INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2018/04/17 00:25:41 fuzzer started 2018/04/17 00:25:41 dialing manager at 10.128.0.26:43021 2018/04/17 00:25:48 kcov=true, comps=false 2018/04/17 00:25:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f000011adf8)={0x14, 0x800000000000001, 0x7, 0x101}, 0x14}, 0x1}, 0x0) 2018/04/17 00:25:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xe5}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xffffff9c, 0x730000, 0x1, &(0x7f00000001c0)) 2018/04/17 00:25:51 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@subvolid={'subvolid', 0x3d, 'em1,\'mime_type.^^trustedcpuset@,--@(\rkeyring'}, 0x2c}]}) 2018/04/17 00:25:51 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x3, 0x8, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}, 0x0) 2018/04/17 00:25:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x14) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0x8, 0x6, 0xd6b, 0x2, 0xacc, 0x80000000}, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x0, 0x30, 0x4, 0x200}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380), 0x4) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000100)={0x0, 0x190d}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000440), 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, 0x0, 0x10001010) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000200)=@generic={0x0, 0x0, 0x401}) unlink(&(0x7f0000000080)='./file1\x00') sched_yield() open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/17 00:25:51 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000009c0), 0x8) move_pages(0x0, 0x395, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0) 2018/04/17 00:25:51 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @rand_addr}, 0x0, 0x0, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/17 00:25:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) syzkaller login: [ 43.723260] ip (3742) used greatest stack depth: 54688 bytes left [ 44.148258] ip (3782) used greatest stack depth: 54408 bytes left [ 45.384268] ip (3900) used greatest stack depth: 54200 bytes left [ 45.594780] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.601438] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.633545] device bridge_slave_0 entered promiscuous mode [ 45.738333] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.744848] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.788085] device bridge_slave_0 entered promiscuous mode [ 45.848336] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.854833] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.864653] device bridge_slave_1 entered promiscuous mode [ 45.897194] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.903719] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.933187] device bridge_slave_0 entered promiscuous mode [ 45.943120] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.949628] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.969118] device bridge_slave_0 entered promiscuous mode [ 45.998649] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.005231] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.033266] device bridge_slave_1 entered promiscuous mode [ 46.042128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.057796] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.064341] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.074300] device bridge_slave_0 entered promiscuous mode [ 46.093465] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.099980] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.117142] device bridge_slave_0 entered promiscuous mode [ 46.126666] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.133160] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.153379] device bridge_slave_0 entered promiscuous mode [ 46.170761] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.177297] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.198078] device bridge_slave_0 entered promiscuous mode [ 46.217474] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.223930] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.235099] device bridge_slave_1 entered promiscuous mode [ 46.250436] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.256945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.273311] device bridge_slave_1 entered promiscuous mode [ 46.281147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.290786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.299912] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.306385] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.353398] device bridge_slave_1 entered promiscuous mode [ 46.360202] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.366741] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.387747] device bridge_slave_1 entered promiscuous mode [ 46.403239] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.409725] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.434919] device bridge_slave_1 entered promiscuous mode [ 46.458552] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.465118] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.482728] device bridge_slave_1 entered promiscuous mode [ 46.491616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.504451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.518988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.538881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.578366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.593964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.705229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.722405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.732495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.753982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.770855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.826075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.966656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.970093] ip (4008) used greatest stack depth: 53656 bytes left [ 47.332802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.463591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.532337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.691123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.700857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.759932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.796719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.810676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.828555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.959643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.967138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.016138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.027614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.047265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.056347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.236679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.510498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.761469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.779061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.976844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.987534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.998340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.006970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.015754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.028428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.055333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.066286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.095470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.200966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.208387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.221262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.250320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.263359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.277614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.285848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.304626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.321201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.351071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.359152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.374810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.436408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.443599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.460287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.516803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.523998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.541778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.560348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.568243] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.576348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.609819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.645596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.661945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.673897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.685696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.696082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.714301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.724254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.758157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.774896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.792339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.800549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.809410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.825958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.846557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.858254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.867218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.874404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.891412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.923460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.930650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.942939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.971631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.979701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.996833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.042807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.074241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.099653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.196304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.203512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.216233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.643330] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.649844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.656774] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.663283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.692243] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.700607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.884123] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.890657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.897581] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.904101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.918603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.112449] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.118949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.125793] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.132278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.140876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.325248] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.331756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.338578] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.345056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.354183] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.374342] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.380843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.387706] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.394185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.436982] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.449073] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.455595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.462468] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.468922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.501961] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.509541] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.515997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.522891] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.529345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.539464] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.561701] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.568171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.575064] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.581512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.649937] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.703223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.722018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.753190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.777192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.800448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.814665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.822872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.247523] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.466451] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.557202] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.755490] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.783609] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.834510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.911214] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.047301] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.060315] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.066607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.077672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.303195] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.309473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.323646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.359077] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.370546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.400933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.580723] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.587170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.596458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.626948] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.634312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.661632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.688788] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.696617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.730236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.780876] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.792114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.804691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.005666] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.012273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.025152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/17 00:26:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f000010ef70)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0xd, &(0x7f00000000c0)) 2018/04/17 00:26:18 executing program 0: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setown(r0, 0x8, r1) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x1c) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/17 00:26:18 executing program 7: set_mempolicy(0x1, &(0x7f0000000200), 0x7f) clone(0x0, &(0x7f0000006a40), &(0x7f0000006ac0), &(0x7f0000006b00), &(0x7f0000006b40)) 2018/04/17 00:26:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) 2018/04/17 00:26:18 executing program 3: perf_event_open(&(0x7f0000740000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 2018/04/17 00:26:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000014000b00000000000000000002080000", @ANYBLOB="080001007f00000108000200ac1414004bf2b272b981d0dbeac35e189c3ec71bb5eb1e8b4c55d4d75227b1b41f5b382e53d753f4051e"], 0x2}, 0x1}, 0x0) 2018/04/17 00:26:18 executing program 2: set_mempolicy(0x1, &(0x7f0000000200), 0x1) sync() 2018/04/17 00:26:18 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x2000000000006) ioctl$LOOP_GET_STATUS64(r0, 0x127d, &(0x7f00000002c0)) 2018/04/17 