INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.36' (ECDSA) to the list of known hosts. 2018/04/11 15:27:35 fuzzer started 2018/04/11 15:27:35 dialing manager at 10.128.0.26:36259 2018/04/11 15:27:41 kcov=true, comps=false 2018/04/11 15:27:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f0000000000)={{0x80}, 'port1\x00'}) 2018/04/11 15:27:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000004dc0)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000004d80)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000001000098b000000000000000000000000", @ANYBLOB="00000000000000000c000100ffffffffffff0000"], 0x2}, 0x1}, 0x0) 2018/04/11 15:27:44 executing program 7: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x5, 0x0, 0x2}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00', 0x341) perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x7, 0x14926a57, 0x8, 0x0, 0x1e, 0xffffffffffffffff, 0x45b3}, 0x2c) 2018/04/11 15:27:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000400)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)) 2018/04/11 15:27:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000fc8)={&(0x7f0000238ff8)=@abs, 0x6e, &(0x7f0000bd9000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000100000080d1ac1fb1bd5a4e545d13c7f6b9b907cbeabd2f274a626c7cc30b54de6a7309d22642f2c157faa0d19054092bcc18087f5c0fcf8f64575ec8fb0a5252126fda7596c278f8c2ef6c576514ccc54d14a622d773ea622fc6ec449a310b9d23503be384b166eac0802a2e02355c753c6c6465c7b87f07ea5fa736d0e9f0c260baae40"], 0x8d}, 0x0) 2018/04/11 15:27:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000c26000)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x800000020000000, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000000180)="ae", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/11 15:27:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x2000000005452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000027ff8)=[{r2}], 0x1, 0x8000) dup3(r1, r2, 0x0) tkill(r0, 0x16) r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000028000)) 2018/04/11 15:27:44 executing program 3: mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x0, &(0x7f0000c81ffe)) clone(0x1100100, &(0x7f0000000340), &(0x7f0000695000), &(0x7f000014e000), &(0x7f0000fef000)) syzkaller login: [ 43.771478] ip (3793) used greatest stack depth: 54672 bytes left [ 44.188463] ip (3832) used greatest stack depth: 54072 bytes left [ 46.668712] ip (4058) used greatest stack depth: 53976 bytes left [ 47.118229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.262915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.282133] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.303169] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.409367] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.437957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.486833] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.602884] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.852983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.978807] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.030568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.075942] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.363179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.402780] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.467813] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.557791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.623134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.629400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.644662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.755936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.762268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.776629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.802274] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.820150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.849327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.897360] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.903655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.915568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.092202] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.098484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.107543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.261473] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.267744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.277889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.325202] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.334118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.352587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.392474] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.403724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.416777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/11 15:28:01 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x2, 0xeff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) 2018/04/11 15:28:01 executing program 5: 2018/04/11 15:28:02 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000013b000)=[{&(0x7f0000559f24)="580000001400192340834b80040d8c560206f8ff000400000000000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/11 15:28:02 executing program 4: 2018/04/11 15:28:02 executing program 5: 2018/04/11 15:28:02 executing program 7: 2018/04/11 15:28:02 executing program 1: 2018/04/11 15:28:02 executing program 3: 2018/04/11 15:28:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x2, 0x8da4, 0x3fd, 0x0, 0xffffffffffffffff, 0x735c}, 0x2c) 2018/04/11 15:28:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r0, 0x4000000000001277, &(0x7f0000000000)) [ 59.423787] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/11 15:28:02 executing program 7: 2018/04/11 15:28:02 executing program 4: 2018/04/11 15:28:02 executing program 5: 2018/04/11 15:28:02 executing program 1: 2018/04/11 15:28:02 executing program 3: [ 59.485849] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/11 15:28:02 executing program 6: 