INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2018/04/14 01:06:57 fuzzer started 2018/04/14 01:06:57 dialing manager at 10.128.0.26:36243 2018/04/14 01:07:04 kcov=true, comps=false 2018/04/14 01:07:08 executing program 0: 2018/04/14 01:07:08 executing program 1: 2018/04/14 01:07:08 executing program 7: 2018/04/14 01:07:08 executing program 2: 2018/04/14 01:07:08 executing program 4: 2018/04/14 01:07:08 executing program 5: 2018/04/14 01:07:08 executing program 3: 2018/04/14 01:07:08 executing program 6: syzkaller login: [ 48.531249] ip (3767) used greatest stack depth: 54672 bytes left [ 49.174202] ip (3825) used greatest stack depth: 54656 bytes left [ 49.221813] ip (3828) used greatest stack depth: 54408 bytes left [ 50.046524] ip (3910) used greatest stack depth: 54200 bytes left [ 50.302580] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.309188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.352281] device bridge_slave_0 entered promiscuous mode [ 50.437338] ip (3940) used greatest stack depth: 53960 bytes left [ 50.465543] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.472093] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.512341] device bridge_slave_0 entered promiscuous mode [ 50.545983] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.552496] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.584069] device bridge_slave_0 entered promiscuous mode [ 50.612641] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.619147] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.627816] device bridge_slave_0 entered promiscuous mode [ 50.639446] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.646131] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.672391] device bridge_slave_0 entered promiscuous mode [ 50.691882] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.698372] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.707948] device bridge_slave_1 entered promiscuous mode [ 50.730381] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.736891] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.754883] device bridge_slave_0 entered promiscuous mode [ 50.791544] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.798132] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.806103] device bridge_slave_1 entered promiscuous mode [ 50.817394] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.823958] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.841176] device bridge_slave_1 entered promiscuous mode [ 50.849450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.858456] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.865085] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.908667] device bridge_slave_1 entered promiscuous mode [ 50.916981] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.923571] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.961912] device bridge_slave_0 entered promiscuous mode [ 50.977438] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.984241] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.009219] device bridge_slave_1 entered promiscuous mode [ 51.025306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.033246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.045590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.063349] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.069938] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.103145] device bridge_slave_1 entered promiscuous mode [ 51.110544] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.117327] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.149637] device bridge_slave_0 entered promiscuous mode [ 51.178416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.188713] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.195300] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.223144] device bridge_slave_1 entered promiscuous mode [ 51.242068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.254611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.263595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.271654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.307291] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.313822] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.368617] device bridge_slave_1 entered promiscuous mode [ 51.377732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.453807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.476416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.487432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.563867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.741708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.774843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.028146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.258139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.273253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.335870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.362484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.425956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.514092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.559728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.569863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.580455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.654253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.689777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.769958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.793491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.926626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.018421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.256269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.495433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.509590