INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2018/04/15 10:48:53 fuzzer started 2018/04/15 10:48:53 dialing manager at 10.128.0.26:36243 2018/04/15 10:48:59 kcov=true, comps=false 2018/04/15 10:49:02 executing program 0: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0xfffffffffffffffc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000100)) accept$alg(r2, 0x0, 0x0) connect$rds(r2, &(0x7f0000000140)={0x2, 0x4e21}, 0x10) r3 = msgget(0x3, 0x110) msgsnd(r3, &(0x7f0000000180)={0x3, "57cc64d76467471fd7d40ab553a47b82550f2aa0c16885dfd2752fdea5d6a79055e742154d60b6c46304cdd70b9c90bd17014835d584e7fe7f70b44d53a751321e00ba8680fdded4baa4fc37f52e82ebf68372b3d3d96ddf1f29e4b946c5d94a6a33257e984f9af05f464e87b1f748cb9bfbc20cb152e1bcfeb819cd306864e48629491bc130a83bf4c2779f04b7ca"}, 0x97, 0x800) r4 = accept4$packet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14, 0x800) bind$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0x1, 0x5, 0x8, 0x400}, {0x8, 0x2, 0x7ed, 0x100}, {0x5fd, 0x666acc59, 0x91d, 0x7}, {0x9, 0x7fff, 0x67b, 0x7f}, {0x232, 0xfffffffffffffff9, 0x7}, {0x8000, 0x6d, 0xfffffffffffffffc, 0x7ff}]}) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000380)=0xffffffff7fffffff, 0x4) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000003c0)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xd5, "e89d8f735be8e88594bc8e16cc94e0ede2429d0de3c34017106900d2efe993e8b618fd4922f459c3a7a612a90ae11584df674b2251f15e7636be89ef2eb799ec9a4d7cd3c40048e2a2921c451d746a2d7e683a481ddba3ddcf39dafb611ffb210ef8003ed03aa3d32879a1f77dcf13c080d1f5b45d9324e184bcd2289893281bb2907633e877532cf3697c371a9fe6cfe5393ef1651b32dbaff5ea14e08f7735a7dd628fcc055a6b2f629ededc49bc2033eefe602b379179f91319f345ef792cd0bfbea8a4f52f4072a48698301fe1f247dde92bfa"}, &(0x7f0000000500)=0xdd) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r7, 0x1}, &(0x7f0000000580)=0x8) r8 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000005c0)={0x3, 0x9}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000600)={r5, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x44001) bind$bt_rfcomm(r2, &(0x7f0000000680)={0x1f, {0xfffffffffffffff7, 0x7, 0x400, 0x4, 0x5, 0x4}, 0x8}, 0xa) ioprio_get$pid(0x1, r1) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000006c0)="058d1d26e26c1bb008737a3750290411ddab1e529cfbb644b3ca892dcec461c90c7e69679c0549279157a4fc5be168207775c64340d9109cab572618003199ce577bddc40689329859a17514d3f5cf324c433cf5339863c0dd246825215806e07f292dba6e9e78bcc8038d85a32d38bb6ceb6c0ce0101e8ceca8cc5faddc274650dd11bdd69e2c") lseek(r4, 0x0, 0x3) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000007c0)={0x31, r9}) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000800)=0x81, 0x4) close(r0) 2018/04/15 10:49:02 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x1014c2) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/188) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1}, 0x8) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/33) msgget$private(0x0, 0x200) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000380)="f66ed5748e4e952f446c9c677abca3839239fbf3f974ab05bb5975170bbc3cac68d88c0374c64f7407a6895e3a0a7d5fab5716e2c7cceb88a22294cbb362fdac84e21b7f6dcb289be800069cf6d594ab3309d96fb82ef7f4b8d2b605") ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000400)={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendto$ax25(r0, &(0x7f0000000440)="8fc000cb7511f610ee2ca3c3f4c76d16b736b57b5b9f3f85aa7f1a5c4c1d4b09b66548f1d71139d8781b3734", 0x2c, 0x4000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000480)={r1, 0xbe, 0x10, 0x7ff, 0x1ff}, &(0x7f00000004c0)=0x18) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000005c0)={0x17, 0xa3, &(0x7f0000000500)="39a09c3e3044d7b9f8c7c8655e0a3c9f884d1539a346247b170e21937c05856f9b2d626ec98522a928b69fa66995dd31487c88295742c6132492946dc338c95b93f14c29e171b1badd8df5d18b3b6e5864bc653e5be81bbe4aac2419d30d22fcd0bb3fdd1073eb8b4febd0faa657bbc4af3fb785531c051cb85f0cfdeafa87503ff34594b34686d894339df40f1daaa63dfd183ac03b07a45a8b1afd53c98a1135de8a"}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={r1, 0xcd6}, 0x8) r2 = accept$unix(r0, &(0x7f0000000640)=@abs, &(0x7f00000006c0)=0x6e) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000740)={r1, 0x0, 0x3}, 0x8) ioctl$sock_ifreq(r2, 0x89bb, &(0x7f0000000780)={'team_slave_0\x00', @ifru_addrs=@ethernet={0x1c1616e8eb2d6c82, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000007c0)={0x53, 0x100000000, 0x1, {0x79, 0x4}, {0x91, 0x6}, @rumble={0x9, 0x8000}}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000800)=""/84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000880)={r1, 0x2, 0x5}, 0x8) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000018c0)=@get={0x1, &(0x7f00000008c0)=""/4096, 0xffff}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001900), &(0x7f0000001940)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001980)={0x7ff, 0x800e, 0x6, 0x591, r1}, &(0x7f00000019c0)=0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001a00)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001a40)=r3) accept$unix(r0, &(0x7f0000001a80), &(0x7f0000001b00)=0x6e) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001b40)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getdents(r0, &(0x7f0000001bc0)=""/192, 0xc0) 2018/04/15 10:49:02 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0x7530}, 0x8001, 0xfff, 0x2}, {{0x0, 0x7530}, 0x3, 0x20, 0x6}, {{0x0, 0x2710}, 0xffffffff, 0x6, 0xd6a7}, {{r1, r2/1000+10000}, 0xfb, 0x9, 0x7}, {{r3, r4/1000+30000}, 0x401, 0x10001, 0xfff}, {{0x77359400}, 0x5, 0x2}], 0x90) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, r5}, 0x14) rt_sigpending(&(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x48e, @local={0xfe, 0x80, [], 