INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. 2018/04/06 22:39:52 fuzzer started 2018/04/06 22:39:53 dialing manager at 10.128.0.26:38639 2018/04/06 22:39:59 kcov=true, comps=false 2018/04/06 22:40:01 executing program 0: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f000051d000)='ns/user\x00') ioctl$VT_RELDISP(r0, 0xb703) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) 2018/04/06 22:40:01 executing program 1: prctl$getreaper(0x25, &(0x7f0000000000)) 2018/04/06 22:40:01 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) 2018/04/06 22:40:01 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000fffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3b4c1b4e2bf501fb1bb949869c2984d914d9f04005e66cd4dd3050bc1700612dbc3080c91745fa1585da65f42127513b6ee57cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432"], 0x83}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x3, 0x0, "06d4019601aafe74e396f8f9840f4d2b01b6404426281598a797453a0f8947b6f13e51d863f37d68118821db9483a962588ab20dad23d2df166efcf6b6b40115defd3d854878df3b3d94e5a24dbcffcc"}, 0xd8) connect$inet6(r0, &(0x7f0000070fe4)={0xa}, 0x1c) 2018/04/06 22:40:01 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) dup2(r0, r1) 2018/04/06 22:40:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x800000000000011, 0x800000002, 0x81) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000015c0), &(0x7f0000001600)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 2018/04/06 22:40:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000001f40)={&(0x7f0000000b00)=@can={0x1d}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000b80)="ed8021d88cd026607d63ac5bc0276b7b6d8f6abe", 0x14}, {&(0x7f0000001d40)="e2de3f3bce2a3a73504d8ec33912f3c9a40fbebfe049f547a2588e630c1d9b07caa510126e8cc12fa37d5749d0e78db6846c6a36f23ff9c1380ae767ec0f1ecf732c0baf965b0bf6d462a69a1a8f7e43a8379e4c027290ca97a2ab5691b8552dee97e2298c59e79546dc2d72f8fee89b4362a7bc75e28b7cd3a9a46d67184f8bc2c906986b6fc0baec7aa4e007c298072eaca702ea23fb6c17ec009340d3f6b71e8e64ce2877e2d3874cdea1239a2458a18ab91154662c443927dd5228bb218ddf6f673d888c831ea9ce6c9274dfa8129b68fbe27767453e46b3fcae9eb4368b36639f21bfa6675edbaf3bcd", 0xec}], 0x2, &(0x7f0000001f00)}, 0x0) 2018/04/06 22:40:01 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) syzkaller login: [ 41.017586] ip (3774) used greatest stack depth: 54672 bytes left [ 41.203764] ip (3786) used greatest stack depth: 54408 bytes left [ 41.542727] ip (3821) used greatest stack depth: 54312 bytes left [ 42.616350] ip (3921) used greatest stack depth: 53960 bytes left [ 44.445694] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.570070] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.597667] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.655905] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.726085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.749432] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.788659] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.825950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.239319] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.437817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.490249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.535860] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.649707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.677524] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.711819] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.907207] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.982166] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.988441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.998922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.213133] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.219415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.232722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.254205] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.260449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.272681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.308652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.331367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.358961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.499630] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.506234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.514712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.540211] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.548223] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.557534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.578732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.614813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.647676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.693893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.700142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.724302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/06 22:40:18 executing program 0: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f000051d000)='ns/user\x00') ioctl$VT_RELDISP(r0, 0xb703) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) 2018/04/06 22:40:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000f8e000), &(0x7f00000001c0)=0x4) 