00:26:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x14) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0x8, 0x6, 0xd6b, 0x2, 0xacc, 0x80000000}, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x0, 0x30, 0x4, 0x200}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380), 0x4) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000100)={0x0, 0x190d}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000440), 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, 0x0, 0x10001010) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000200)=@generic={0x0, 0x0, 0x401}) unlink(&(0x7f0000000080)='./file1\x00') sched_yield() open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/17 00:26:18 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/17 00:26:18 executing program 2: set_mempolicy(0x1, &(0x7f0000000200), 0x1) sync() 2018/04/17 00:26:19 executing program 5: set_mempolicy(0x1, &(0x7f0000000200), 0x1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 2018/04/17 00:26:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) sendto$inet(r2, &(0x7f0000832fff), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x4e20}, 0x10) 2018/04/17 00:26:19 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7fff, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f00000000c0)={0x0, 0x1c9c380}) 2018/04/17 00:26:19 executing program 4: set_mempolicy(0x1, &(0x7f0000000200), 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x8000000006) dup2(r2, r1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1) 2018/04/17 00:26:19 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x80000000008, &(0x7f000012c000/0x4000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) 2018/04/17 00:26:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020200090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100e00000010000000200000200030005000000000002004e20e00000010000000000000000"], 0x60}, 0x1}, 0x0) 2018/04/17 00:26:19 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000086dd6047367600542c00fe800000000000000000000000000000ff0200000000000000000000000000012c0000000000000000000700000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], &(0x7f0000000040)) 2018/04/17 00:26:19 executing program 3: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x6) 2018/04/17 00:26:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) 2018/04/17 00:26:19 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180)) mknod(&(0x7f0000000140)='./file0\x00', 0x21040, 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480), &(0x7f00006fcff0)) r1 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/102, 0x66}], 0x1) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) 2018/04/17 00:26:19 executing program 3: capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r1, 0x0, 0x0) 2018/04/17 00:26:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000ed5000)=[{&(0x7f0000a78000)=""/143, 0x8f}, {&(0x7f00007d6fa0)=""/96, 0x60}, {&(0x7f0000440ff4)=""/12, 0xc}, {&(0x7f000042a000)=""/190, 0xbe}], 0x4, &(0x7f0000000000)=[{&(0x7f0000e44000)=""/4096, 0xfffffdd4}], 0x1, 0x0) 2018/04/17 00:26:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000dcdff0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000541000)) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) r3 = socket$inet6(0xa, 0x1200000000000002, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140), 0x4) 2018/04/17 00:26:19 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7fff, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f00000000c0)={0x0, 0x1c9c380}) 2018/04/17 00:26:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020200090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100e00000010000000200000200030005000000000002004e20e00000010000000000000000"], 0x60}, 0x1}, 0x0) [ 69.400222] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) 2018/04/17 00:26:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000ed5000)=[{&(0x7f0000a78000)=""/143, 0x8f}, {&(0x7f00007d6fa0)=""/96, 0x60}, {&(0x7f0000440ff4)=""/12, 0xc}, {&(0x7f000042a000)=""/190, 0xbe}], 0x4, &(0x7f0000000000)=[{&(0x7f0000e44000)=""/4096, 0xfffffdd4}], 0x1, 0x0) 2018/04/17 00:26:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000014000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_getlink={0x20, 0x12, 0x305, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/04/17 00:26:19 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d298ed236687") [ 69.665323] device lo entered promiscuous mode 2018/04/17 00:26:20 executing program 6: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 2018/04/17 00:26:20 executing program 1: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/40, 0x2) 2018/04/17 00:26:20 executing program 3: 2018/04/17 00:26:20 executing program 2: 2018/04/17 00:26:20 executing program 0: 2018/04/17 00:26:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001f}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/17 00:26:20 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180)) mknod(&(0x7f0000000140)='./file0\x00', 0x21040, 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480), &(0x7f00006fcff0)) r1 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/102, 0x66}], 0x1) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) 2018/04/17 00:26:20 executing program 5: setrlimit(0x7, &(0x7f00008ec000)) mq_open(&(0x7f0000001cc0)='cgroupusercgroup]\x00', 0x0, 0x0, &(0x7f0000001d00)) 2018/04/17 00:26:20 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)) 2018/04/17 00:26:20 executing program 3: set_mempolicy(0x1, &(0x7f0000000200), 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) 2018/04/17 00:26:20 executing program 2: 