INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.16' (ECDSA) to the list of known hosts. 2018/04/13 16:03:20 fuzzer started 2018/04/13 16:03:20 dialing manager at 10.128.0.26:33379 2018/04/13 16:03:26 kcov=true, comps=false 2018/04/13 16:03:29 executing program 0: 2018/04/13 16:03:29 executing program 1: 2018/04/13 16:03:29 executing program 3: 2018/04/13 16:03:29 executing program 2: 2018/04/13 16:03:29 executing program 7: 2018/04/13 16:03:29 executing program 4: 2018/04/13 16:03:29 executing program 5: 2018/04/13 16:03:29 executing program 6: syzkaller login: [ 41.990457] ip (3751) used greatest stack depth: 54800 bytes left [ 42.413648] ip (3789) used greatest stack depth: 54312 bytes left [ 43.304531] ip (3879) used greatest stack depth: 54200 bytes left [ 43.844684] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.851220] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.871945] device bridge_slave_0 entered promiscuous mode [ 43.885742] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.892216] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.915454] device bridge_slave_0 entered promiscuous mode [ 43.935381] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.941859] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.961453] device bridge_slave_0 entered promiscuous mode [ 43.987118] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.993621] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.040205] device bridge_slave_0 entered promiscuous mode [ 44.060926] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.067456] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.088497] device bridge_slave_0 entered promiscuous mode [ 44.116186] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.122663] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.148187] device bridge_slave_1 entered promiscuous mode [ 44.161230] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.167672] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.190012] device bridge_slave_1 entered promiscuous mode [ 44.200124] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.206602] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.216550] device bridge_slave_0 entered promiscuous mode [ 44.227183] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.233625] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.248876] device bridge_slave_0 entered promiscuous mode [ 44.262615] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.269125] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.285175] device bridge_slave_0 entered promiscuous mode [ 44.300272] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.306761] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.330955] device bridge_slave_1 entered promiscuous mode [ 44.345816] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.352269] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.378160] device bridge_slave_1 entered promiscuous mode [ 44.386350] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.392814] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.409468] device bridge_slave_1 entered promiscuous mode [ 44.419643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.427325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.443154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.451014] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.457542] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.493465] device bridge_slave_1 entered promiscuous mode [ 44.511198] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.517701] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.549902] device bridge_slave_1 entered promiscuous mode [ 44.556200] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.562700] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.584311] device bridge_slave_1 entered promiscuous mode [ 44.593841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.603944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.615599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.639569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.655149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.668823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.737957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.808308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.823106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.844859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.895556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.954908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.052291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.587372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.618378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.661306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.811187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.823786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.831156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.845008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.872849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.893168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.920490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.039322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.050183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.076381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.086996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.140083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.313588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.335298] ip (4104) used greatest stack depth: 54120 bytes left [ 