2018/04/06 22:40:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='limits\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x47) 2018/04/06 22:40:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) 2018/04/06 22:40:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002800)={&(0x7f0000000240)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000002580), 0x0, &(0x7f0000002780)=[@sndrcv={0x30, 0x84, 0x1}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000}}], 0x60}, 0x0) 2018/04/06 22:40:18 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/04/06 22:40:18 executing program 5: accept4$unix(0xffffffffffffffff, &(0x7f0000fccfe4), &(0x7f0000fcc000)=0x1c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000fcbfd4)={0x1, 0x6, 0x1, 0xfffffffffffffff7}, 0xe4) 2018/04/06 22:40:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 2018/04/06 22:40:18 executing program 5: accept4$unix(0xffffffffffffffff, &(0x7f0000fccfe4), &(0x7f0000fcc000)=0x1c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000fcbfd4)={0x1, 0x6, 0x1, 0xfffffffffffffff7}, 0xe4) 2018/04/06 22:40:19 executing program 0: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f000051d000)='ns/user\x00') ioctl$VT_RELDISP(r0, 0xb703) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) 2018/04/06 22:40:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x3, 0x84) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000100)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/243, 0xf3}, 0x41) 2018/04/06 22:40:19 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 2018/04/06 22:40:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) 2018/04/06 22:40:19 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/04/06 22:40:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 2018/04/06 22:40:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x5, 0x0, "d898760a608655cdd122b7aae6777de2b6d61f3426116a044800a28586f0363b30b2e13b4dde1df995d151c2a717f5d0469e5fd4d3cae6eb6715077452ed8575a6d8b6805619337678a5377f2cc5e781"}, 0xd8) r1 = dup(r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x2, 0x0, "079a91bf84f4f94d6f03f75225afcbe1a5802633f3dd91ee26027305a71b8bbb8ad087bf2af2c435b395839bd5b6b8d6043cdc91395a84b81e9096ad1d2b692f1acf842fffd4bbf39f0614bf8fa9a0b9"}, 0xd8) 2018/04/06 22:40:19 executing program 5: accept4$unix(0xffffffffffffffff, &(0x7f0000fccfe4), &(0x7f0000fcc000)=0x1c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000fcbfd4)={0x1, 0x6, 0x1, 0xfffffffffffffff7}, 0xe4) 2018/04/06 22:40:19 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/04/06 22:40:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 2018/04/06 22:40:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) 2018/04/06 22:40:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x5, 0x0, "d898760a608655cdd122b7aae6777de2b6d61f3426116a044800a28586f0363b30b2e13b4dde1df995d151c2a717f5d0469e5fd4d3cae6eb6715077452ed8575a6d8b6805619337678a5377f2cc5e781"}, 0xd8) r1 = dup(r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x2, 0x0, "079a91bf84f4f94d6f03f75225afcbe1a5802633f3dd91ee26027305a71b8bbb8ad087bf2af2c435b395839bd5b6b8d6043cdc91395a84b81e9096ad1d2b692f1acf842fffd4bbf39f0614bf8fa9a0b9"}, 0xd8) 2018/04/06 22:40:19 executing program 0: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f000051d000)='ns/user\x00') ioctl$VT_RELDISP(r0, 0xb703) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) 2018/04/06 22:40:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001480)}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)="d7", 0x1}], 0x1, &(0x7f0000000180)=[{0xa8, 0x13f, 0x10000000000, "d84157e174be6e6deb92bf9cc0630837c07b22bff34690c919ad5039efdbfc4741342230b3d274dd0862794205fa33127834b6524ed2065f22a179451f2ac71d0f0ea650e60ac3048eb683831e649f9a98a4a087d0132716b2086dc86a8736d44d45a48b7e4f5303e2d136be9441c1d9622c7fa3cf57124d364277415d300ff9a3500905c482eaa1479ac4891c5104be6574fc6f397dfe1d"}, {0x90, 0x119, 0x3c34400c, "ed7d41dee2300e461d73502bacc6eafb6fdd0dd3af1adf11103b705432118a26d622ea9785887c7524d77dc2353b72f86b693f77ec160432f2b1453e2b48fbd06a6a6bfaa5eae10cd0278e5e3e37d2db979af22877ed857da9494abb286cf3393002b8c80d2ccc534c0d7576a3b63dcb8e2438ae5492e37e61dec04cbe22"}], 0x138}}], 0x2, 0x40) 2018/04/06 22:40:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/06 22:40:19 executing program 5: accept4$unix(0xffffffffffffffff, &(0x7f0000fccfe4), &(0x7f0000fcc000)=0x1c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000fcbfd4)={0x1, 0x6, 0x1, 0xfffffffffffffff7}, 0xe4) 2018/04/06 22:40:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x5, 0x0, "d898760a608655cdd122b7aae6777de2b6d61f3426116a044800a28586f0363b30b2e13b4dde1df995d151c2a717f5d0469e5fd4d3cae6eb6715077452ed8575a6d8b6805619337678a5377f2cc5e781"}, 0xd8) r1 = dup(r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x2, 0x0, "079a91bf84f4f94d6f03f75225afcbe1a5802633f3dd91ee26027305a71b8bbb8ad087bf2af2c435b395839bd5b6b8d6043cdc91395a84b81e9096ad1d2b692f1acf842fffd4bbf39f0614bf8fa9a0b9"}, 0xd8) 2018/04/06 22:40:19 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r1, &(0x7f0000000700), 0x20000001, 0x0) 2018/04/06 22:40:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 2018/04/06 22:40:19 