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.532701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.609266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.704754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.734460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.743354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.762669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.794141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.813317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.823772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.831467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.838840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.896743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.903974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.923368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.029132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.036367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.045692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.056542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.069722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.077096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.095103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.125953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.133699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.143144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.152808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.180779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.189101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.218315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.248245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.281942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.291437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.300008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.307683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.342738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.371207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.386995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.419095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.429103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.437472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.457306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.465388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.472822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.484544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.517621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.542399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.572770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.584455] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.591803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.599932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.626392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.635758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.642894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.670516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.698600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.729392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.824821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.832324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.848738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.880282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.894137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.912831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.474800] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.481358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.488325] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.494872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.557126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.563674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.743934] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.750478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.757388] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.763995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.790202] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.808867] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.815369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.822301] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.828773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.872601] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.062249] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.068773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.075751] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.082272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.092550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.102694] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.109290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.116242] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.122724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.157951] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.167265] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.173766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.180687] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.187187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.195934] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.208951] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.215621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.222915] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.229400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.247709] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.469416] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.475950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.482826] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.489313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.533518] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.567177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.585712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.614788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.634743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.656424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.674242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.688724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.133533] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.336833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.362013] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.459772] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.539223] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.586828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.747920] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.805191] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.919083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.925343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.945229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.134207] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.140505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.155135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.213908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.220229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.231110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.297960] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.304286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.314656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.372793] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.379382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.389574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.453901] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.462167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.471680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.703991] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.710316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.720988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.753278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.759764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.778661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/14 01:07:35 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x7ffc, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x1002, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x81}) io_setup(0x80, &(0x7f00000010c0)=0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000400)={0xb0a}, 0x4) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000440)=""/122) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000200)="e688b00a5cb7aecb8913a8b25b9ac98c1b7d7861fa701bf878e76fb2367382483f89a6d7d154e0e91008f6041f341ee0313426ff14816c755fadd2771298aea461ac659047b62ac792df5733a6d54fcd86dc", 0x52, 0x6}, {&(0x7f0000000280)="1c7bb173fb228420420b2a005cd6fa1e7a27509e027863462f274162be8e48dee511e98bc4b8c4e925bc237cf53b53f83d3b4790ffda43502301ebfe3ebedae72c6789bcd9387ba42d02ad977c6e8a6ec9815660f73ceb4f02c57ec1", 0x5c, 0x7}, {&(0x7f0000000300)="15d17a01c6aadb63788e22446fa21af10c5e925e594167d0311773b788686671b9132271864d561e772d06803bc2b8ad126642c3281fc79b", 0x38}], 0x134404, &(0x7f00000003c0)={[{@check_int_data='check_int_data', 0x2c}]}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000004c0)=""/110, &(0x7f0000000540)=0x6e) io_cancel(r2, &(0x7f0000001180)={0x0, 0xeaeabc59e5faef79, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001100)}, &(0x7f00000011c0)) 2018/04/14 01:07:35 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2200) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000003c0)={r3, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}}, 0x10) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) 2018/04/14 01:07:35 executing program 3: unshare(0x400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x40033, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000180)={"ccfa76362f800040000000e60100", r1}) 2018/04/14 01:07:35 executing program 6: r0 = syz_open_dev$tun(&(0x7f00000d4000)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000af1fe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="020000001000000000000000", 0xc, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) 2018/04/14 01:07:35 executing program 5: ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x801) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e8600000854fa07424adee93707da75af1f0200f5cd26d7a0d2ef6ae0d178621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) socketpair$inet6(0xa, 0x80000, 0x3, &(0x7f0000000000)) 2018/04/14 01:07:35 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$urandom(&(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000000c0), &(0x7f0000000040)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, 0x9, [0x200, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x80, 0xff, 0x40, 0xfffffffffffffe01]}, &(0x7f0000000080)=0x1a) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xfff}, 0x8) 2018/04/14 01:07:35 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}, 0x38, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/04/14 01:07:35 executing program 4: unshare(0x40000000) unshare(0xc000000) r0 = epoll_create1(0x80000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r2, 0x3}, &(0x7f0000000180)=0x8) r3 = accept4$ax25(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffcdd, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)={0x9}) 2018/04/14 01:07:35 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}, 0x38, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/04/14 01:07:35 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000361ff7)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f0000000080)=0x8) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) lseek(r0, 0x0, 0x2) recvfrom$unix(r0, &(0x7f0000000180)=""/146, 0x92, 0x1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/04/14 01:07:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/177) 2018/04/14 01:07:35 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001200030f07fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000001540)=""/190, 0xbe}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000001640)=""/216, 0xd8}], 0x3, 0x0) recvmsg(r0, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[], 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/155, 0x54}], 0x5, &(0x7f0000001480)=""/53, 0x35}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001900)='/dev/vcs#\x00', 0xfffffffffffff09b, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000001940)=0x4, 0x4) r2 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000013c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001500)='*selinuxcpuseteth0eth0hB\x00', 0xfffffffffffffffe) r3 = shmget(0x0, 0x1000, 0x60, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) ioctl$int_out(r0, 0x2, &(0x7f0000001780)) keyctl$clear(0x7, r2) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000017c0)=""/159, &(0x7f0000001880)=0x9f) r4 = getpgid(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000018c0)={0x194}) 2018/04/14 01:07:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000548000)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x5b6712f39b819aa4, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0xc, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/xfrm_stat\x00') sendto(r0, &(0x7f0000000100)="67b75597a77fe973c59b84e9f0195d52b2fd3e47e9902b30cfc3f469e81bf03c424f8bce5a54f8301c18e5ddbf8694a68218e6f54cf321ef5977513c270dadfb44477ec5e9144408d9ba328c772546c72e60397a59370ae2631fd3a1071892dcbf97d668bcb5817a164579dfe47b26e9eab18d469100", 0x76, 0x8000, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x3, {0xa, 0x4e21, 0x3a3, @ipv4={[], [0xff, 0xff]}}}}, 0x80) setsockopt$inet_dccp_int(r1, 0x21, 0x10, &(0x7f00000000c0)=0xffffffff, 0x4) 2018/04/14 01:07:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='8/cg\x00\x00\x00\x00/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x1) 2018/04/14 01:07:35 executing program 5: r0 = socket$inet6(0x10, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x1, [0x4]}, &(0x7f00000000c0)=0xa) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x1}, 0x8) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf27d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) [ 73.871297] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. [ 73.933519] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. [ 73.997596] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. [ 74.077275] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. [ 74.127480] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. [ 74.152570] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/14 01:07:36 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c", 0x7e, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x80, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1, &(0x7f0000000180)=""/169, 0xa9}, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) mq_getsetattr(r2, &(0x7f0000000000)={0x3f, 0x4, 0x1, 0x9, 0x1, 0x1000, 0xfffffffffffffff7}, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) 2018/04/14 01:07:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setsig(0x4203, r1, 0x8000, &(0x7f0000000040)={0x6, 0x9c, 0x200, 0x7fff}) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000003000)={0x0, @in6={{0xa}}}, &(0x7f0000fc9000)=0xa0) 2018/04/14 01:07:36 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x9, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x6c7, r1}) setrlimit(0x7, &(0x7f0000a9cff8)) epoll_create1(0x80000) 2018/04/14 01:07:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x401, 0x410000) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4) getsockopt$inet6_mtu(r3, 0x29, 0x48, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 2018/04/14 01:07:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000040)=0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8202, 0xfffffffeffffffff, 0x200000, r1}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r1}, 0x8) 2018/04/14 01:07:36 executing program 3: r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) fcntl$getownex(r0, 0x10, &(0x7f000058eff8)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) getresuid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000204}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@migrate={0x5c, 0x21, 0x20, 0x70bd2a, 0x25dfdbfb, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6, 0x4e23, 0x0, 0x4e21, 0xff, 0x0, 0xa0, 0x80, 0x0, 0x0, r2}, 0x6e6bb2, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000580)={@dev, 0x0}, &(0x7f00000005c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000600)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000000640)=0x14) accept$packet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)=ANY=[@ANYBLOB="82040000", @ANYRES16=r3, @ANYBLOB="200025bd7000ffdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="480202003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040062007f010000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004003f0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000008000100", @ANYRES32=r9, @ANYBLOB="0c0102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c0004006104000103000000f7ff00aa000000007f0007083100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000200000040000100240001006c625f706f72745f737461747300000000200000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400010005ff05000000000000c001000000"], 