46.757485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.848832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.871969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.984473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.007385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.062461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.075548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.083281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.093652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.132738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.204363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.211542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.226715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.263126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.278398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.298482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.309815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.318660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.328485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.360160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.387638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.395772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.419187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.437720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.463648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.478284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.518769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.540377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.547627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.554770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.573867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.595188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.607932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.616111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.628707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.658568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.672759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.688645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.696586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.703917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.728521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.752552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.773766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.786366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.795682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.812622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.826674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.850325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.867429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.882760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.895845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.906131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.944603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.963592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.981829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.010244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.019307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.033909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.045401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.094840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.125747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.147747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.162385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.181320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.249993] ip (4323) used greatest stack depth: 53976 bytes left [ 49.866014] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.872544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.879422] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.885887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.922161] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.936093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.966172] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.972651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.979464] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.985907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.050911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.253232] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.259734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.266629] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.273141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.316545] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.324099] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.330532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.337304] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.343709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.352881] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.366394] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.372864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.379723] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.386173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.401403] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.410725] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.417162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.423983] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.430437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.467201] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.480651] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.487118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.493920] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.500346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.533314] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.543675] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.550141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.557005] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.563467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.618116] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.976518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.995637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.015493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.022975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.030906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.038665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.046460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.337160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.448388] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.556714] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.693698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.813248] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.838678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.943570] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.072547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.155106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.161424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.173376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.230809] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.237236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.253346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.316352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.322638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.342822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.579958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.586278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.600483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.632008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.638713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.653650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.732250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.738788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.747709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.872884] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.879198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.890624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.909702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.931328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.948345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 16:03:56 executing program 3: 2018/04/13 16:03:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2, &(0x7f0000001a80)=[{&(0x7f00000006c0)}, {&(0x7f00000019c0)='B', 0x1, 0x1}], 0x201400, &(0x7f0000000700)) 2018/04/13 16:03:56 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/13 16:03:56 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0x26, 0x80}}) 2018/04/13 16:03:56 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x2fe, &(0x7f0000000200)}, 0x0) 2018/04/13 16:03:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/13 16:03:56 executing program 1: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000000600)="fa546cd82faba4a7e2982b444bd5f75ff3c01ec509a1d427bd77385a7666ef708abb3290c1a7f06c3a54640ec2e0f60ee04b98ccfdbd1182fa65b65a79f7eb36959aef29ca4361d81cc9f5b67fc6e1b0c176c13dfd6f0e71ab254ba8a5b863011766ebc6f9bfcd9f96b77049fe98421c42b811fffab34dcb442c6f82f82c9eddc0f5592640af50fbec53e7eacd14b1b75c54ba9bad0a3879714f5bf1fcfe0f367e83bf657ed877f03f68da359d76cc1379af729b5b3ad9dae9ecde29012593d4ce8f56cf6319008aec0a0342b9f239babbd666e7444f2fd2aa21da8d8ef643ee0c3db83bb3fbf62f65c0ce9cafe13d6b18c52d9fc3b3aa3681cf5c3d8e63256492add534fa293bc9d2b9577d5999198ea989ed3864f89dc1ad78b98b275216e89d1d6d14334bf93e3d550b1237aaaba43dd4b6c6ab6371149dd9c3cb3eedd41df72cf904025d0bc89b0ef9f3d8629fa0a3b9e8999ac359edd616ce655bbb791d933886b4583cc2dca6dbbc9a4ec37d2c84705fd704ff96c12216df04fc6864842faf59d3e99d5bb607fa3b5166e102d855ff4df003384e8c532746a834b3349eca88a9c03790bf5ac6c25c03877180187cc083122571ce70c281a5c0e4a78ad22ba578574d92104740986939acbba5e2ddd41275f7fa806556557b960a0056402eefded067775c74be0ab8e0c3175b878809737ae03fbf63f9a919e6bcf285558d0eb863dc67d752b40ac2c1a9de4ea8cc7a7c1e9df2b9e716044f242228803a20e761cf2c6c263d15ba1655937df92f5d3004242a1b944e664637c933fa84b8e226da1e5b7425bd4a94596fb1135c388ffa7865e34184e3d360a17ff860dc99f50f9118453f6b3c85015a193a521b6cddb2fe8f562c638053de3532003e3308e8b701217ff46bd0168725a2e5f37644d0c77c5791fb1f561cbe54b549521798734528173365116a5649ddc56e1563f6148bc5a73045026a7f116b01bbea73977e67867cd1f310642733cba45826c4cd8a3da4730a9a5e5573af1b61664a9866d837fa532547f66db83d4048abbbb8b395e88a8bdba0f0cdc41afcb4ded34dda0a486ff1535730ffccd4dfb75c8906ff05ffaa149eb642c03e9233c3e73db21d382249e0379e7da5f21a4608165be23c1187cfa51f5b3fd15fef48a54bd76b056c156cb820204bf90f35e2e6aa71659d7d10c69dd106aba68da6d2e7d2d677efe5642e738f1f0b569c2adefb1912ee8523e347f611e20119b43e8c826c503ab88a4bc631da4f6ba0d55ff06cddabe271dd9e7dac84f00809aada53648fb9106d70c9cc7eb49dc3bb6415b12d18e8f3bb515cdfc3db8d52e78024ae3881e733f72e9b401de3f321a8463bacbac43917f808de3f8b7b67b5327b0737c70cbcabf37ce3118e106