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x3a) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 2018/04/06 22:40:19 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) 2018/04/06 22:40:19 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000003000)="6574305e00000080000000", 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000004000)=0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = dup2(r3, r0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000001f40)=@ax25, 0x80, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/74, 0x4a}}], 0x1, 0x0, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)) close(r2) 2018/04/06 22:40:20 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 22:40:20 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) 2018/04/06 22:40:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x5, 0x0, "d898760a608655cdd122b7aae6777de2b6d61f3426116a044800a28586f0363b30b2e13b4dde1df995d151c2a717f5d0469e5fd4d3cae6eb6715077452ed8575a6d8b6805619337678a5377f2cc5e781"}, 0xd8) r1 = dup(r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x2, 0x0, "079a91bf84f4f94d6f03f75225afcbe1a5802633f3dd91ee26027305a71b8bbb8ad087bf2af2c435b395839bd5b6b8d6043cdc91395a84b81e9096ad1d2b692f1acf842fffd4bbf39f0614bf8fa9a0b9"}, 0xd8) 2018/04/06 22:40:20 executing program 3: personality(0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/06 22:40:20 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r0, 0x0, 0x4) 2018/04/06 22:40:20 executing program 7: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo\x00') exit(0x0) mknodat(r1, &(0x7f0000001100)='./file0\x00', 0x0, 0x0) 2018/04/06 22:40:20 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000003000)="6574305e00000080000000", 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000004000)=0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = dup2(r3, r0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000001f40)=@ax25, 0x80, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/74, 0x4a}}], 0x1, 0x0, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)) close(r2) 2018/04/06 22:40:20 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}, &(0x7f0000000040)) 2018/04/06 22:40:20 executing program 3: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/250, 0x2a) getdents64(r0, &(0x7f0000000ac0)=""/4096, 0x1000) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000240), &(0x7f0000000280)) lchown(&(0x7f0000000000)='./file1\x00', r1, r2) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/06 22:40:20 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x143100, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)) 2018/04/06 22:40:20 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000001100)="0000000022f93c70740fc0f981b0b7b4353566adf786395f5fff15ec69d6e56d388ff778b9c7b3c92e24e967d825cfe49c51984bbe70e8d8061a442d9afdfa340146d8") exit(0x0) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) 2018/04/06 22:40:20 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000004200030207fffd946fa283bc0aeee6d87986c497271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/06 22:40:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00008c5fe4)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000000)={0x14, 0x7, 0x1, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/04/06 22:40:21 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000ff6fe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e27, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) 2018/04/06 22:40:21 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg(r0, &(0x7f0000003180)=[{{&(0x7f0000002d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x32, &(0x7f0000003040), 0x0, &(0x7f0000003080)}}], 0x1, 0x0) 2018/04/06 22:40:21 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000001c0)={'lo\x00', 0xffffffff}) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000200), &(0x7f0000012ffc)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/06 22:40:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x2, 0x2000000028005) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x1, 0x52, 0x2}, {}], 0x30) 2018/04/06 22:40:21 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r0, 0x0, 0x4) 2018/04/06 22:40:21 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000003000)="6574305e00000080000000", 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000004000)=0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = dup2(r3, r0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000001f40)=@ax25, 0x80, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/74, 0x4a}}], 0x1, 0x0, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)) close(r2) 2018/04/06 22:40:21 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100)="32000000100025fe203cba95651c7a58319a00000a002e0000cd244fe56714eea4ebb45cd711000000110000007996a71fff", 0x32, 0x0, 0x0, 0x0) 2018/04/06 22:40:21 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r0, 0x0, 0x4) [ 58.743141] netlink: 18 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/06 22:40:21 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)) exit(0x0) fstat(r1, &(0x7f0000000080)) 2018/04/06 22:40:21 executing program 4: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/06 