0xaa}, 0xdd}, @in6={0xa, 0x4e24, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x1000}, @in6={0xa, 0x4e23, 0x2b1512ac, @mcast1={0xff, 0x1, [], 0x1}, 0x63758f2f}, @in6={0xa, 0x4e20, 0x159, @loopback={0x0, 0x1}, 0x484}], 0x70) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockname$packet(r0, &(0x7f0000000440), &(0x7f0000000480)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x3ff, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffff80, 0xfffffffffffffff7, 0x8, 0xc311, 0x100000000, 0x6, 0x9, 0x101, 0x80000001, 0x92c]}, &(0x7f0000000640)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000680)={r6, 0x52, "ef5880c06ecb8c28436ded720d724c14c4814480eb2c7c182d478770654d37b6893d4d71dd2ca603f45d6ae7e9765a920a9b0ab685f520e7e77327b30269e834d17e26e73e9033b987501a9eec1228c5522d"}, &(0x7f0000000700)=0x5a) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000740)={0x2, "79333dba06f4192fdb9d2d1aa33cf9a160bbbd7746d0aa01b5e7474dd45824dde48004cdefb31c16b735505710c84fd494ae1eb12025860942cba8d43461e57bc945ff"}, 0x4b, 0x800) ioctl$KDADDIO(r0, 0x4b34, 0x9) r9 = request_key(&(0x7f00000007c0)='id_resolver\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000840)='+\'}\x00', 0xfffffffffffffffe) keyctl$describe(0x6, r9, &(0x7f0000000880)=""/140, 0x8c) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000940)={0x7, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x108) sendmsg$kcm(r0, &(0x7f0000000dc0)={&(0x7f0000000a80)=@ax25={0x3, {"836d46bc46a75a"}, 0x4}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)="92ba7ad88d7d5bae546219b5ddf0481ca93bfb8957ce717ee9a8b8ee92ab9412c6434c1ebb87e36c5be496708d180b34a336d8f6ef52c4daaf727e689c34d1bb95884f8a7a5cb4312a216ad9fc8516043ec297e5ef29ad800ece6c18bfce1c73fed476b0637cd6929e9657fd35e17322f2039b2ba603ecf64100906ba5f006903e25a363e31f915be334dc2be5c3e780ce42d92bd9ce7a5b4f556bd70d0fdfbfcc0bd446d40530ed125437bcab677f38ebabda1315db8dee8502c2df722ccf8f4057ef931fee048d1644974f8b2b9321", 0xd0}], 0x1, &(0x7f0000000c40)=[{0x58, 0x115, 0x4, "7128f365287855c394fbf7e8c968896e1a5670e463bda42be6bf1247dd92ae11a925fbb67799fbfa00beb39791019901449f3e7517f4a1e46f913c798b969e45efb7"}, {0xf8, 0x13f, 0x80000001, "9bec9386b218aae3ca5159cef208bca2dd8c7823220572087f0c621fd7cba052bd0e0907657b307d50119c120be1348f8fb10ef5478c06d61020a8c1d1d501f3a09a99e51206e41d0327ac3d836a25fb34a024e1e0621b6fb1cf975184451fc9fd54ef9b2e210b6a10d4d416719632dadc175b6b70f4cf16c71cbb0b12e21ddebae175b452211b2c290ed2935804ac5f8496ef20fb3224de2b62823420740097b3d9d20c00c3c880d380575b43612a30144d52ed579b19889b171b5c1d3c17d1db57a0b4a8d0bbfc71b0c8f9ed578bd59876b3e977e365e8959b5f23069d5072b4f1d4b5c5"}], 0x150, 0x4004}, 0x4000880) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r0, &(0x7f0000000e40)=0xe2, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000e80)={0x2, 0x1, 0x2, 0x7fffffff, r7}, 0x10) mknod(&(0x7f0000000ec0)='./file0\x00', 0x8080, 0x5) getsockopt$sock_int(r10, 0x1, 0x2f, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000f80)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffff8}], 0x4c) clock_gettime(0x1, &(0x7f0000001000)) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000001040), &(0x7f0000001080)=0xc) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000010c0)) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000001100), &(0x7f0000001140)=0x4) write$binfmt_misc(r10, &(0x7f0000001180)={'syz0', "316a93e3eb6c86332b4cf791a86274fb7dd5ebe98404ffb699"}, 0x1d) 2018/04/15 10:49:02 executing program 1: set_mempolicy(0x0, &(0x7f0000000000)=0x10000, 0x9) r0 = socket$inet6(0xa, 0x3, 0x3) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', 'ppp1/+-[\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xa16d, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, [0x100, 0x14c4015, 0xd4a, 0xc00000000000000, 0x101, 0x3, 0x4, 0xfffffffffeb503d0, 0x9, 0x15, 0x1, 0xffffffff, 0xfffffffffffffffb, 0x5, 0x1]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1, 0xfffffffffffffffc}, &(0x7f0000000200)=0x8) r3 = accept(r0, 0x0, &(0x7f0000000240)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000280)=0x9, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000380)={r1, 0x8001, 0xffffffffffffff00, 0x6, 0x6, 0x2}, 0x14) recvfrom$packet(r3, &(0x7f00000003c0)=""/242, 0xf2, 0x40000020, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000004c0)={r1, 0xff}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000540)={r5, 0x1}) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000580)={'bond0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000005c0)={0x41}, 0x1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) recvfrom$ax25(r4, &(0x7f0000000640)=""/206, 0xce, 0x40000140, &(0x7f0000000740)={0x3, {"32b7321012fd04"}, 0x9}, 0x10) r7 = request_key(&(0x7f0000000780)='encrypted\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='//\x00', 0x0) r8 = add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r7, 0x4, r8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000008c0)={r1, 0x7}, &(0x7f0000000900)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000940)={r9, 0x27, "e089f6ee83abc3fe8d0211e6d5c77900d0d88fc9d05670dff9395c095b6699c6af8e541cff0137"}, &(0x7f0000000980)=0x2f) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000009c0)={r2, 0x7}, &(0x7f0000000a00)=0x8) ioctl$TIOCSBRK(r4, 0x5427) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000a40)={0x7fff, 0x0, 'client0\x00', 0x0, "ec6763735247cecf", "fb240a3e47ee0052337e06fbada38a1411da8d79e4203293b3b01c26dc162a70", 0x3ff, 0x9}) syncfs(r6) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000b00)) 2018/04/15 10:49:02 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) r1 = geteuid() setreuid(r0, r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r2, &(0x7f0000003940)=[{{&(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/87, 