651664faf0181436823ee652627fe8c73d44994ffe674fbdf59823b3ea9c11c9afab790201d83265febc99a8d5b946321c8f2807194c35ee75b32a47d56f7a6affd8258a8cce07f8c2090f14b9840dab803d3fb6db151096c9c102bef57371d7bd0fddc17cf0bbda75ef40ee0904cf8e08445a3281b9fd830c6f2ac3674a205a95860b050677bc6217f43696282cc664907225bec4f0023994c0f6d84b27463372016d3cb942000658097e98f6ff04d6f9ed2e70c2824676163c597b7bcd921a9ad539e04490477ebf29f68e92fb0c03880961c0695aa8ef482e8cae374240247c9d7e9db3ee98b9c5410a92c2b964a477375877c6dadf8f842ffaf09ffbe7fe738cbbaa0a91dba83007bbbf93aa28930bc6d24a3654ad45b0097348e3d5a639dde2a9272c5548a5fd56e0d01e5d9071f057ac9fb22d96e9af76a31210a2c887385ef254b15ecea23b4e66f49f0619205047132740a322a18f2f8c7eb9ebd88d126bc113bb65c0cc11f31f8b67b32d70e499518d8ccaede0b82693d7dd2e3a428df501983df7829df2fcbf2564a1358476997f2e4144fb8793fb766b342ba6be3eff93ca2f5655c05d55d963c2ad2cfa2087f051b70dff76b6aedad554890119968ae08caf3d395ccffe1d55e558ee0cd4f3af970ec1cdaefdad804975cbed0cb8f1dc1fa01aebc7d7aa5cb12d9850703607e16755eaa3ac555df5c705e06e6b5e849d578e94b59db691f9e2cb683ae88f0e3a60d0438d6cbf171458777ef3f4deb2183d6d17d32c71652f3145219e8b5855f4f40ab463cbd5704094d1ec9cd29c74cb675b6e6138692ff4971ac86943da600f75d1322a9951631c980d801c7e36b532033f54d9a4e06581eeeea2a315c1abbbbf7afb23c66435b6fa27798cdd2c5dab5365cf20ecad51df7981235046c1b60c1ae473e5f8511d449494ef1c256c9c23fbec493dbd8093002fef41d736eb6ea66edf3fed2f816014dee73474da0a0e497d5272d86566079cd3da2407095de0cd62369cc035bbfab174a015a38382d008a61ebb23e5932443b8764c308d7edea0910fa2547088ce8297e863cbd2719344aaa965e0fba5d3e6ecc61ab758488cf56fe9c50adbda001d75b06d72d5cdc8ee7f0127c24c96b595a74383827c0e4072818805f72b5afe03568385460b28c6e3a8d2a36e391ce003134e36910409f4fc82423aedf56864109482f2c6dcd0960a1a07acea5aa11d22a0423623184518ff6857ec9a89be53be75c494dc81087ad2d804b3a1112d4505c557b7fb7d34d8ed6d70fca8d0534063e01c59aa8895c41abd79b3161136b801e3aaae0f6c6c7fb3649f0efabced0d11ca1bc7cee992ac8251c4affbff22a0fb7c8204b569735b8bd6484053808bf9df69f20466950e6f88fb69c93ab3227b201625d5aa1a1d01fe49eb0a42b7d1199f87d42cfa6f7d02a8cfe76572a1d662324535056dec6a71f50ba898ec979a70a94b65c7344de32909949d1311dac9e76602ceae6a47d97d5fed30ded6bfea170f1b7330804b6dda5012ac63ddced5a7bf20eed4058c030a2e3983764fb38702a718f3bc91ef88a74c7b16f7c894875246ebfccdeb55eb0af6ea5d8519a961b575aa2f362af1da6d565c703b191beedd84f397532024d6fd6eed8c788f76817de9e7b1e48a87f1f03048cbe23501f057d78eb875ad74e8a539fbff944c778443501f63b72c46219e82f2c978b3db227efc006cbedd90954e6bfd5ce8765024d9ab12e61ee1e1b71ebee195792cf0d25b73609d424b385b0a7a7d6f5fb18bc0771fb4f541fb06a6310dea9328c7c35ae1497ec9bb53e5de1361880fd484f411eb311989b9ef67eab3ef477e810e42af2744836f7cc0923ea09b40315d58ddc57b6c06186221fd27d2237ea854b479e43dcf8557a3bdff2a1e6b6fc4f0e4669d583f9794aab6772f47b4d7af6471e5877def6d33ab04ea7c8e07363021c39294a4c7f7497f93a91ed989f8021fc1b06f075cb92da1b229425cfede6277566409f2340888dd6e48fbba963180eaa19c669481382e42f8947cee827273a9e79d6600ec6a718f527e0af2bf3198d9fefd94a6e3a25596df716f1106eadf63f2722ed0e4b0a5493fe60b682670b0fe0993a53aaef2dae18c16baa48c3fee3e497041464b8fba47dae0fc65c7f4208560e833d25aba6304be677669959cf98dd5b4d06cbb553698a4f68250653637fbd3a7950d57c32e4f2362c37", 0xa17}], 0x1, &(0x7f0000001940)}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4}, 0x10) r0 = socket(0x20000000011, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x59) 2018/04/13 16:03:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000003fd9), 0x190, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x12, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/13 16:03:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100ff0a00000000000000000a00000008000000", @ANYBLOB="08001500ec97ffdf"], 0x2}, 0x1}, 0x0) 2018/04/13 16:03:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) 2018/04/13 16:03:56 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x2fe, &(0x7f0000000200)}, 0x0) 2018/04/13 16:03:56 executing program 2: nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000000)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000457000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) 2018/04/13 16:03:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}], "4ab163d7c56475f948770bbe09b1868c8fe2700040510967e98c47a18b6b7e8a511422dcf70ab517bbd91c7a8fb45676ae8bd15bc0a388dffbe9f2e8b4bded69c911a26d1d73e48e63a4d63a8e850a0a04b7a85474b8c67c0b0da7be88976c552f2387e3e0d25b10591fd6549165996bd1"}, 0xc9) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3d0f5f569629e1691681449dc33e4b9", 0xd8}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f00000005c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/176, 0xb0}, {&(0x7f0000000940)=""/126, 0x7e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)}}], 0x2, 0x0, &(0x7f0000000cc0)={0x0, 0x989680}) 2018/04/13 16:03:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000ae7000), &(0x7f000034dffc)=0x4) [ 67.772566] mmap: syz-executor2 (5808) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/04/13 16:03:58 executing program 6: 2018/04/13 16:03:58 executing program 7: mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0) process_vm_writev(0x0, &(0x7f0000000f90), 0x0, &(0x7f0000003000)=[{&(0x7f0000003fff)=""/2, 0x2}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000006ffc)) 2018/04/13 16:03:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fe4)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b800000018001f2400000000000000000a00000000000008000000001400090009000000", @ANYBLOB="4b1aa88348224a189778a7719f495dc20c6db5a3af4038b7382628cc54e740", @ANYBLOB="880008008200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad000000"], 0x3}, 0x1}, 0x0) 2018/04/13 16:03:58 