22:40:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00001d3000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="11", 0x1, 0x4000080, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/06 22:40:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000001cfe0)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}], 0x11) 2018/04/06 22:40:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00001d3000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="11", 0x1, 0x4000080, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/06 22:40:22 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000019fee)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000077cff5)='/dev/vcsa#\x00', 0x0, 0x0) close(r0) 2018/04/06 22:40:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="eb", 0x1}], 0x1) 2018/04/06 22:40:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00001d3000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="11", 0x1, 0x4000080, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/06 22:40:22 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000000180), 0x0) 2018/04/06 22:40:22 executing program 0: r0 = epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 2018/04/06 22:40:22 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r0, 0x0, 0x4) 2018/04/06 22:40:22 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r0, 0x0, 0x4) 2018/04/06 22:40:22 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x1, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000fbd000)=[0x2]) 2018/04/06 22:40:22 executing program 1: unshare(0x40600) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x80045105) 2018/04/06 22:40:22 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000003000)="6574305e00000080000000", 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000004000)=0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = dup2(r3, r0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000001f40)=@ax25, 0x80, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/74, 0x4a}}], 0x1, 0x0, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)) close(r2) 2018/04/06 22:40:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setlink={0x2c, 0x13, 0x701, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @link_local={0x1, 0x80, 0xc2}}]}, 0x2c}, 0x1}, 0x0) 2018/04/06 22:40:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000500)="220000001800070700090000be0002000a000000000000008000080005000f80ff45", 0x22) 2018/04/06 22:40:23 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000000180), 0x0) 2018/04/06 22:40:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00001d3000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000180)="11", 0x1, 0x4000080, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/06 22:40:23 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000000180), 0x0) 2018/04/06 22:40:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="ab06fc681c85a5f49d449c43e9bbe5cb740939e9b641db600fd9738e7ffc", 0x1e, 0xfffffffffffffff8) clock_adjtime(0x0, &(0x7f0000000340)={0x9, 0x0, 0x1000, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x2, 0xc, 0x0, 0x3, 0x4, 0x401}) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300020e00000000000001020000000400080005000000000000000000001c00000000000000000000000000000000030006000000000002000000000000000000000000e10000020001000000000000d1fb0200000000030005000000000002000000e00000010001000000000000"], 0x70}, 0x1}, 0x0) 2018/04/06 22:40:23 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000000180), 0x0) 2018/04/06 22:40:23 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000943ffc)=0xa35) read(r1, &(0x7f00003fefff)=""/1, 0x1) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)) 2018/04/06 22:40:23 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000000180), 0x0) 2018/04/06 22:40:23 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000000180), 0x0) 2018/04/06 22:40:23 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000000180), 0x0) 2018/04/06 22:40:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="ab06fc681c85a5f49d449c43e9bbe5cb740939e9b641db600fd9738e7ffc", 0x1e, 0xfffffffffffffff8) clock_adjtime(0x0, &(0x7f0000000340)={0x9, 0x0, 0x1000, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x2, 0xc, 0x0, 0x3, 0x4, 0x401}) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300020e00000000000001020000000400080005000000000000000000001c00000000000000000000000000000000030006000000000002000000000000000000000000e10000020001000000000000d1fb0200000000030005000000000002000000e00000010001000000000000"], 0x70}, 0x1}, 0x0) 2018/04/06 22:40:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @random="3b5f09814edc"}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, "00ffffffffffffff00"}) 2018/04/06 22:40:24 executing program 6: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents(r0, &(0x7f0000000040)=""/47, 0x134) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2018/04/06 22:40:24 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r0, 0x0, 0x4) 2018/04/06 22:40:24 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r0, 0x0, 0x4) 2018/04/06 22:40:24 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x1, &(0x7f0000d14ffc), 0x0) 2018/04/06 22:40:24 