0x480}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000e00)=0xffffffff80000001) 2018/04/14 01:07:36 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001200030f07fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000001540)=""/190, 0xbe}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000001640)=""/216, 0xd8}], 0x3, 0x0) recvmsg(r0, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[], 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/155, 0x54}], 0x5, &(0x7f0000001480)=""/53, 0x35}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001900)='/dev/vcs#\x00', 0xfffffffffffff09b, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000001940)=0x4, 0x4) r2 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000013c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001500)='*selinuxcpuseteth0eth0hB\x00', 0xfffffffffffffffe) r3 = shmget(0x0, 0x1000, 0x60, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) ioctl$int_out(r0, 0x2, &(0x7f0000001780)) keyctl$clear(0x7, r2) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000017c0)=""/159, &(0x7f0000001880)=0x9f) r4 = getpgid(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000018c0)={0x194}) 2018/04/14 01:07:36 executing program 5: r0 = socket$nl_generic(0xa, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001000)="21c1", 0x2}], 0x1, &(0x7f0000002000)}}], 0x1, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="3b71f6185a7404bdab0bf1eb1b71", 0xe}, {&(0x7f0000000100)="ad34d7cbda60bf5d028608ed17d6ee880577a3f3f317dce4932d08181388a1f4f26466c508b1d2478ac8a4c6dd6cbf012fbfd23bd14a35e0e78dedddd007257aa7a1aa32b6df1e5a1a84199589bd868e152519272337e44d2eb2a72adc8006a992e4614bb4340ba30b91276b4a8ae130841ad5dc5f04", 0x76}, {&(0x7f0000000040)="b8082c83e102ce9e01121e6b73e3f27f5290600fc47b8b0a0fb663dc8b01a4a0b85077de4fe0", 0x26}], 0x3, &(0x7f0000000500)=[{0x108, 0x116, 0x8, "455dc7e1bf3912f292ca136fa136d8e9417552003ec073dfcbc2a6d0ae6f45b0a644320c246307493959a7b1139611b5c42b77d5aea4f6c6fba563add164b85cf67a4b202d822618701cc0d93142e980065332839ea587508508bac8b893c3aac60d84c28ee21ed61a5d73a6d9dde0a4fe8a458d8a57643ecfa7007f8d89fbfb6584f36194a56535c3925b699a277c0bf948df7da6ef6fb53d59263ce891eb003087399475d9ae36d6abe5bae7d7109480b4a49765637b511e1ff66cbb064cb10fa0c6c99d1f79548e91892f5ba1bb7c5d8a0048f5d2e916599229f4b91a514ad04fcf324aae73219e4d663d13cf09e5c1ed0b"}, {0xd8, 0x10d, 0x41, "6ea3c9a9ecac92dbfc00349574feccacd1343059a3948197d8b1f129b6892077b9c1e71fd196b72485dd7f23e05c68b80242eba495b8ee790e33c8318cab8b344574565037f4631c4e2c6a17a8a8cd895f4d21976f4884de5623e65f3f445a7021d5c8e0aad15d7a3fc3f79884960d0d9c937980a67b3ad8fa3ac638d5b1f5b0c1f34607150b6c7dc74b6007ff01b1ff1de1eb1c2d6e78cda4f1dc40c84d2bb4b7b52be1ab56b39a41a53df7f11ca3ab60eb87e20ea286457a45d9969d6dcb7b85ed69f3f512"}, {0x28, 0x10f, 0x4, "deba54993a01a22c832123686c07f702a8e9"}, {0xc0, 0x119, 0x5, "1fd658c45515cbd003465b6eea8dff5677c8cf9d4bf8d4d9f5c3957589b162afa370cc1836ae0a3861c7e7a00cc6bde049568e01b84a2e80f386a7ff69f9553a6a224557c3f93d3d099a1705300f83f021e4430c51a2087144ef1eafec19a96bfb6b81b9afff2aa75389dbd71faf7470898dc37140b46282b725142e0c28d59244993194b494a250a10be985749ddcb7a33170a3ddb2da4e2c4d6e0cef8a644c87a454b8b941ad78b93ee17fa7"}, {0xc0, 0x117, 0x40, "108d72e393fbd1ca593f05b0ea661e6c2e0450030476de328d7ec2a24082485f225ae9d821e2fa56d2e92c389af692a197449bfefead8949f3d0c8d57016bd34617dae26cc00a00e5c77ac40010fd14b06169a3266724294b006fb2cc0b08beb1d6c036a41a3eddc2b4aee6918cb45b0c9e126995228784190456cc5409467bc69a31d6951bd293f29771812dc5875ada0f94a3a48256db4d0b9796147a47b1d6a20eaf1fd8f38301a16"}, {0x80, 0x101, 0x6, "71df9931690f4b629bacbd83508a106d94ae401d5bc1f3cbe448e31990d60658c3b2f509fd5b19b4852a5a7527e968a854fa456fa5735c47726bc8c83b81373d7c35ef81cd19aa08f1351095076b4b9650ff4fd4822ba3db69a4bccc9ecdf6ecb128ee6bf29f211faf"}], 0x408, 0x4000000}, 0x9}], 0x1, 0x20000000) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000240)={'gre0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x14, 0x0, 0x29, 0x43}, 0x14) [ 74.309643] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/14 01:07:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0xc02, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)="6370757365742e6d656d5f6578636c757369766501", 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) write$evdev(r3, &(0x7f0000000140)=[{{}, 0x2, 0x2, 0x461bc3b5}, {{0x77359400}, 0x9, 0x2, 0x8}, {{0x0, 0x2710}, 0x100000000, 0x2, 0x81}, {{0x0, 0x2710}, 0x8, 0x4, 0x4}, {{0x0, 0x7530}, 0x2, 0x10001, 0x2f22}, {{0x0, 0x2710}, 0x401, 0x1, 0x5}], 0x90) sendfile(r2, r2, &(0x7f0000000080), 0x3) 2018/04/14 01:07:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003400)=[{0x0, 0x0, &(0x7f0000003340), 0x0, &(0x7f0000003380)}], 0x1, 0x8000) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)}, 0x0) accept$alg(r0, 0x0, 0x0) 2018/04/14 01:07:36 executing program 4: r0 = socket$inet6(0xa, 0xf, 0x400) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup2(r0, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100), 0xc) pipe2(&(0x7f0000000000), 0x80000) [ 74.359876] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/14 01:07:36 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={"6966623000001100ff0193f4008000", 0x4012}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000180)=0x5, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000a00aaaaaaaaaabbaaaaaaaaaabb0000000000000180c20000000180c2000000aaaaaaaaaaaaffffffffffffaaaaaaaaaaaaffffffffffff5124b9df8522"]) [ 74.444643] netlink: 7 