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000100)=@ethtool_cmd={0x26}}) 2018/04/13 16:03:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x10) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000600)='./file0\x00', 0xffff, 0x2, &(0x7f0000001a80)=[{&(0x7f00000009c0), 0x0, 0x1000}, {&(0x7f00000019c0)='B', 0x1}], 0x201400, &(0x7f0000000700)) 2018/04/13 16:03:58 executing program 0: 2018/04/13 16:03:58 executing program 2: 2018/04/13 16:03:58 executing program 1: 2018/04/13 16:03:58 executing program 7: mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0) process_vm_writev(0x0, &(0x7f0000000f90), 0x0, &(0x7f0000003000)=[{&(0x7f0000003fff)=""/2, 0x2}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000006ffc)) 2018/04/13 16:03:58 executing program 6: 2018/04/13 16:03:58 executing program 2: 2018/04/13 16:03:58 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/04/13 16:03:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x4000000005, 0x3}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x7fff}, 0x2c) 2018/04/13 16:03:58 executing program 1: 2018/04/13 16:03:58 executing program 5: 2018/04/13 16:03:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x10) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000600)='./file0\x00', 0xffff, 0x2, &(0x7f0000001a80)=[{&(0x7f00000009c0), 0x0, 0x1000}, {&(0x7f00000019c0)='B', 0x1}], 0x201400, &(0x7f0000000700)) 2018/04/13 16:03:58 executing program 6: 2018/04/13 16:03:58 executing program 7: 2018/04/13 16:03:58 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0x2c}, 0x1}, 0x0) 2018/04/13 16:03:58 executing program 1: 2018/04/13 16:03:58 executing program 3: 2018/04/13 16:03:58 executing program 5: 2018/04/13 16:03:58 executing program 0: 2018/04/13 16:03:58 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/183, 0xb7}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/223, 0xdf}, {&(0x7f0000001580)=""/78, 0x12d}], 0x3, &(0x7f0000001780)=""/254, 0xfe}, 0x0) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000040)=@vsock={0x0, 0x0, 0x0, @my}, 0x10, &(0x7f0000001640), 0x0, &(0x7f00000018c0)=""/4096, 0x1000}, 0x0) recvmsg(r0, &(0x7f0000004d80)={&(0x7f00000001c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000004c00)=[{&(0x7f00000028c0)=""/193, 0xc1}, {&(0x7f0000002a40)=""/187, 0xbb}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/211, 0xd3}], 0x5, &(0x7f0000004cc0)=""/132, 0x84}, 0x0) 2018/04/13 16:03:58 executing program 7: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f00000001c0)=@framed={{0x18}, [], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x3, 0xe7, &(0x7f000000df19)=""/231}, 0x48) 2018/04/13 16:03:58 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00007ec000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 68.735308] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 68.742912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 68.770744] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 68.778339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/13 16:03:58 executing program 1: 2018/04/13 16:03:58 executing program 3: 2018/04/13 16:03:58 executing program 2: 2018/04/13 16:03:58 executing program 5: 2018/04/13 16:03:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc4, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x2d, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32=0xfffffffffffff000}, @typed={0xc, 0xffffff81, @u32}]}, 0x2c}, 0x1}, 0x0) [ 68.870465] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 68.878074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/13 16:03:58 executing program 7: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f00000001c0)=@framed={{0x18}, [], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x3, 0xe7, &(0x7f000000df19)=""/231}, 0x48) 2018/04/13 16:03:58 executing program 6: socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00001b6ff8)={0x0, 0x0}) sendmsg$key(r1, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000e6ce08)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffa3}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000001500)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x141, &(0x7f0000001380)=[{&(0x7f0000001300)=""/110, 0x6e}], 0x1, &(0x7f0000001400)=""/254, 0xfe}, 0x0) recvmsg(r0, &(0x7f00002ed000)={&(0x7f0000559fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000686fa0)=[{&(0x7f0000ae3000)=""/22, 0xffffff08}], 0x1, &(0x7f0000f1b000)=""/4096, 0xffffffffffffff73}, 0x121) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000580)=0xff, 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1}, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000400)={0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x3, &(0x7f0000000600)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000680)='GPL\x00', 0x0, 0xa0, &(0x7f00000006c0)=""/160}, 0x48) [ 68.973535] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 68.981176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 69.040338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 69.073396] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 69.081007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 69.133374] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 69.141322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 69.164677] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 69.172245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 69.183361] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 69.190926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 69.200653] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 69.208149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 69.217117] netlink: 'syz-executor4': attribute type 29 has an invalid length. 