = socket(0x10, 0x0, 0x0) mmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000eaf000-0x11)="1100000021001f0200001100008000ffea", 0x11, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00009b9000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00008bf000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x301}) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000ff6000-0x45)={0x0, 0x3d, "92ce9adec33ffdf49d0ca7042f1e424782f98711b6c5ec385ac08937d9464fc060746c3a1b0eb4de8f6391ded4c29303464a8c6b48d14b34c571597c4c"}, &(0x7f0000ff5000)=0x45) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f000086c000)=@assoc_value={0x0, 0x5}, &(0x7f0000b27000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000ff4000-0x8)={r2, 0x0}, &(0x7f0000ff6000-0x4)=0x8) mmap(&(0x7f0000000000/0x337000)=nil, 0x337000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mice(&(0x7f00003a0000)="2f6465762f696e7075742f6d69636500", 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f000007f000-0x8)=0x0) r5 = syz_open_dev$loop(&(0x7f000012e000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = accept$netrom(0xffffffffffffffff, &(0x7f00003ac000)=@ax25={0x0, {"00000000000000"}, 0x0}, &(0x7f000023d000-0x4)=0x10) listen(r4, 0x0) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x3, 0x32, r4, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000ff5000-0x8)={r3, 0x0}, &(0x7f0000ff7000-0x4)=0x8) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000ff7000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000ff2000)=0x62) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000e6d000/0x4000)=nil) shmget(0x1, 0x1000, 0x443, &(0x7f0000a85000/0x1000)=nil) r7 = shmat(0x0, &(0x7f0000c48000/0x3000)=nil, 0x4000) shmdt(r7) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f000008b000-0x4)=0x400000000000, 0x4) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000ff8000)={0x30002002, 0x0}) ioctl(r5, 0x4000000000001277, &(0x7f000023e000)="") mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/10/26 22:36:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000b56000-0x10)={0x0, 0x10000000000, 0xa7a8, 0x80000000}, &(0x7f0000eb1000)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000e8b000-0x8)={r2, 0xf6}, &(0x7f00009b0000-0x4)=0x8) bind$inet6(r1, &(0x7f000082d000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) listen(r1, 0xfffffffffffeffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f000026e000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f000064e000-0x8)={0x0, 0x8}, &(0x7f0000565000-0x4)=0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000dce000)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00007cb000)=0x10, 0x80800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000f93000)={0x6ca4, 0x1e}, 0x8) close(r1) 2017/10/26 22:36:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x88) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000c8e000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00002cf000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000bdb000)=0x8) r0 = perf_event_open(&(0x7f0000048000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x801) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000dbd000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000c20000-0x4)=0xc) r3 = inotify_init1(0x804) fcntl$setown(r1, 0x8, r2) fcntl$setstatus(r0, 0x4, 0x6400) fcntl$getownex(r3, 0x10, &(0x7f0000c88000)={0x0, 0x0}) mknodat(0xffffffffffffffff, &(0x7f0000301000-0x8)="2e2f66696c653000", 0xf180, 0x2) ptrace$setopts(0x4206, r4, 0x0, 0x0) semget(0x1, 0x3, 0x101) ptrace$setregset(0x4205, r4, 0x202, &(0x7f0000000000)={&(0x7f000000c000)="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", 0x380}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00001ba000)="7c0044") 2017/10/26 22:36:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f000014d000-0x8)={0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000f90000)="2f6465762f766373612300", 