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x1, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000fbd000)=[0x2]) 2018/04/06 22:40:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x12, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}]}, 0x60}, 0x1}, 0x0) 2018/04/06 22:40:24 executing program 0: socketpair$inet(0x1e, 0x4, 0x0, &(0x7f0000000000)={0x0}) sendmsg(r0, &(0x7f0000001840)={&(0x7f0000f18000)=@in={0x1e, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001800)}, 0x0) [ 61.502342] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 2018/04/06 22:40:24 executing program 6: r0 = socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) r4 = request_key(&(0x7f00000003c0)='trusted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000540)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513", 0xffffffffffffffff) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000640)) keyctl$invalidate(0x15, r4) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/54) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000440)=0x20, 0x4) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000480)={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x0, 0xcf, [], 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000180)=""/207}, &(0x7f0000000280)=0x78) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001d80)={@empty, @remote, 0x0}, &(0x7f0000001dc0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'teql0\x00', r5}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10242, 0x0) 2018/04/06 22:40:24 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[], {0x8100}}], {@mpls_uc={0x8847, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @dev={0xac, 0x14, 0x14}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "598074", 0x0, "64621a"}}}}}}}, 0x0) [ 61.641209] ================================================================== [ 61.648624] BUG: KMSAN: uninit-value in tipc_node_get_mtu+0x200/0x7a0 [ 61.655207] CPU: 1 PID: 5393 Comm: syz-executor0 Not tainted 4.16.0+ #81 [ 61.662041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.671389] Call Trace: [ 61.673978] dump_stack+0x185/0x1d0 [ 61.677607] ? tipc_node_get_mtu+0x200/0x7a0 [ 61.682011] kmsan_report+0x142/0x240 [ 61.685819] __msan_warning_32+0x6c/0xb0 [ 61.689880] tipc_node_get_mtu+0x200/0x7a0 [ 61.694126] __tipc_sendmsg+0x1b32/0x41c0 [ 61.698275] ? kmsan_set_origin_inline+0x6b/0x120 [ 61.703121] ? __msan_poison_alloca+0x15c/0x1d0 [ 61.707792] ? local_bh_enable+0x36/0x40 [ 61.711872] tipc_sendmsg+0xeb/0x140 [ 61.715596] ? tipc_recvmsg+0x1c30/0x1c30 [ 61.719747] ___sys_sendmsg+0xec0/0x1310 [ 61.723814] ? __fdget+0x4e/0x60 [ 61.727193] SYSC_sendmsg+0x2a3/0x3d0 [ 61.731008] SyS_sendmsg+0x54/0x80 [ 61.734551] do_syscall_64+0x309/0x430 [ 61.738438] ? ___sys_sendmsg+0x1310/0x1310 [ 61.742763] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.747947] RIP: 0033:0x455259 [ 61.751131] RSP: 002b:00007feeb8eb4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.758838] RAX: ffffffffffffffda RBX: 00007feeb8eb56d4 RCX: 0000000000455259 [ 61.766101] RDX: 0000000000000000 RSI: 0000000020001840 RDI: 0000000000000013 [ 61.773366] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 61.780627] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.787890] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 61.795156] [ 61.796777] Local variable description: ----dnode@__tipc_sendmsg [ 61.802903] Variable was created at: [ 61.806622] __tipc_sendmsg+0x20c/0x41c0 [ 61.810684] tipc_sendmsg+0xeb/0x140 [ 61.814379] ================================================================== [ 61.821727] Disabling lock debugging due to kernel taint [ 61.827166] Kernel panic - not syncing: panic_on_warn set ... [ 61.827166] [ 61.834537] CPU: 1 PID: 5393 Comm: syz-executor0 Tainted: G B 4.16.0+ #81 [ 61.842664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.852006] Call Trace: [ 61.854768] dump_stack+0x185/0x1d0 [ 61.858400] panic+0x39d/0x940 [ 61.861610] ? tipc_node_get_mtu+0x200/0x7a0 [ 61.866017] kmsan_report+0x238/0x240 [ 61.869817] __msan_warning_32+0x6c/0xb0 [ 61.873879] tipc_node_get_mtu+0x200/0x7a0 [ 61.878120] __tipc_sendmsg+0x1b32/0x41c0 [ 61.882268] ? kmsan_set_origin_inline+0x6b/0x120 [ 61.887113] ? __msan_poison_alloca+0x15c/0x1d0 [ 61.891779] ? local_bh_enable+0x36/0x40 [ 61.895850] tipc_sendmsg+0xeb/0x140 [ 61.899566] ? tipc_recvmsg+0x1c30/0x1c30 [ 61.903711] ___sys_sendmsg+0xec0/0x1310 [ 61.907774] ? __fdget+0x4e/0x60 [ 61.911155] SYSC_sendmsg+0x2a3/0x3d0 [ 61.914965] SyS_sendmsg+0x54/0x80 [ 61.918507] do_syscall_64+0x309/0x430 [ 61.922399] ? ___sys_sendmsg+0x1310/0x1310 [ 61.926733] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.931914] RIP: 0033:0x455259 [ 61.935094] RSP: 002b:00007feeb8eb4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.942799] RAX: ffffffffffffffda RBX: 00007feeb8eb56d4 RCX: 0000000000455259 [ 61.950068] RDX: 0000000000000000 RSI: 0000000020001840 RDI: 0000000000000013 [ 61.957330] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 61.964594] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.971856] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 61.979576] Dumping ftrace buffer: [ 61.983095] (ftrace buffer empty) [ 61.986776] Kernel Offset: disabled [ 61.990377] Rebooting in 86400 seconds..