0x57}, {&(0x7f0000000580)=""/205, 0xcd}], 0x6, &(0x7f0000000700)=""/54, 0x36, 0xcf9}, 0x7fff}, {{&(0x7f0000000740)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000840)=""/248, 0xf8}], 0x2, &(0x7f0000000980)=""/88, 0x58, 0x20}, 0x800}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/161, 0xa1}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/7, 0x7}, {&(0x7f0000002b00)=""/203, 0xcb}, {&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/117, 0x75}], 0x7, 0x0, 0x0, 0x3f}, 0xff}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002dc0)=""/81, 0x51}], 0x1, &(0x7f0000002e80)=""/116, 0x74, 0xffffffffffffff26}, 0x7fffffff}, {{&(0x7f0000002f00)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f80)=""/38, 0x26}, {&(0x7f0000002fc0)=""/211, 0xd3}, {&(0x7f00000030c0)=""/188, 0xbc}], 0x3, &(0x7f00000031c0)=""/255, 0xff, 0x3}, 0x97}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/96, 0x60}], 0x1, &(0x7f0000003380)=""/220, 0xdc, 0x8}, 0x8000}, {{&(0x7f0000003480)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003500)=""/111, 0x6f}, {&(0x7f0000003580)=""/224, 0xe0}, {&(0x7f0000003680)=""/36, 0x24}, {&(0x7f00000036c0)=""/150, 0x96}, {&(0x7f0000003780)=""/179, 0xb3}], 0x5, &(0x7f00000038c0)=""/83, 0x53, 0x3c}, 0x7ff}], 0x7, 0x20, &(0x7f0000003b00)={0x77359400}) r4 = accept$alg(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000003b40)={0x2, 0x4e24}, 0x10) connect$inet(r3, &(0x7f0000003b80)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) recvmsg(r3, &(0x7f0000005240)={&(0x7f0000003bc0)=@can={0x0, 0x0}, 0x80, &(0x7f0000005080)=[{&(0x7f0000003c40)=""/105, 0x69}, {&(0x7f0000003cc0)=""/83, 0x53}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/73, 0x49}, {&(0x7f0000004dc0)=""/93, 0x5d}, {&(0x7f0000004e40)=""/74, 0x4a}, {&(0x7f0000004ec0)=""/6, 0x6}, {&(0x7f0000004f00)=""/173, 0xad}, {&(0x7f0000004fc0)=""/178, 0xb2}], 0x9, &(0x7f0000005140)=""/227, 0xe3, 0x4}, 0x10040) writev(r4, &(0x7f0000005500)=[{&(0x7f0000005280)="15b27264c150d5ee73cbed833f3d7b8c05c0479f20ad24a5298d5179ee3707620af2cddd1db3edf7b2c26f3cd470de45025409", 0x33}, {&(0x7f00000052c0)="b68ba2824997a003fa496bb20197c0027dac83dbfcc195adeda7339fe5dbcdac9983b38d6da20549c6e3daa8b3b92c12562e26b4001b27cd4bc54b3c838d39363b0406739b62f36751a3867eb6607f2685f54745db83167f8b8ba52f32", 0x5d}, {&(0x7f0000005340)}, {&(0x7f0000005380)="f5ec0dc1a11d0f19e46640bfe6254b99f217580ec8a322e4d03067f84d7d55050dfda6e0323271a14957a18e1a71ead6d0444e4350bb2fb48a1d6479ede537c0c7fa545e2f96a0f20a478445f3ac82fff689c4e94b97d2fed52b406074060b1842968adbbcfb7e61385488d8d9b37e7d15eea44b95ab8d90be703b07e6b2cb", 0x7f}, {&(0x7f0000005400)="19127ec1b4519b1a731abda526283321697d49f629d5203799edf74a8910e8da732eb20fcfb1b72b099db9370df249ec92467459a640f0090bde07f35936bfd15fe35ce522f2cebdf9086d9ffe24af6794eec4458725e6640ea13cf341e42ac083894dc9", 0x64}, {&(0x7f0000005480)="26adbddd93db7af910018770c4d3061417e972da3b04632151b1414ea9a75ea08701ed6537d8519ec8a61d1f7eab6939b0c1355da3338ef46bd2171d00972b860df98a66", 0x44}], 0x6) r6 = syz_open_dev$tun(&(0x7f0000005580)='/dev/net/tun\x00', 0x0, 0x400) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000055c0)=r5) setreuid(r1, r0) r7 = gettid() setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000005600), 0x10) io_setup(0x0, &(0x7f0000005640)=0x0) io_submit(r8, 0x1, &(0x7f0000005700)=[&(0x7f00000056c0)={0x0, 0x0, 0x0, 0xf, 0x7fffffff, r6, &(0x7f0000005680)="1fb47d53e16e5ce757", 0x9, 0x7fff, 0x0, 0x0, r2}]) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000005740)={@in6={{0xa, 0x4e23, 0xff59, @remote={0xfe, 0x80, [], 0xbb}, 0xff}}, 0x8, 0x3f, 0x2, "2c496f016f1a10f5d1227346f9899e3a226baf12e7b9393084b384d10764d6005d839b7371fb07e1ced58d3d103e544c47bba0d3410585ea217b348ac283f4301d8a6ae916d046e42292861839286476"}, 0xd8) capget(&(0x7f0000005840)={0x19980330, r7}, &(0x7f0000005880)={0x5, 0xb896, 0x5, 0x7, 0x5, 0x9}) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000058c0)='/dev/vga_arbiter\x00', 0x8002, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000005940)={0x4, &(0x7f0000005900)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r9, 0xc0406429, &(0x7f0000005a80)={r10, 0x2, &(0x7f0000005980)=[0x8, 0xb38], &(0x7f00000059c0)=[0x2, 0x80, 0xff, 0x200], 0x24, 0x1, 0x7, &(0x7f0000005a00)=[0x4], &(0x7f0000005a40)=[0x1f, 0x9, 0x8, 0x1, 0x3]}) prctl$intptr(0x24, 0xbb29) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000005ac0), &(0x7f0000005b00)=0x40) r11 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$VT_WAITACTIVE(r9, 0x5607) ioctl$TCGETS(r11, 0x5401, &(0x7f0000005b40)) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005bc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000005c80)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x40600080}, 0xc, &(0x7f0000005c40)={&(0x7f0000005c00)={0x24, r12, 0x520, 0x70bd2a, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$TCGETS(r9, 0x5401, &(0x7f0000005cc0)) 2018/04/15 10:49:02 executing program 5: 2018/04/15 10:49:02 executing program 4: 2018/04/15 10:49:02 executing program 6: syzkaller login: [ 44.800323] ip (3747) used greatest stack depth: 54688 bytes left [ 45.058417] ip (3773) used greatest stack depth: 54672 bytes left [ 46.102501] ip (3876) used greatest stack depth: 54544 bytes left [ 46.391663] ip (3901) used greatest stack depth: 54200 bytes left [ 46.695935] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.702461] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.736609] device bridge_slave_0 entered promiscuous mode [ 46.757203] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.763709] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.773855] device bridge_slave_0 entered promiscuous mode [ 