0x7fffffff, 0x20040) perf_event_open(&(0x7f0000358000)={0x7, 0x78, 0x80, 0x3, 0x3, 0x2eb60567, 0x0, 0x0, 0x80, 0x4, 0x2, 0x1a4, 0x9, 0x8, 0x0, 0x100000001, 0x0, 0x8, 0x6, 0x24000, 0x0, 0x4, 0x1, 0x167, 0x80000000, 0x4, 0x0}, r0, 0x0, r1, 0x9) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x18cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00003bc000-0x1)="00") syzkaller login: [ 28.334205] refcount_t: decrement hit 0; leaking memory. [ 28.334641] ------------[ cut here ]------------ [ 28.334950] WARNING: CPU: 2 PID: 3216 at lib/refcount.c:227 refcount_dec+0x4c/0x50 [ 28.335780] Kernel panic - not syncing: panic_on_warn set ... [ 28.335780] [ 28.336358] CPU: 2 PID: 3216 Comm: ip Not tainted 4.14.0-rc5-next-20171018+ #8 [ 28.336805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 28.337312] Call Trace: [ 28.337500] dump_stack+0x194/0x257 [ 28.337859] ? arch_local_irq_restore+0x53/0x53 [ 28.338384] ? vsnprintf+0x1ed/0x1900 [ 28.338756] panic+0x1e4/0x41c [ 28.339067] ? refcount_error_report+0x214/0x214 [ 28.339522] ? show_regs_print_info+0x65/0x65 [ 28.339958] ? __warn+0x1a9/0x1e0 [ 28.340209] ? refcount_dec+0x4c/0x50 [ 28.340831] __warn+0x1c4/0x1e0 [ 28.341046] ? refcount_dec+0x4c/0x50 [ 28.341284] report_bug+0x211/0x2d0 [ 28.341512] fixup_bug+0x40/0x90 [ 28.341726] do_trap+0x260/0x390 [ 28.341941] do_error_trap+0x120/0x390 [ 28.342261] ? do_trap+0x390/0x390 [ 28.342599] ? refcount_dec+0x4c/0x50 [ 28.342961] ? vprintk_emit+0x3ea/0x590 [ 28.343347] ? lock_acquire+0x1d5/0x580 [ 28.343729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.344196] do_invalid_op+0x1b/0x20 [ 28.344549] invalid_op+0x18/0x20 [ 28.344878] RIP: 0010:refcount_dec+0x4c/0x50 [ 28.345293] RSP: 0018:ffff8800388de600 EFLAGS: 00010282 [ 28.345798] RAX: 000000000000002c RBX: ffff8800683aa35c RCX: 0000000000000000 [ 28.346495] RDX: 000000000000002c RSI: 1ffff1000711bc80 RDI: ffffed000711bcb4 [ 28.347174] RBP: ffff8800388de608 R08: 0000000000000001 R09: 0000000000000000 [ 28.347873] R10: ffff8800388de4d0 R11: 0000000000000000 R12: 1ffff1000711bcc9 [ 28.348556] R13: ffff8800388de668 R14: ffff8800388de768 R15: ffff8800683aa35c [ 28.349255] ipv6_del_addr+0x42b/0xb60 [ 28.349631] ? ipv6_ifa_notify+0x1c0/0x1c0 [ 28.350039] ? addrconf_notify+0x1c5e/0x2190 [ 28.350469] ? lock_downgrade+0x990/0x990 [ 28.350858] ? kmem_cache_free+0x249/0x280 [ 28.351258] ? mark_held_locks+0xaf/0x100 [ 28.351650] ? __local_bh_enable_ip+0x9d/0x160 [ 28.352045] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.352516] ? addrconf_notify+0x1c5e/0x2190 [ 28.352945] ? trace_hardirqs_on+0xd/0x10 [ 28.353345] ? __local_bh_enable_ip+0x9d/0x160 [ 28.353793] addrconf_notify+0x1c66/0x2190 [ 28.354217] ? inet6_ifinfo_notify+0x130/0x130 [ 28.354660] ? fib_magic.isra.20+0x49b/0x820 [ 28.355091] ? fib_new_table+0x460/0x460 [ 28.355480] ? dev_get_flags+0x153/0x1b0 [ 28.355892] ? fib_sync_up+0x36a/0x8c0 [ 28.356278] ? sel_netif_netdev_notifier_handler+0x86/0x420 [ 28.356811] ? igmp_netdev_event+0x87/0x740 [ 28.357216] ? tun_device_event+0x73/0xcb0 [ 28.357611] ? sel_netif_destroy+0x250/0x250 [ 28.358025] ? fib_add_ifaddr+0x332/0x470 [ 28.358427] ? ipmr_device_event+0x27/0x1d0 [ 28.358832] notifier_call_chain+0x136/0x2c0 [ 28.359246] ? notifier_call_chain+0x136/0x2c0 [ 28.359685] ? raw_notifier_chain_unregister+0x1b0/0x1b0 [ 28.360203] ? rtnl_is_locked+0x54/0xb0 [ 28.360577] ? rtnl_kfree_skbs+0x70/0x70 [ 28.361198] raw_notifier_call_chain+0x2d/0x40 [ 28.361639] call_netdevice_notifiers_info+0x32/0x60 [ 28.362162] __dev_notify_flags+0x15d/0x430 [ 28.362569] ? __dev_change_flags+0x643/0x990 [ 28.362994] ? dev_change_name+0xbd0/0xbd0 [ 28.363403] ? print_irqtrace_events+0x270/0x270 [ 28.363854] ? print_irqtrace_events+0x270/0x270 [ 28.364313] ? print_irqtrace_events+0x270/0x270 [ 28.364768] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 28.365261] dev_change_flags+0xf5/0x140 [ 28.365648] ? dev_change_flags+0xf5/0x140 [ 28.366051] do_setlink+0xa31/0x3b10 [ 28.366417] ? print_irqtrace_events+0x270/0x270 [ 28.366866] ? check_noncircular+0x20/0x20 [ 28.367275] ? rtnl_fdb_del+0xb20/0xb20 [ 28.367664] ? __lock_acquire+0x6aa/0x3d50 [ 28.368074] ? __lock_acquire+0x6aa/0x3d50 [ 28.368487] ? __lock_acquire+0x6aa/0x3d50 [ 28.368889] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 28.369383] ? ptep_clear_flush+0x171/0x1f0 [ 28.369794] ? check_noncircular+0x20/0x20 [ 28.370204] ? print_irqtrace_events+0x270/0x270 [ 28.370667] ? rtnl_is_locked+0x54/0xb0 [ 28.371047] ? validate_linkmsg+0x5f0/0x8e0 [ 28.371471] ? rtnl_calcit.isra.25+0x4f0/0x4f0 [ 28.371924] ? netdev_master_upper_dev_get+0x157/0x200 [ 28.372469] ? __dev_get_by_flags+0x180/0x180 [ 28.372901] ? rcu_note_context_switch+0x710/0x710 [ 28.373366] ? avc_has_perm_noaudit+0x355/0x520 [ 28.373813] rtnl_newlink+0xf0d/0x1a30 [ 28.374186] ? __mutex_lock+0x16f/0x19d0 [ 28.374581] ? rtnl_link_unregister+0x330/0x330 [ 28.375052] ? avc_has_extended_perms+0x12c0/0x12c0 [ 28.375533] ? __lock_acquire+0x650/0x3d50 [ 28.375944] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 28.376438] ? cred_has_capability+0x1a0/0x3d0 [ 28.376911] ? rtnl_link_unregister+0x330/0x330 [ 28.377354] rtnetlink_rcv_msg+0x733/0x1020 [ 28.377767] ? rtnetlink_put_metrics+0x600/0x600 [ 28.378233] ? check_noncircular+0x20/0x20 [ 28.378642] ? find_held_lock+0x35/0x1d0 [ 28.379050] ? netlink_lookup+0x5f7/0xa90 [ 28.379470] ? find_held_lock+0x35/0x1d0 [ 28.379877] ? rtnl_link_unregister+0x330/0x330 [ 28.380324] ? lock_downgrade+0x990/0x990 [ 28.380685] ? lock_release+0xa40/0xa40 [ 28.381006] ? netlink_lookup+0x620/0xa90 [ 28.381297] ? rtnl_link_unregister+0x330/0x330 [ 28.381580] ? netlink_connect+0x4e0/0x4e0 [ 28.382356] ? netlink_deliver_tap+0x176/0xb60 [ 28.382705] ? iov_iter_advance+0x2a1/0x13f0 [ 28.383032] ? sock_has_perm+0x29c/0x400 [ 28.383329] netlink_rcv_skb+0x216/0x440 [ 28.383635] ? rtnetlink_put_metrics+0x600/0x600 [ 28.383982] ? netlink_ack+0xab0/0xab0 [ 28.384270] ? netlink_skb_destructor+0x1d0/0x1d0 [ 28.384632] ? selinux_nlmsg_lookup+0x32b/0x430 [ 28.384986] rtnetlink_rcv+0x1c/0x20 [ 28.385256] netlink_unicast+0x4e8/0x6f0 [ 28.385567] ? netlink_attachskb+0x8a0/0x8a0 [ 28.385901] ? security_netlink_send+0x81/0xb0 [ 28.386342] netlink_sendmsg+0xa4a/0xe60 [ 28.386737] ? netlink_unicast+0x6f0/0x6f0 [ 28.387146] ? security_socket_sendmsg+0x89/0xb0 [ 28.387497] ? netlink_unicast+0x6f0/0x6f0 [ 28.387821] sock_sendmsg+0xca/0x110 [ 28.388105] ___sys_sendmsg+0x755/0x890 [ 28.388409] ? find_held_lock+0x35/0x1d0 [ 28.388722] ? copy_msghdr_from_user+0x590/0x590 [ 28.389034] ? __do_page_fault+0x64c/0xd60 [ 28.389305] ? lock_downgrade+0x990/0x990 [ 28.389595] ? handle_mm_fault+0x410/0x8d0 [ 28.389884] ? fget_raw+0x20/0x20 [ 28.390161] ? up_read+0x1a/0x40 [ 28.390451] ? lock_release+0xa40/0xa40 [ 28.390760] ? __fdget+0x18/0x20 [ 28.391020] __sys_sendmsg+0xe5/0x210 [ 28.391312] ? __sys_sendmsg+0xe5/0x210 [ 28.391621] ? SyS_shutdown+0x290/0x290 [ 28.391920] ? find_vma+0x30/0x150 [ 28.392200] ? SyS_brk+0x4d9/0x6f0 [ 28.392474] ? SyS_setsockopt+0x215/0x360 [ 28.392758] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.393134] SyS_sendmsg+0x2d/0x50 [ 28.393397] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 28.393763] RIP: 0033:0x7fde2cbb0320 [ 28.394045] RSP: 002b:00007fff74b262e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.394679] RAX: ffffffffffffffda RBX: 00007fff74b2a3e0 RCX: 00007fde2cbb0320 [ 28.395264] RDX: 0000000000000000 RSI: 00007fff74b26320 RDI: 0000000000000013 [ 28.395810] RBP: 0000000000000082 R08: 0000000000000000 R09: feffffff00000000 [ 28.396352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff74b2aba0 [ 28.396895] R13: 0000000000000000 R14: 00007fff74b2a3b8 R15: 00007fff74b2abb8 [ 28.398195] Dumping ftrace buffer: [ 28.398550] (ftrace buffer empty) [ 28.398798] Kernel Offset: disabled [ 28.399039] Rebooting in 86400 seconds..