2018/04/17 00:26:20 executing program 1: 2018/04/17 00:26:20 executing program 6: 2018/04/17 00:26:20 executing program 5: 2018/04/17 00:26:20 executing program 4: 2018/04/17 00:26:20 executing program 2: 2018/04/17 00:26:21 executing program 1: 2018/04/17 00:26:21 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180)) mknod(&(0x7f0000000140)='./file0\x00', 0x21040, 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480), &(0x7f00006fcff0)) r1 = syz_open_dev$evdev(&(0x7f0000fbefee)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/102, 0x66}], 0x1) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) 2018/04/17 00:26:21 executing program 5: 2018/04/17 00:26:21 executing program 3: 2018/04/17 00:26:21 executing program 0: 2018/04/17 00:26:21 executing program 4: 2018/04/17 00:26:21 executing program 6: 2018/04/17 00:26:21 executing program 2: 2018/04/17 00:26:21 executing program 6: 2018/04/17 00:26:21 executing program 4: 2018/04/17 00:26:21 executing program 1: 2018/04/17 00:26:21 executing program 0: 2018/04/17 00:26:21 executing program 3: 2018/04/17 00:26:21 executing program 2: 2018/04/17 00:26:21 executing program 5: 2018/04/17 00:26:22 executing program 0: 2018/04/17 00:26:22 executing program 1: 2018/04/17 00:26:22 executing program 4: 2018/04/17 00:26:22 executing program 6: 2018/04/17 00:26:22 executing program 2: 2018/04/17 00:26:22 executing program 3: 2018/04/17 00:26:22 executing program 7: 2018/04/17 00:26:22 executing program 5: 2018/04/17 00:26:22 executing program 7: 2018/04/17 00:26:22 executing program 5: 2018/04/17 00:26:22 executing program 0: 2018/04/17 00:26:22 executing program 6: 2018/04/17 00:26:22 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000001180)='/dev/input/mice\x00', 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f0000000780), 0x0) write$tun(r0, &(0x7f00000002c0)={@void, @hdr, @llc={@llc={0x0, 0x0, "d5"}}}, 0xd) 2018/04/17 00:26:22 executing program 4: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) 2018/04/17 00:26:22 executing program 2: 2018/04/17 00:26:22 executing program 1: 2018/04/17 00:26:22 executing program 7: 2018/04/17 00:26:22 executing program 1: 2018/04/17 00:26:22 executing program 0: 2018/04/17 00:26:22 executing program 5: 2018/04/17 00:26:22 executing program 2: 2018/04/17 00:26:22 executing program 6: 2018/04/17 00:26:23 executing program 3: 2018/04/17 00:26:23 executing program 4: 2018/04/17 00:26:23 executing program 7: 2018/04/17 00:26:23 executing program 2: 2018/04/17 00:26:23 executing program 1: 2018/04/17 00:26:23 executing program 0: 2018/04/17 00:26:23 executing program 6: 2018/04/17 00:26:23 executing program 5: 2018/04/17 00:26:23 executing program 7: 2018/04/17 00:26:23 executing program 2: 2018/04/17 00:26:23 executing program 3: 2018/04/17 00:26:23 executing program 4: 2018/04/17 00:26:23 executing program 1: 2018/04/17 00:26:23 executing program 0: 2018/04/17 00:26:23 executing program 5: 2018/04/17 00:26:23 executing program 6: 2018/04/17 00:26:23 executing program 0: 2018/04/17 00:26:23 executing program 4: 2018/04/17 00:26:23 executing program 1: 2018/04/17 00:26:23 executing program 2: 2018/04/17 00:26:23 executing program 5: 2018/04/17 00:26:23 executing program 7: 2018/04/17 00:26:23 executing program 3: 2018/04/17 00:26:23 executing program 1: syz_open_procfs(0x0, &(0x7f0000922000)='ns/user\x00') 2018/04/17 00:26:23 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040), 0x37d) 2018/04/17 00:26:23 executing program 2: mmap(&(0x7f0000863000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d8d000)='smaps\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x2000000000) 2018/04/17 00:26:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="05", 0x1, 0x200408d4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/17 00:26:23 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0), 0x14) 2018/04/17 00:26:23 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x0) 2018/04/17 00:26:24 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1={0xff, 0x1, [], 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) 2018/04/17 00:26:24 executing program 4: 2018/04/17 00:26:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="05", 0x1, 0x200408d4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/17 00:26:24 executing program 2: 2018/04/17 00:26:24 executing program 1: 2018/04/17 00:26:24 executing program 5: 2018/04/17 00:26:24 executing program 7: 2018/04/17 00:26:24 executing program 6: 2018/04/17 00:26:24 executing program 7: shmat(0x0, &(0x7f0000aa0000/0x2000)=nil, 0x0) 2018/04/17 00:26:24 executing program 2: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x6) 2018/04/17 00:26:24 executing program 6: 2018/04/17 00:26:24 executing program 5: 2018/04/17 00:26:24 executing program 4: 2018/04/17 00:26:24 executing program 1: 2018/04/17 00:26:25 executing program 3: 2018/04/17 00:26:25 executing program 0: 2018/04/17 00:26:25 executing program 7: 2018/04/17 00:26:25 executing program 2: 2018/04/17 00:26:25 executing program 6: 2018/04/17 00:26:25 executing program 5: 2018/04/17 00:26:25 executing program 4: 2018/04/17 00:26:25 executing program 1: 2018/04/17 00:26:25 executing program 3: 2018/04/17 00:26:25 executing program 0: 2018/04/17 00:26:25 executing program 7: 2018/04/17 00:26:25 executing program 1: 2018/04/17 00:26:25 executing program 6: 2018/04/17 00:26:25 executing program 5: 2018/04/17 00:26:25 executing program 2: 2018/04/17 00:26:25 executing program 4: 2018/04/17 00:26:25 executing program 3: 2018/04/17 00:26:25 executing program 7: 2018/04/17 00:26:25 executing program 0: 2018/04/17 00:26:25 executing program 6: 2018/04/17 