2018/04/13 16:04:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000186000)="24000000180003fd07ff00946f0600000200000000ffff01081d8568711ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000080)={"6970366772221784042dde926800", r1}) 2018/04/13 16:04:00 executing program 6: socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00001b6ff8)={0x0, 0x0}) sendmsg$key(r1, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000e6ce08)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffa3}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000001500)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x141, &(0x7f0000001380)=[{&(0x7f0000001300)=""/110, 0x6e}], 0x1, &(0x7f0000001400)=""/254, 0xfe}, 0x0) recvmsg(r0, &(0x7f00002ed000)={&(0x7f0000559fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000686fa0)=[{&(0x7f0000ae3000)=""/22, 0xffffff08}], 0x1, &(0x7f0000f1b000)=""/4096, 0xffffffffffffff73}, 0x121) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000580)=0xff, 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1}, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000400)={0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x3, &(0x7f0000000600)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000680)='GPL\x00', 0x0, 0xa0, &(0x7f00000006c0)=""/160}, 0x48) 2018/04/13 16:04:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/13 16:04:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000ac0)=0x1, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000280)=@rc, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000480)=""/228, 0xe4}, 0x43) 2018/04/13 16:04:00 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6, 0x9, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x20000000, 0x0, 0x0, 0x200000d0, 0x20000100], 0x0, &(0x7f0000000000), &(0x7f0000000000)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108) 2018/04/13 16:04:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x5, 0x5, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x3, &(0x7f0000000040)={0x13, 0x0, 0x6e8000}, 0x14) 2018/04/13 16:04:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc4, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x2d, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32=0xfffffffffffff000}, @typed={0xc, 0xffffff81, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/04/13 16:04:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000186000)="24000000180003fd07ff00946f0600000200000000ffff01081d8568711ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:00 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x90) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x8) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x33, &(0x7f0000000440)={0x1, {{0xa, 0x4e20}}, {{0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20}, 0x1c) 2018/04/13 16:04:00 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000000)="240000004a00030207fffd946fb983bc0a00800002000000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080), 0x4) 2018/04/13 16:04:00 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000346fc8)={&(0x7f0000baefec)=@ll, 0x14, &(0x7f0000ca3000)=[{&(0x7f00000b4000)=""/15, 0xf}, {&(0x7f0000f6afa9)=""/87, 0x57}, {&(0x7f00008e3f35)=""/203, 0xcb}, {&(0x7f0000cd5ffe)=""/2, 0x2}], 0x4, &(0x7f0000a01f13)=""/237, 0xed}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xf, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x6, 0x1}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x200003ff, 0xfb, &(0x7f00005d4000)=""/251}, 0x48) 2018/04/13 16:04:00 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x4, 0xd90, [0x200007c0, 0x0, 0x0, 0x200011c8, 0x20001440], 0x0, &(0x7f0000000540), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip_vti0\x00', 'bond0\x00', 'irlan0\x00', 'ip6_vti0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x9a0, 0x9a0, 0x9d8, [@among={'among\x00', 0x8d0, {{0x1, 0x0, 0x0, {[], 0x7, [{[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @multicast2=0xe0000002}, {[], @broadcast=0xffffffff}, {[], @loopback=0x7f000001}, {[], @broadcast=0xffffffff}, {[], @broadcast=0xffffffff}]}, {[], 0x8, [{[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @multicast2=0xe0000002}, {[], @multicast1=0xe0000001}, {[], @loopback=0x7f000001}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @rand_addr}]}}}}, @realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x13, 0x0, 0x0, 'ip6tnl0\x00', '\x00', 'eql\x00', 'yam0\x00', @random="25cdeecd610e", [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xb8, 0xf0, 0x128, [@ip={'ip\x00', 0x20, {{@empty, @remote={0xac, 0x14, 0x14, 0xbb}}}}]}, [@snat={'snat\x00', 0x10, {{@random="f425be0a82f7"}}}]}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}, {{{0x1b, 0x0, 0x0, 'dummy0\x00', 'teql0\x00', 'dummy0\x00', 'bcsh0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @random="d782553b9b56", [], 0xb0, 0xe8, 0x120, [@devgroup={'devgroup\x00', 0x18}]}, [@arpreply={'arpreply\x00', 0x10, {{@random="10aaee088390"}}}]}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x0, 0x0, 'erspan0\x00', 'ip6gre0\x00', 'irlan0\x00', 'ip6_vti0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}]}, 0xe08) 2018/04/13 16:04:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$MAP_CREATE(0xa, &(0x7f0000000040)={0x13, 0x0, 0xe80, 0x0, 0x400000}, 0x14) 2018/04/13 16:04:00 executing program 3: bpf$PROG_LOAD(0x10, &(0x7f00000010c0)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000001180)=""/4096}, 0x48) 2018/04/13 16:04:00 executing program 7: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d18000/0x3000)=nil, 0x3000, 0x0, 