46.843090] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.849598] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.886931] device bridge_slave_0 entered promiscuous mode [ 46.923139] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.929614] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.967082] device bridge_slave_1 entered promiscuous mode [ 46.983141] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.989607] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.006927] device bridge_slave_1 entered promiscuous mode [ 47.020065] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.026549] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.050095] device bridge_slave_0 entered promiscuous mode [ 47.077012] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.083520] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.091679] device bridge_slave_1 entered promiscuous mode [ 47.108934] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.115408] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.142367] device bridge_slave_0 entered promiscuous mode [ 47.155304] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.161761] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.182150] device bridge_slave_0 entered promiscuous mode [ 47.189897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.199567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.211843] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.218284] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.252490] device bridge_slave_0 entered promiscuous mode [ 47.271139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.279318] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.285788] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.317107] device bridge_slave_1 entered promiscuous mode [ 47.325227] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.331684] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.365120] device bridge_slave_0 entered promiscuous mode [ 47.384432] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.390957] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.402370] device bridge_slave_1 entered promiscuous mode [ 47.411525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.422731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.429210] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.437473] device bridge_slave_1 entered promiscuous mode [ 47.443976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.452296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.462612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.473691] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.480165] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.542092] device bridge_slave_1 entered promiscuous mode [ 47.609861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.620274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.637481] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.643989] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.659218] device bridge_slave_1 entered promiscuous mode [ 47.698884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.769628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.849521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.864920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.914859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.987790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.136418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.287836] ip (4035) used greatest stack depth: 53656 bytes left [ 48.372314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.453136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.463448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.577085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.584553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.652999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.663708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.807496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.837931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.906828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.991162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.045655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.130941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.200501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.211162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.427471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.465159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.685482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.696938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.712895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.822268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.899422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.912811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.920100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.928526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.968250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.008776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.043224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.133486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.141145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.159343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.184512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.191968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.226766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.252234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.259510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.270313] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