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/14 01:07:36 executing program 3: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000cd2ff8)='..') openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) umount2(&(0x7f0000e28000)='..', 0x0) [ 74.595454] ================================================================== [ 74.602863] BUG: KMSAN: uninit-value in gf128mul_init_4k_lle+0x212/0x5c0 [ 74.610054] CPU: 1 PID: 5844 Comm: syz-executor7 Not tainted 4.16.0+ #83 [ 74.616891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.626421] Call Trace: [ 74.629018] dump_stack+0x185/0x1d0 [ 74.634100] ? gf128mul_init_4k_lle+0x212/0x5c0 [ 74.638775] kmsan_report+0x142/0x240 [ 74.642585] __msan_warning_32+0x6c/0xb0 [ 74.646664] gf128mul_init_4k_lle+0x212/0x5c0 [ 74.651174] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 74.656554] ? ghash_setkey+0x56/0x280 [ 74.660552] ghash_setkey+0x185/0x280 [ 74.664362] ? ghash_final+0x1f0/0x1f0 [ 74.668258] shash_async_setkey+0x337/0x4c0 [ 74.672588] ? shash_async_digest+0x1b0/0x1b0 [ 74.677097] crypto_ahash_setkey+0x31a/0x470 [ 74.681514] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 74.686716] crypto_gcm_setkey+0xa3c/0xc10 [ 74.690960] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 74.695370] crypto_aead_setkey+0x373/0x4c0 [ 74.699696] aead_setkey+0xa0/0xc0 [ 74.703234] alg_setsockopt+0x6c5/0x740 [ 74.707209] ? aead_release+0x90/0x90 [ 74.711010] ? alg_accept+0xd0/0xd0 [ 74.714825] SYSC_setsockopt+0x4b8/0x570 [ 74.718892] SyS_setsockopt+0x76/0xa0 [ 74.722698] do_syscall_64+0x309/0x430 [ 74.726609] ? SYSC_recv+0xe0/0xe0 [ 74.730156] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 74.735345] RIP: 0033:0x455319 [ 74.738532] RSP: 002b:00007fb8ea8bac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.746243] RAX: ffffffffffffffda RBX: 00007fb8ea8bb6d4 RCX: 0000000000455319 [ 74.753511] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 74.760862] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 74.768138] R10: 00000000203c1000 R11: 0000000000000246 R12: 00000000ffffffff [ 74.775587] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 74.782865] [ 74.784486] Uninit was stored to memory at: [ 74.788819] kmsan_internal_chain_origin+0x12b/0x210 [ 74.793923] kmsan_memcpy_origins+0x11d/0x170 [ 74.798418] __msan_memcpy+0x19f/0x1f0 [ 74.802305] gf128mul_init_4k_lle+0x99/0x5c0 [ 74.806705] ghash_setkey+0x185/0x280 [ 74.810497] shash_async_setkey+0x337/0x4c0 [ 74.814821] crypto_ahash_setkey+0x31a/0x470 [ 74.819234] crypto_gcm_setkey+0xa3c/0xc10 [ 74.823486] crypto_aead_setkey+0x373/0x4c0 [ 74.827810] aead_setkey+0xa0/0xc0 [ 74.831364] alg_setsockopt+0x6c5/0x740 [ 74.835429] SYSC_setsockopt+0x4b8/0x570 [ 74.839485] SyS_setsockopt+0x76/0xa0 [ 74.843281] do_syscall_64+0x309/0x430 [ 74.847168] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 74.852343] Uninit was stored to memory at: [ 74.856665] kmsan_internal_chain_origin+0x12b/0x210 [ 74.861775] __msan_chain_origin+0x69/0xc0 [ 74.866037] __crypto_xor+0x23c/0x16b0 [ 74.869924] crypto_ctr_crypt_inplace+0x29a/0x3a0 [ 74.874772] crypto_ctr_crypt+0x54c/0x7d0 [ 74.878921] skcipher_encrypt_blkcipher+0x222/0x320 [ 74.883940] crypto_gcm_setkey+0x6a3/0xc10 [ 74.888172] crypto_aead_setkey+0x373/0x4c0 [ 74.892493] aead_setkey+0xa0/0xc0 [ 74.896052] alg_setsockopt+0x6c5/0x740 [ 74.900059] SYSC_setsockopt+0x4b8/0x570 [ 74.904116] SyS_setsockopt+0x76/0xa0 [ 74.907911] do_syscall_64+0x309/0x430 [ 74.911812] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 74.917163] Local variable description: ----vla@crypto_ctr_crypt_inplace [ 74.923991] Variable was created at: [ 74.927707] crypto_ctr_crypt_inplace+0x19a/0x3a0 [ 74.932549] crypto_ctr_crypt+0x54c/0x7d0 [ 74.936679] ================================================================== [ 74.944027] Disabling lock debugging due to kernel taint [ 74.949469] Kernel panic - not syncing: panic_on_warn set ... [ 74.949469] [ 74.956838] CPU: 1 PID: 5844 Comm: syz-executor7 Tainted: G B 4.16.0+ #83 [ 74.964972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.974322] Call Trace: [ 74.976926] dump_stack+0x185/0x1d0 [ 74.981250] panic+0x39d/0x940 [ 74.984481] ? gf128mul_init_4k_lle+0x212/0x5c0 [ 74.989145] kmsan_report+0x238/0x240 [ 74.992944] __msan_warning_32+0x6c/0xb0 [ 74.997092] gf128mul_init_4k_lle+0x212/0x5c0 [ 75.001588] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 75.007043] ? ghash_setkey+0x56/0x280 [ 75.010936] ghash_setkey+0x185/0x280 [ 75.014748] ? ghash_final+0x1f0/0x1f0 [ 75.018640] shash_async_setkey+0x337/0x4c0 [ 75.022971] ? shash_async_digest+0x1b0/0x1b0 [ 75.027653] crypto_ahash_setkey+0x31a/0x470 [ 75.032071] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 75.037271] crypto_gcm_setkey+0xa3c/0xc10 [ 75.041518] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 75.045931] crypto_aead_setkey+0x373/0x4c0 [ 75.050269] aead_setkey+0xa0/0xc0 [ 75.053822] alg_setsockopt+0x6c5/0x740 [ 75.057804] ? aead_release+0x90/0x90 [ 75.061595] ? alg_accept+0xd0/0xd0 [ 75.065236] SYSC_setsockopt+0x4b8/0x570 [ 75.069291] SyS_setsockopt+0x76/0xa0 [ 75.073166] do_syscall_64+0x309/0x430 [ 75.077047] ? SYSC_recv+0xe0/0xe0 [ 75.080577] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 75.085753] RIP: 0033:0x455319 [ 75.088922] RSP: 002b:00007fb8ea8bac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.096702] RAX: ffffffffffffffda RBX: 00007fb8ea8bb6d4 RCX: 0000000000455319 [ 75.103958] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 75.111210] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 75.118479] R10: 00000000203c1000 R11: 0000000000000246 R12: 00000000ffffffff [ 75.125739] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 75.133498] Dumping ftrace buffer: [ 75.137031] (ftrace buffer empty) [ 75.140720] Kernel Offset: disabled [ 75.144343] Rebooting in 86400 seconds..