0x80032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c02000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 2018/04/13 16:04:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000186000)="24000000180003fd07ff00946f0600000200000000ffff01081d8568711ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="571d983ecf71f0aeff", 0x9}, {&(0x7f0000000240)="3d4777e4b51457496fae0c9d2631e0b6dc95e8c7b95c5bf1c1ffc2ce96e13d", 0x1f}], 0x2}, 0x0) 2018/04/13 16:04:01 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) recvmsg(r0, &(0x7f0000001400)={&(0x7f0000000380)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/98, 0x62}], 0x1, &(0x7f0000000280)=""/34, 0x22}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) syz_emit_ethernet(0x7ffff, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) 2018/04/13 16:04:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000186000)="24000000180003fd07ff00946f0600000200000000ffff01081d8568711ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:01 executing program 6: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1d, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x3) 2018/04/13 16:04:01 executing program 7: bpf$MAP_CREATE(0x18, &(0x7f0000000000), 0x2c) 2018/04/13 16:04:01 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x891c, &(0x7f0000000000)={'bond0\x00', r1}) 2018/04/13 16:04:01 executing program 4: r0 = socket$netlink(0x2, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x84, 0xb, &(0x7f0000001000), 0x4) 2018/04/13 16:04:01 executing program 0: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000004c0)="ec", 0x1}], 0x1, &(0x7f0000001680)}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/218, 0xda}], 0x1, &(0x7f0000000200)=""/21, 0x15}, 0x0) 2018/04/13 16:04:01 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x0, 0x80000108000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8912, &(0x7f0000000000)={"f4716e6c30ff000000dc6d00"}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 2018/04/13 16:04:01 executing program 6: 2018/04/13 16:04:01 executing program 5: 2018/04/13 16:04:01 executing program 4: 2018/04/13 16:04:01 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000186000)="24000000180003fd07ff00946f0600000200000000ffff01081d8568711ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:01 executing program 2: 2018/04/13 16:04:02 executing program 0: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000004c0)="ec", 0x1}], 0x1, &(0x7f0000001680)}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/218, 0xda}], 0x1, &(0x7f0000000200)=""/21, 0x15}, 0x0) 2018/04/13 16:04:02 executing program 7: 2018/04/13 16:04:02 executing program 3: r0 = socket$unix(0x1, 0x801, 0x0) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000004b80)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x20, &(0x7f0000004e80), 0x0, &(0x7f0000004ec0)=""/189, 0xbd}}], 0x1, 0x0, &(0x7f00000050c0)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x12, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000000)=""/192, &(0x7f00000000c0)=0xc0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x1, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000180)="efb17ebe19b45c3c892e7bd9e0f982a25dec7f104345e119db4fd3f5cbc8dfb146b46953fc85a9ec98a2d1881a", 0x2d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) 2018/04/13 16:04:02 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x1aa5158e97385e3c, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000ef9b0000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000004270062d4fa4421700cd05c162a0296d885b85b0ec64a50000000000"], 0xfdef) 2018/04/13 16:04:02 executing program 1: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000186000)="24000000180003fd07ff00946f0600000200000000ffff01081d8568711ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(r0, &(0x7f0000004400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000040), 0xffab) 2018/04/13 16:04:02 executing program 2: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x40}, {0x6}]}) r2 = getpid() ptrace$peek(0x7fc2f85e1d605614, r2, &(0x7f00000000c0)) r3 = dup3(r0, r1, 0x80000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) 2018/04/13 16:04:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000012003103000000000000000000000000", @ANYBLOB="000000000000000008001f000000000008002e0000000000080025000000000008001e000000000008000f000000000014001800100001000a0000000000000020000000"], 0x2}, 0x1}, 0x0) 2018/04/13 16:04:02 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0xa, 0x1f, 0x1f}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x3, &(0x7f0000000040)={0x13, 0x0, 0x6e8000}, 0x14) 2018/04/13 16:04:02 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x57d}], 0x1}, 0x8000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000d00)=0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) 2018/04/13 16:04:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000186000)="24000000180003fd07ff00946f0600000200000000ffff01081d8568711ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:02 executing program 0: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000004c0)="ec", 0x1}], 0x1, &(0x7f0000001680)}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/218, 0xda}], 0x1, &(0x7f0000000200)=""/21, 0x15}, 0x0) 2018/04/13 16:04:02 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0xfffffffffffffe9e) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0xfc, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e86a4b9500a1139a0d93a78de7ed00ae239537b41a4eacfcfd438dfbe84ef20bd7e66cfb9bde86f5b1d1bae840e6c373fd2d58909d8ac8f1aca1b6e95b92948d4525d", 0x43}], 0x1, &(0x7f0000002000)}, 0x8000) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/13 