.280737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.298218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.319604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.341619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.365198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.374429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.387971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.409246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.416288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.443783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.471513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.480084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.487697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.518120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.557000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.567874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.600424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.627302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.638185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.645407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.664888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.687292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.704714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.711915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.738568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.836490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.843724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.858013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.890427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.898857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.923794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.937996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.949960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.964165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.000852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.045101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.082796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.121100] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.128570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.140269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.165428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.199474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.234342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.735302] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.741834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.748747] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.755216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.794590] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.806376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.866898] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.873407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.880328] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.886810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.973375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.025747] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.032246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.039151] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.045627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.107301] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.120275] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.126790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.133685] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.140177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.181565] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.194488] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.200978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.207828] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.214316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.235704] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.428296] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.434821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.441715] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.448201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.468095] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.481223] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.487695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.494516] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.500981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.523785] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.538490] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.544987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.551876] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.558359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.570197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.856158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.873211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.910752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.944661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.956183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.963812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.971783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.351181] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.372239] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.383711] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.651427] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.738401] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.939334] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.964531] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.158516] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.165123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.177210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.199103] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.211811] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.218790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.253817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.274401] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.294592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.314731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.475199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.481514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.491336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.559227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.565513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.582878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.753420] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.759728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.774786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.825176] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.840715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.849750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.028380] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.034722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.046633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.035749] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) 2018/04/15 10:49:29 executing program 2: 2018/04/15 10:49:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) write(r0, &(0x7f0000a34f31)="1f0000001000072c27080000000000fc030000040800020004c65847ecc676", 0x1f) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 2018/04/15 10:49:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x21) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)='\x00', 0x1}, {&(0x7f0000000500)="3d775e329f817688cf04d31d77e1b28d08bbf41d03f4551ee0b7c31962d076cdf27de1dc0ec2e7da12650c66d08947d4fe04c895471ea325774cda644da65e0f81220cc3263f83772f77be44af", 0x4d}], 0x2, &(0x7f0000000900)=[{0x60, 0x10f, 0x14d, "72a10595b4a7a77d097b760cceeeb4dcba7d669191d542d28aad1be024147389b059add5d3963ab45796a7adc06263448de0f7fc87c6fe328d57012f196977b3ca9f39cd8cb03e70b8c1"}], 0x60, 0x40}, 0x24004040) 2018/04/15 10:49:29 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/204, 0xfffffffffffffdf5, 0x0, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x46e2) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 2018/04/15 10:49:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000013000501000000000000000000000000", @ANYBLOB="00000000000000000c002b00080003004b000000"], 0x2}, 0x1}, 0x0) 2018/04/15 10:49:29 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000980)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)=ANY=[@ANYBLOB="180000002d00ff0a000000000000000004000000"], 0x1}, 0x1}, 0x0) 2018/04/15 10:49:29 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) r1 = geteuid() setreuid(r0, r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r2, &(0x7f0000003940)=[{{&(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/87, 0x57}, {&(0x7f0000000580)=""/205, 0xcd}], 0x6, &(0x7f0000000700)=""/54, 0x36, 0xcf9}, 0x7fff}, {{&(0x7f0000000740)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000840)=""/248, 0xf8}], 0x2, &(0x7f0000000980)=""/88, 0x58, 0x20}, 0x800}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/161, 0xa1}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/7, 0x7}, {&(0x7f0000002b00)=""/203, 0xcb}, {&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/117, 0x75}], 0x7, 0x0, 0x0, 0x3f}, 0xff}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002dc0)=""/81, 0x51}], 0x1, &(0x7f0000002e80)=""/116, 0x74, 0xffffffffffffff26}, 0x7fffffff}, {{&(0x7f0000002f00)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f80)=""/38, 0x26}, {&(0x7f0000002fc0)=""/211, 0xd3}, {&(0x7f00000030c0)=""/188, 0xbc}], 0x3, &(0x7f00000031c0)=""/255, 0xff, 0x3}, 0x97}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/96, 0x60}], 0x1, &(0x7f0000003380)=""/220, 0xdc, 0x8}, 0x8000}, {{&(0x7f0000003480)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003500)=""/111, 0x6f}, {&(0x7f0000003580)=""/224, 0xe0}, {&(0x7f0000003680)=""/36, 0x24}, {&(0x7f00000036c0)=""/150, 0x96}, {&(0x7f0000003780)=""/179, 0xb3}], 0x5, &(0x7f00000038c0)=""/83, 0x53, 0x3c}, 0x7ff}], 0x7, 0x20, &(0x7f0000003b00)={0x77359400}) r4 = accept$alg(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000003b40)={0x2, 0x4e24}, 0x10) connect$inet(r3, &(0x7f0000003b80)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) recvmsg(r3, &(0x7f0000005240)={&(0x7f0000003bc0)=@can={0x0, 0x0}, 0x80, &(0x7f0000005080)=[{&(0x7f0000003c40)=""/105, 0x69}, {&(0x7f0000003cc0)=""/83, 0x53}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/73, 0x49}, {&(0x7f0000004dc0)=""/93, 0x5d}, {&(0x7f0000004e40)=""/74, 0x4a}, {&(0x7f0000004ec0)=""/6, 0x6}, {&(0x7f0000004f00)=""/173, 0xad}, {&(0x7f0000004fc0)=""/178, 0xb2}], 0x9, &(0x7f0000005140)=""/227, 0xe3, 0x4}, 0x10040) writev(r4, &(0x7f0000005500)=[{&(0x7f0000005280)="15b27264c150d5ee73cbed833f3d7b8c05c0479f20ad24a5298d5179ee3707620af2cddd1db3edf7b2c26f3cd470de45025409", 0x33}, {&(0x7f00000052c0)="b68ba2824997a003fa496bb20197c0027dac83dbfcc195adeda7339fe5dbcdac9983b38d6da20549c6e3daa8b3b92c12562e26b4001b27cd4bc54b3c838d39363b0406739b62f36751a3867eb6607f2685f54745db83167f8b8ba52f32", 