00:26:25 executing program 3: 2018/04/17 00:26:25 executing program 7: 2018/04/17 00:26:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) 2018/04/17 00:26:25 executing program 5: 2018/04/17 00:26:25 executing program 4: 2018/04/17 00:26:25 executing program 2: 2018/04/17 00:26:25 executing program 0: 2018/04/17 00:26:25 executing program 6: 2018/04/17 00:26:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') close(r0) 2018/04/17 00:26:25 executing program 3: 2018/04/17 00:26:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast2=0xe0000032}}}}}, &(0x7f0000000000)) 2018/04/17 00:26:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001200)="30bfff3c45f732fbd4a8b85478382238dc455864074c85e9a64e89d56db57f2ca5aec9bd93d5ba4f2e4545715d4740cb34dc4742c8a37d368395f31e3990320771e86ec357e24d4239063c60dba6ffd0488c074de1a8806590d36ed3c1b0514f958d79117ec174be838a214b3d493fc6b51511ff13961dc0a72dde3d92404b319a98c2c72b9bad03f6ff985dfa79cd49bd512b1b656876dc8c2cfeb8791dae605d2d37515534fd712e9595f5a7d51020bc5e08b55e2e9242b23bd846fe3412b406075e86914ee00a97da6bc732be9fc89ba4a75b0ae7e1cc21f2e2cb83d2bc4a09d445ed8fa05f4849afcc3fe84f1e6598e3f36a938386c114263747c5db325533a2288fb1c5a5ae46c30616a347466fd0da1732c871acd62464f3b09128143e244a8a0769882a321c64a72229c9d0b80a5ab185981ba598643438cc7071e48e73775c5f37b1d85b302e1489691a3b641c174b9727585054f7c6f31e3b188d96e58e4ad31019e7d269ac6d577bad905b691558525d8f69ae8266fa2a0b77aac91c837e167b669e13c513e0591fe854340f61dacb1f362a9edc611a6aed623f88e4aa102ea816548ed0f512835a3a66a64211df80fa57cc8aed54a2259e2b430eb6c8653af000eb1c5d23bb3b4f68afe5bc6f05000363c1afc262a99c794fbca1b79d87ce770266592cdf645c375d94bb9e6a0c2ab33f8394a09c7949c8243e5f", 0x200}]) 2018/04/17 00:26:25 executing program 4: 2018/04/17 00:26:25 executing program 0: 2018/04/17 00:26:25 executing program 5: 2018/04/17 00:26:26 executing program 1: 2018/04/17 00:26:26 executing program 6: r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 2018/04/17 00:26:26 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900020007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 2018/04/17 00:26:26 executing program 4: io_setup(0x3, &(0x7f00000005c0)=0x0) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x0, &(0x7f0000000040)) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000840)=""/173, 0xad) syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)) r1 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)}]) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000680), 0x8) timerfd_create(0x0, 0x0) io_destroy(r0) 2018/04/17 00:26:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4000000000002}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)="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", 0x525}], 0x1}, 0x0) 2018/04/17 00:26:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'yam0\x00', 0x4012}) 2018/04/17 00:26:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x1afd}) 2018/04/17 00:26:26 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) 2018/04/17 00:26:26 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x223, 0x14, 0xaa}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000080)) 2018/04/17 00:26:26 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) 2018/04/17 00:26:26 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fsync(r0) 2018/04/17 00:26:27 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) 2018/04/17 00:26:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) 2018/04/17 00:26:27 executing program 6: r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 2018/04/17 00:26:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'yam0\x00', 0x4012}) 2018/04/17 00:26:27 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f000001dfc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) 2018/04/17 00:26:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='8']}) 2018/04/17 00:26:27 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) 2018/04/17 00:26:27 executing program 4: mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 2018/04/17 00:26:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x101901) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fd899e4633f58cea8fb5a550ed80ebba4d909c7a124d8ac39ad6942000000000000fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e59599a5591e6c882e32ef777685d0ab79cd3b2bd83d72a"}) 2018/04/17 00:26:27 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[], &(0x7f0000000180), 0x0) write$evdev(r0, &(0x7f0000000040), 0x1fa) 2018/04/17 00:26:27 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 2018/04/17 00:26:27 executing program 3: get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) 2018/04/17 00:26:27 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="18"]}) 2018/04/17 00:26:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001264, &(0x7f0000000000)) 2018/04/17 00:26:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x101901) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fd899e4633f58cea8fb5a550ed80ebba4d909c7a124d8ac39ad6942000000000000fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e59599a5591e6c882e32ef777685d0ab79cd3b2bd83d72a"}) [ 77.771933] sg_write: data in/out 3171656/464 bytes for SCSI command 0x0-- guessing data in; [ 77.771933] program syz-executor6 not setting count and/or reply_len properly 2018/04/17 00:26:27 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20400005, 0xfffffffc) [ 77.945998] ================================================================== [ 77.953421] BUG: KMSAN: uninit-value in crypto_inc+0x2ab/0x2f0 [ 77.959399] CPU: 0 PID: 6276 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 