16:04:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000002400)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000023c0)=""/5, 0x5}, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000005e00030207fffdff6fa283bc0ae6e60000a6ffffff0c5a00000003a2d189737e", 0x24}], 0x1}, 0x0) 2018/04/13 16:04:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x108000000000004, 0x7, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x7, &(0x7f00000000c0)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xcf, &(0x7f0000000140)=""/207}, 0x48) 2018/04/13 16:04:02 executing program 0: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000004c0)="ec", 0x1}], 0x1, &(0x7f0000001680)}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/218, 0xda}], 0x1, &(0x7f0000000200)=""/21, 0x15}, 0x0) 2018/04/13 16:04:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)}, 0x0) [ 73.225229] ================================================================== [ 73.232709] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 73.239984] CPU: 0 PID: 6054 Comm: syz-executor6 Not tainted 4.16.0+ #83 [ 73.246810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.256163] Call Trace: [ 73.258754] dump_stack+0x185/0x1d0 [ 73.262372] ? csum_partial_copy_to_user+0x450/0x500 [ 73.267465] kmsan_report+0x142/0x240 [ 73.271261] __msan_warning_32+0x6c/0xb0 [ 73.275317] csum_partial_copy_to_user+0x450/0x500 [ 73.280249] csum_and_copy_to_iter+0x3dc/0x2140 [ 73.284924] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.289776] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.294560] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 73.299685] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 73.305062] udpv6_recvmsg+0xc65/0x29e0 [ 73.309050] ? udp6_lib_lookup_skb+0x240/0x240 [ 73.313633] inet_recvmsg+0x4c2/0x5f0 [ 73.317450] sock_recvmsg+0x1d0/0x230 [ 73.321263] ? inet_sendpage+0x8c0/0x8c0 [ 73.325335] ___sys_recvmsg+0x3fb/0x810 [ 73.329321] ? __fget_light+0x56/0x710 [ 73.333464] ? __fdget+0x4e/0x60 [ 73.336832] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 73.342205] ? __fget_light+0x6b9/0x710 [ 73.346197] SYSC_recvmsg+0x298/0x3c0 [ 73.350018] SyS_recvmsg+0x54/0x80 [ 73.353572] do_syscall_64+0x309/0x430 [ 73.357474] ? ___sys_recvmsg+0x810/0x810 [ 73.361618] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.366791] RIP: 0033:0x455319 [ 73.369974] RSP: 002b:00007fb024199c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 73.377673] RAX: ffffffffffffffda RBX: 00007fb02419a6d4 RCX: 0000000000455319 [ 73.384934] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000013 [ 73.392185] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 73.399441] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.406694] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 73.413946] [ 73.415548] Uninit was created at: [ 73.419072] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 73.424067] kmsan_alloc_page+0x82/0xe0 [ 73.428032] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 73.432782] alloc_pages_current+0x6b5/0x970 [ 73.437179] skb_page_frag_refill+0x3ba/0x5e0 [ 73.441664] sk_page_frag_refill+0xa4/0x340 [ 73.445971] __ip6_append_data+0x1a20/0x4bb0 [ 73.450360] ip6_append_data+0x40e/0x6b0 [ 73.454400] udpv6_sendmsg+0xfd5/0x45b0 [ 73.458353] inet_sendmsg+0x48d/0x740 [ 73.462132] ___sys_sendmsg+0xec0/0x1310 [ 73.466170] SYSC_sendmsg+0x2a3/0x3d0 [ 73.469947] SyS_sendmsg+0x54/0x80 [ 73.473469] do_syscall_64+0x309/0x430 [ 73.477334] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.482498] ================================================================== [ 73.489832] Disabling lock debugging due to kernel taint [ 73.495257] Kernel panic - not syncing: panic_on_warn set ... [ 73.495257] [ 73.502600] CPU: 0 PID: 6054 Comm: syz-executor6 Tainted: G B 4.16.0+ #83 [ 73.510718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.520739] Call Trace: [ 73.523315] dump_stack+0x185/0x1d0 [ 73.526924] panic+0x39d/0x940 [ 73.530107] ? csum_partial_copy_to_user+0x450/0x500 [ 73.535193] kmsan_report+0x238/0x240 [ 73.538978] __msan_warning_32+0x6c/0xb0 [ 73.543036] csum_partial_copy_to_user+0x450/0x500 [ 73.547972] csum_and_copy_to_iter+0x3dc/0x2140 [ 73.552632] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.557469] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.562125] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 73.567216] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 73.572584] udpv6_recvmsg+0xc65/0x29e0 [ 73.576552] ? udp6_lib_lookup_skb+0x240/0x240 [ 73.581115] inet_recvmsg+0x4c2/0x5f0 [ 73.584905] sock_recvmsg+0x1d0/0x230 [ 73.588686] ? inet_sendpage+0x8c0/0x8c0 [ 73.592737] ___sys_recvmsg+0x3fb/0x810 [ 73.596712] ? __fget_light+0x56/0x710 [ 73.600580] ? __fdget+0x4e/0x60 [ 73.603929] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 73.609273] ? __fget_light+0x6b9/0x710 [ 73.613241] SYSC_recvmsg+0x298/0x3c0 [ 73.617044] SyS_recvmsg+0x54/0x80 [ 73.620570] do_syscall_64+0x309/0x430 [ 73.624441] ? ___sys_recvmsg+0x810/0x810 [ 73.628570] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.633749] RIP: 0033:0x455319 [ 73.636919] RSP: 002b:00007fb024199c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 73.644616] RAX: ffffffffffffffda RBX: 00007fb02419a6d4 RCX: 0000000000455319 [ 73.651878] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000013 [ 73.659136] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 73.666400] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.673661] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 73.681405] Dumping ftrace buffer: [ 73.684934] (ftrace buffer empty) [ 73.688617] Kernel Offset: disabled [ 73.692238] Rebooting in 86400 seconds..