0x5d}, {&(0x7f0000005340)}, {&(0x7f0000005380)="f5ec0dc1a11d0f19e46640bfe6254b99f217580ec8a322e4d03067f84d7d55050dfda6e0323271a14957a18e1a71ead6d0444e4350bb2fb48a1d6479ede537c0c7fa545e2f96a0f20a478445f3ac82fff689c4e94b97d2fed52b406074060b1842968adbbcfb7e61385488d8d9b37e7d15eea44b95ab8d90be703b07e6b2cb", 0x7f}, {&(0x7f0000005400)="19127ec1b4519b1a731abda526283321697d49f629d5203799edf74a8910e8da732eb20fcfb1b72b099db9370df249ec92467459a640f0090bde07f35936bfd15fe35ce522f2cebdf9086d9ffe24af6794eec4458725e6640ea13cf341e42ac083894dc9", 0x64}, {&(0x7f0000005480)="26adbddd93db7af910018770c4d3061417e972da3b04632151b1414ea9a75ea08701ed6537d8519ec8a61d1f7eab6939b0c1355da3338ef46bd2171d00972b860df98a66", 0x44}], 0x6) r6 = syz_open_dev$tun(&(0x7f0000005580)='/dev/net/tun\x00', 0x0, 0x400) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000055c0)=r5) setreuid(r1, r0) r7 = gettid() setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000005600), 0x10) io_setup(0x0, &(0x7f0000005640)=0x0) io_submit(r8, 0x1, &(0x7f0000005700)=[&(0x7f00000056c0)={0x0, 0x0, 0x0, 0xf, 0x7fffffff, r6, &(0x7f0000005680)="1fb47d53e16e5ce757", 0x9, 0x7fff, 0x0, 0x0, r2}]) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000005740)={@in6={{0xa, 0x4e23, 0xff59, @remote={0xfe, 0x80, [], 0xbb}, 0xff}}, 0x8, 0x3f, 0x2, "2c496f016f1a10f5d1227346f9899e3a226baf12e7b9393084b384d10764d6005d839b7371fb07e1ced58d3d103e544c47bba0d3410585ea217b348ac283f4301d8a6ae916d046e42292861839286476"}, 0xd8) capget(&(0x7f0000005840)={0x19980330, r7}, &(0x7f0000005880)={0x5, 0xb896, 0x5, 0x7, 0x5, 0x9}) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000058c0)='/dev/vga_arbiter\x00', 0x8002, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000005940)={0x4, &(0x7f0000005900)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r9, 0xc0406429, &(0x7f0000005a80)={r10, 0x2, &(0x7f0000005980)=[0x8, 0xb38], &(0x7f00000059c0)=[0x2, 0x80, 0xff, 0x200], 0x24, 0x1, 0x7, &(0x7f0000005a00)=[0x4], &(0x7f0000005a40)=[0x1f, 0x9, 0x8, 0x1, 0x3]}) prctl$intptr(0x24, 0xbb29) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000005ac0), &(0x7f0000005b00)=0x40) r11 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$VT_WAITACTIVE(r9, 0x5607) ioctl$TCGETS(r11, 0x5401, &(0x7f0000005b40)) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005bc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000005c80)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x40600080}, 0xc, &(0x7f0000005c40)={&(0x7f0000005c00)={0x24, r12, 0x520, 0x70bd2a, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$TCGETS(r9, 0x5401, &(0x7f0000005cc0)) 2018/04/15 10:49:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) delete_module(&(0x7f0000000040)='cbc(cast6)\x00', 0xa00) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="bb4b4a743a37e42c4c8c23661e4eab6e8c", 0x11}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/15 10:49:29 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x28040, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x3) llistxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/8, 0x8) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x8001, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) r2 = accept(r0, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000200), 0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f000047d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) getpeername$unix(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f000000ae80)}, 0x0) [ 69.751010] raw_sendmsg: syz-executor1 forgot to set AF_INET. Fix it! [ 69.777071] ================================================================== [ 69.784485] BUG: KMSAN: uninit-value in dccp_invalid_packet+0x3b8/0xf50 [ 69.791247] CPU: 0 PID: 5784 Comm: syz-executor1 Not tainted 4.16.0+ #83 [ 69.798082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.807434] Call Trace: [ 69.810015] [ 69.812167] dump_stack+0x185/0x1d0 [ 69.815798] ? dccp_invalid_packet+0x3b8/0xf50 [ 69.820377] kmsan_report+0x142/0x240 [ 69.824180] __msan_warning_32+0x6c/0xb0 [ 69.828245] dccp_invalid_packet+0x3b8/0xf50 [ 69.832651] ? ip_local_deliver_finish+0x6ed/0xd40 [ 69.837585] ? ip_local_deliver_finish+0x6ed/0xd40 [ 69.842513] dccp_v4_rcv+0xf7/0x2630 [ 69.846227] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 69.851593] ? raw_local_deliver+0x1462/0x1470 [ 69.856189] ? ip_local_deliver_finish+0x4a5/0xd40 [ 69.861121] ? local_bh_enable+0x40/0x40 [ 69.865182] ? local_bh_enable+0x40/0x40 [ 69.869242] ip_local_deliver_finish+0x6ed/0xd40 [ 69.874006] ip_local_deliver+0x43c/0x4e0 [ 69.878159] ? ip_local_deliver+0x4e0/0x4e0 [ 69.882484] ? ip_call_ra_chain+0x7b0/0x7b0 [ 69.886806] ip_rcv_finish+0x1253/0x16d0 [ 69.890871] ip_rcv+0x119d/0x16f0 [ 69.894323] ? ip_rcv+0x16f0/0x16f0 [ 69.897956] __netif_receive_skb_core+0x47cf/0x4a80 [ 69.902973] ? try_to_wake_up+0x1ab2/0x20a0 [ 69.907309] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 69.913111] ? ip_local_deliver_finish+0xd40/0xd40 [ 69.918046] process_backlog+0x62d/0xe20 [ 69.922120] ? rps_trigger_softirq+0x2f0/0x2f0 [ 69.926709] net_rx_action+0x7c1/0x1a70 [ 69.930705] ? net_tx_action+0xab0/0xab0 [ 69.934770] __do_softirq+0x56d/0x93d [ 69.938579] do_softirq_own_stack+0x2a/0x40 [ 69.942893] [ 69.945139] __local_bh_enable_ip+0x114/0x140 [ 69.949632] local_bh_enable+0x36/0x40 [ 69.953526] ip_finish_output2+0x124e/0x1380 [ 69.957945] ip_finish_output+0xcb0/0xff0 [ 69.962100] ip_output+0x502/0x5c0 [ 69.965641] ? ip_mc_finish_output+0x3b0/0x3b0 [ 69.970227] ? ip_finish_output+0xff0/0xff0 [ 69.974555] ip_send_skb+0x5f3/0x820 [ 69.978272] ? __ip_local_out+0x5b0/0x5b0 [ 69.982425] ip_push_pending_frames+0x105/0x170 [ 69.987094] raw_sendmsg+0x2960/0x3ed0 [ 69.990990] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 69.996356] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.001036] ? compat_raw_ioctl+0x100/0x100 [ 70.005366] inet_sendmsg+0x48d/0x740 [ 70.009164] ? security_socket_sendmsg+0x9e/0x210 [ 70.014006] ? inet_getname+0x500/0x500 [ 70.017981] ___sys_sendmsg+0xec0/0x1310 [ 70.022048] ? __fdget+0x4e/0x60 [ 70.025430] SYSC_sendmsg+0x2a3/0x3d0 [ 70.029233] SyS_sendmsg+0x54/0x80 [ 70.032770] do_syscall_64+0x309/0x430 [ 70.036662] ? ___sys_sendmsg+0x1310/0x1310 [ 70.040987] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.046168] RIP: 0033:0x455319 [ 70.049352] RSP: 002b:00007f354e849c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.057060] RAX: ffffffffffffffda RBX: 00007f354e84a6d4 RCX: 0000000000455319 [ 70.064323] RDX: 0000000024004040 RSI: 0000000020000380 RDI: 0000000000000013 [ 70.071600] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.078870] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.086140] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 70.093411] [ 70.095027] Uninit was stored to memory at: [ 70.099352] kmsan_internal_chain_origin+0x12b/0x210 [ 70.104457] kmsan_memcpy_origins+0x11d/0x170 [ 70.108957] __msan_memcpy+0x19f/0x1f0 [ 70.112849] skb_copy_bits+0x63a/0xdb0 [ 70.116743] __pskb_pull_tail+0x483/0x22e0 [ 70.120978] dccp_invalid_packet+0x352/0xf50 [ 70.125387] dccp_v4_rcv+0xf7/0x2630 [ 70.129106] ip_local_deliver_finish+0x6ed/0xd40 [ 70.133864] ip_local_deliver+0x43c/0x4e0 [ 70.138013] ip_rcv_finish+0x1253/0x16d0 [ 70.142075] ip_rcv+0x119d/0x16f0 [ 70.145526] __netif_receive_skb_core+0x47cf/0x4a80 [ 70.150542] process_backlog+0x62d/0xe20 [ 70.154597] net_rx_action+0x7c1/0x1a70 [ 70.158569] __do_softirq+0x56d/0x93d [ 70.162353] Uninit was created at: [ 70.165889] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 70.170903] kmsan_alloc_page+0x82/0xe0 [ 70.174878] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 70.180279] alloc_pages_current+0x6b5/0x970 [ 70.184689] skb_page_frag_refill+0x3ba/0x5e0 [ 70.189184] sk_page_frag_refill+0xa4/0x340 [ 70.193501] __ip_append_data+0x107e/0x3d10 [ 70.197820] ip_append_data+0x2fb/0x440 [ 70.201789] raw_sendmsg+0x287b/0x3ed0 [ 70.205667] inet_sendmsg+0x48d/0x740 [ 70.209469] ___sys_sendmsg+0xec0/0x1310 [ 70.213528] SYSC_sendmsg+0x2a3/0x3d0 [ 70.217327] SyS_sendmsg+0x54/0x80 [ 70.220868] do_syscall_64+0x309/0x430 [ 70.224754] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.229931] ================================================================== [ 70.237277] Disabling lock debugging due to kernel taint [ 70.242724] Kernel panic - not syncing: panic_on_warn set ... [ 70.242724] [ 70.250091] CPU: 0 PID: 5784 Comm: syz-executor1 Tainted: G B 4.16.0+ #83 [ 70.258225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.267571] Call Trace: [ 70.270148] [ 70.272300] dump_stack+0x185/0x1d0 [ 70.275928] panic+0x39d/0x940 [ 70.279137] ? dccp_invalid_packet+0x3b8/0xf50 [ 70.283733] kmsan_report+0x238/0x240 [ 70.287534] __msan_warning_32+0x6c/0xb0 [ 70.291599] dccp_invalid_packet+0x3b8/0xf50 [ 70.296010] ? ip_local_deliver_finish+0x6ed/0xd40 [ 70.300949] ? ip_local_deliver_finish+0x6ed/0xd40 [ 70.305880] dccp_v4_rcv+0xf7/0x2630 [ 70.309600] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 70.314968] ? raw_local_deliver+0x1462/0x1470 [ 70.319559] ? ip_local_deliver_finish+0x4a5/0xd40 [ 70.324484] ? local_bh_enable+0x40/0x40 [ 70.328545] ? local_bh_enable+0x40/0x40 [ 70.332607] ip_local_deliver_finish+0x6ed/0xd40 [ 70.337369] ip_local_deliver+0x43c/0x4e0 [ 70.341519] ? ip_local_deliver+0x4e0/0x4e0 [ 70.345847] ? ip_call_ra_chain+0x7b0/0x7b0 [ 70.350168] ip_rcv_finish+0x1253/0x16d0 [ 70.354237] ip_rcv+0x119d/0x16f0 [ 70.357696] ? ip_rcv+0x16f0/0x16f0 [ 70.361326] __netif_receive_skb_core+0x47cf/0x4a80 [ 70.366337] ? try_to_wake_up+0x1ab2/0x20a0 [ 70.370663] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 70.376470] ? ip_local_deliver_finish+0xd40/0xd40 [ 70.381402] process_backlog+0x62d/0xe20 [ 70.385471] ? rps_trigger_softirq+0x2f0/0x2f0 [ 70.390051] net_rx_action+0x7c1/0x1a70 [ 70.394036] ? net_tx_action+0xab0/0xab0 [ 70.398101] __do_softirq+0x56d/0x93d [ 70.401906] do_softirq_own_stack+0x2a/0x40 [ 70.406213] [ 70.408456] __local_bh_enable_ip+0x114/0x140 [ 70.412954] local_bh_enable+0x36/0x40 [ 70.416842] ip_finish_output2+0x124e/0x1380 [ 70.421258] ip_finish_output+0xcb0/0xff0 [ 70.425409] ip_output+0x502/0x5c0 [ 70.428949] ? ip_mc_finish_output+0x3b0/0x3b0 [ 70.433537] ? ip_finish_output+0xff0/0xff0 [ 70.437864] ip_send_skb+0x5f3/0x820 [ 70.441577] ? __ip_local_out+0x5b0/0x5b0 [ 70.445731] ip_push_pending_frames+0x105/0x170 [ 70.450399] raw_sendmsg+0x2960/0x3ed0 [ 70.454296] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 70.459668] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.464353] ? compat_raw_ioctl+0x100/0x100 [ 70.468676] inet_sendmsg+0x48d/0x740 [ 70.472481] ? security_socket_sendmsg+0x9e/0x210 [ 70.477328] ? inet_getname+0x500/0x500 [ 70.481302] ___sys_sendmsg+0xec0/0x1310 [ 70.485364] ? __fdget+0x4e/0x60 [ 70.488744] SYSC_sendmsg+0x2a3/0x3d0 [ 70.492554] SyS_sendmsg+0x54/0x80 [ 70.496094] do_syscall_64+0x309/0x430 [ 70.499987] ? ___sys_sendmsg+0x1310/0x1310 [ 70.504312] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.509496] RIP: 0033:0x455319 [ 70.512688] RSP: 002b:00007f354e849c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.520400] RAX: ffffffffffffffda RBX: 00007f354e84a6d4 RCX: 0000000000455319 [ 70.527675] RDX: 0000000024004040 RSI: 0000000020000380 RDI: 0000000000000013 [ 70.534946] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.542213] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.549480] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 70.557208] Dumping ftrace buffer: [ 70.560732] (ftrace buffer empty) [ 70.564415] Kernel Offset: disabled [ 70.568016] Rebooting in 86400 seconds..