77.966425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.975801] Call Trace: [ 77.978418] dump_stack+0x185/0x1d0 [ 77.982052] ? crypto_inc+0x2ab/0x2f0 [ 77.985855] kmsan_report+0x142/0x240 [ 77.989673] __msan_warning_32+0x6c/0xb0 [ 77.993743] crypto_inc+0x2ab/0x2f0 [ 77.997377] drbg_ctr_update+0x3a04/0x3d10 [ 78.001637] ? drbg_hash_df+0xc70/0xc70 [ 78.005621] drbg_seed+0xcba/0xe90 [ 78.009184] ? add_random_ready_callback+0x4c/0x3c0 [ 78.014205] ? __kmalloc+0x23c/0x350 [ 78.017921] ? _cond_resched+0x3c/0xd0 [ 78.021816] ? drbg_kcapi_seed+0x129f/0x2270 [ 78.026234] drbg_kcapi_seed+0x1c97/0x2270 [ 78.030489] ? drbg_kcapi_random+0xc20/0xc20 [ 78.034907] crypto_rng_reset+0x262/0x310 [ 78.039068] rng_setkey+0x8b/0xa0 [ 78.042526] alg_setsockopt+0x6c5/0x740 [ 78.046509] ? rng_release+0x50/0x50 [ 78.050225] ? alg_accept+0xd0/0xd0 [ 78.053860] SYSC_setsockopt+0x4b8/0x570 [ 78.057934] SyS_setsockopt+0x76/0xa0 [ 78.061743] do_syscall_64+0x309/0x430 [ 78.065642] ? SYSC_recv+0xe0/0xe0 [ 78.069190] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 78.074375] RIP: 0033:0x455329 [ 78.077565] RSP: 002b:00007f9801948c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.085310] RAX: ffffffffffffffda RBX: 00007f98019496d4 RCX: 0000000000455329 [ 78.092580] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 78.099854] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 78.107150] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 78.114425] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 78.121871] [ 78.123497] Uninit was stored to memory at: [ 78.127846] kmsan_internal_chain_origin+0x12b/0x210 [ 78.132959] kmsan_memcpy_origins+0x11d/0x170 [ 78.137458] __msan_memcpy+0x19f/0x1f0 [ 78.141348] drbg_ctr_update+0x393a/0x3d10 [ 78.145589] drbg_seed+0xcba/0xe90 [ 78.149139] drbg_kcapi_seed+0x1c97/0x2270 [ 78.153381] crypto_rng_reset+0x262/0x310 [ 78.157534] rng_setkey+0x8b/0xa0 [ 78.160985] alg_setsockopt+0x6c5/0x740 [ 78.164964] SYSC_setsockopt+0x4b8/0x570 [ 78.169027] SyS_setsockopt+0x76/0xa0 [ 78.172827] do_syscall_64+0x309/0x430 [ 78.176805] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 78.181980] Uninit was stored to memory at: [ 78.186300] kmsan_internal_chain_origin+0x12b/0x210 [ 78.191405] kmsan_memcpy_origins+0x11d/0x170 [ 78.195896] __msan_memcpy+0x19f/0x1f0 [ 78.199771] drbg_kcapi_sym_ctr+0x6e8/0x840 [ 78.204082] drbg_ctr_update+0x349a/0x3d10 [ 78.208334] drbg_seed+0xcba/0xe90 [ 78.212048] drbg_kcapi_seed+0x1c97/0x2270 [ 78.216283] crypto_rng_reset+0x262/0x310 [ 78.220428] rng_setkey+0x8b/0xa0 [ 78.223882] alg_setsockopt+0x6c5/0x740 [ 78.227850] SYSC_setsockopt+0x4b8/0x570 [ 78.231907] SyS_setsockopt+0x76/0xa0 [ 78.235704] do_syscall_64+0x309/0x430 [ 78.239585] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 78.244768] Uninit was stored to memory at: [ 78.249092] kmsan_internal_chain_origin+0x12b/0x210 [ 78.254193] __msan_chain_origin+0x69/0xc0 [ 78.258427] __crypto_xor+0x23c/0x16b0 [ 78.262309] ctr_crypt+0x432/0x4f0 [ 78.265872] simd_skcipher_encrypt+0x221/0x320 [ 78.270470] drbg_kcapi_sym_ctr+0x463/0x840 [ 78.274789] drbg_ctr_update+0x349a/0x3d10 [ 78.279029] drbg_seed+0xcba/0xe90 [ 78.283172] drbg_kcapi_seed+0x1c97/0x2270 [ 78.287401] crypto_rng_reset+0x262/0x310 [ 78.291547] rng_setkey+0x8b/0xa0 [ 78.294999] alg_setsockopt+0x6c5/0x740 [ 78.298973] SYSC_setsockopt+0x4b8/0x570 [ 78.303034] SyS_setsockopt+0x76/0xa0 [ 78.306834] do_syscall_64+0x309/0x430 [ 78.310722] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 78.315906] Local variable description: ----keystream.i@ctr_crypt [ 78.322122] Variable was created at: [ 78.325828] ctr_crypt+0x4a/0x4f0 [ 78.329285] simd_skcipher_encrypt+0x221/0x320 [ 78.333852] ================================================================== [ 78.341202] Disabling lock debugging due to kernel taint [ 78.346653] Kernel panic - not syncing: panic_on_warn set ... [ 78.346653] [ 78.354021] CPU: 0 PID: 6276 Comm: syz-executor2 Tainted: G B 4.16.0+ #84 [ 78.362163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.371519] Call Trace: [ 78.374124] dump_stack+0x185/0x1d0 [ 78.377765] panic+0x39d/0x940 [ 78.380985] ? crypto_inc+0x2ab/0x2f0 [ 78.384791] kmsan_report+0x238/0x240 [ 78.388603] __msan_warning_32+0x6c/0xb0 [ 78.392687] crypto_inc+0x2ab/0x2f0 [ 78.396332] drbg_ctr_update+0x3a04/0x3d10 [ 78.400679] ? drbg_hash_df+0xc70/0xc70 [ 78.404675] drbg_seed+0xcba/0xe90 [ 78.408230] ? add_random_ready_callback+0x4c/0x3c0 [ 78.413247] ? __kmalloc+0x23c/0x350 [ 78.416961] ? _cond_resched+0x3c/0xd0 [ 78.420856] ? drbg_kcapi_seed+0x129f/0x2270 [ 78.425272] drbg_kcapi_seed+0x1c97/0x2270 [ 78.429524] ? drbg_kcapi_random+0xc20/0xc20 [ 78.433935] crypto_rng_reset+0x262/0x310 [ 78.438093] rng_setkey+0x8b/0xa0 [ 78.441551] alg_setsockopt+0x6c5/0x740 [ 78.445528] ? rng_release+0x50/0x50 [ 78.449242] ? alg_accept+0xd0/0xd0 [ 78.452875] SYSC_setsockopt+0x4b8/0x570 [ 78.456951] SyS_setsockopt+0x76/0xa0 [ 78.460758] do_syscall_64+0x309/0x430 [ 78.464650] ? SYSC_recv+0xe0/0xe0 [ 78.468188] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 78.473360] RIP: 0033:0x455329 [ 78.476535] RSP: 002b:00007f9801948c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.484251] RAX: ffffffffffffffda RBX: 00007f98019496d4 RCX: 0000000000455329 [ 78.491525] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 78.498788] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 78.506059] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 78.513322] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 78.521301] Dumping ftrace buffer: [ 78.524832] (ftrace buffer empty) [ 78.528520] Kernel Offset: disabled [ 78.532652] Rebooting in 86400 seconds..