2018/04/11 15:28:02 executing program 2: 2018/04/11 15:28:02 executing program 7: 2018/04/11 15:28:02 executing program 4: 2018/04/11 15:28:02 executing program 5: 2018/04/11 15:28:02 executing program 1: 2018/04/11 15:28:02 executing program 0: 2018/04/11 15:28:02 executing program 3: 2018/04/11 15:28:02 executing program 7: 2018/04/11 15:28:02 executing program 3: 2018/04/11 15:28:02 executing program 2: 2018/04/11 15:28:02 executing program 5: 2018/04/11 15:28:02 executing program 4: 2018/04/11 15:28:03 executing program 6: 2018/04/11 15:28:03 executing program 1: 2018/04/11 15:28:03 executing program 0: 2018/04/11 15:28:03 executing program 7: 2018/04/11 15:28:03 executing program 3: 2018/04/11 15:28:03 executing program 4: 2018/04/11 15:28:03 executing program 5: 2018/04/11 15:28:03 executing program 2: 2018/04/11 15:28:03 executing program 6: 2018/04/11 15:28:03 executing program 0: 2018/04/11 15:28:03 executing program 7: 2018/04/11 15:28:03 executing program 1: 2018/04/11 15:28:03 executing program 5: 2018/04/11 15:28:03 executing program 2: 2018/04/11 15:28:03 executing program 1: 2018/04/11 15:28:03 executing program 3: 2018/04/11 15:28:03 executing program 4: 2018/04/11 15:28:03 executing program 6: 2018/04/11 15:28:03 executing program 0: 2018/04/11 15:28:03 executing program 7: 2018/04/11 15:28:03 executing program 5: 2018/04/11 15:28:03 executing program 4: 2018/04/11 15:28:03 executing program 6: 2018/04/11 15:28:03 executing program 0: 2018/04/11 15:28:03 executing program 1: 2018/04/11 15:28:03 executing program 3: 2018/04/11 15:28:03 executing program 7: 2018/04/11 15:28:03 executing program 2: 2018/04/11 15:28:03 executing program 5: 2018/04/11 15:28:03 executing program 2: 2018/04/11 15:28:03 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/11 15:28:03 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/04/11 15:28:03 executing program 4: 2018/04/11 15:28:03 executing program 6: 2018/04/11 15:28:03 executing program 0: 2018/04/11 15:28:03 executing program 7: 2018/04/11 15:28:04 executing program 2: 2018/04/11 15:28:04 executing program 5: set_mempolicy(0x0, &(0x7f0000000280), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clock_gettime(0x0, &(0x7f0000460000)) 2018/04/11 15:28:04 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 2018/04/11 15:28:04 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/04/11 15:28:04 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/11 15:28:04 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) chdir(&(0x7f00000003c0)='./bus/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f000074fffc)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfc) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x200000000000, @loopback={0x0, 0x1}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0)="8e417d6f4b2d5a8ae9f855402a3bfae9b1dd08b13be6993c4e8da90892f7e4a055006b7e1ad4e17305bf0c605a7c2f2b5379674a155fce1f6e7c8bf86ca7f606c6001a76b382ac94634d4c4e1912639b48e8439c6a65e5d9fcde0cd0460a47d60747ceeb7e62cee8b6468452ff2742d8141a8c6ab867180c3421fcf34cb1239ebcce1320832b8159e9df51bbc9e3ab84d04ea8da965a1f04aa8adfcd339b230913d07330bb9663c52eada83d8e", 0xad, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400), 0x4) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f00000001c0), 0x8, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2}}}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540), &(0x7f0000000b00)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0xffff}, &(0x7f0000000d00)=0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000480)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x23d, &(0x7f0000000600), 0x0, &(0x7f0000000d40)}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x1fc, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) fcntl$setsig(r2, 0xa, 0x8000000000000016) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000440), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r3, 0x3, 0x20}, 0xc) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/11 15:28:04 executing program 1: mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='mqueue\x00', 0x0, &(0x7f0000e2ef53)) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"627269646765300001002a8900", 0x8202}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) umount2(&(0x7f0000000040)='./file0\x00', 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f00000002c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) umount2(&(0x7f0000a23000)='./file0\x00', 0xc) 2018/04/11 15:28:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x1, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) 2018/04/11 15:28:04 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 2018/04/11 15:28:04 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 2018/04/11 15:28:04 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/11 15:28:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) write$evdev(r0, &(0x7f0000000100), 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x18, r1}) fcntl$getown(0xffffffffffffffff, 0x9) 2018/04/11 15:28:04 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) chdir(&(0x7f00000003c0)='./bus/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f000074fffc)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfc) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x200000000000, @loopback={0x0, 0x1}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0)="8e417d6f4b2d5a8ae9f855402a3bfae9b1dd08b13be6993c4e8da90892f7e4a055006b7e1ad4e17305bf0c605a7c2f2b5379674a155fce1f6e7c8bf86ca7f606c6001a76b382ac94634d4c4e1912639b48e8439c6a65e5d9fcde0cd0460a47d60747ceeb7e62cee8b6468452ff2742d8141a8c6ab867180c3421fcf34cb1239ebcce1320832b8159e9df51bbc9e3ab84d04ea8da965a1f04aa8adfcd339b230913d07330bb9663c52eada83d8e", 0xad, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400), 0x4) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f00000001c0), 0x8, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2}}}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540), &(0x7f0000000b00)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0xffff}, &(0x7f0000000d00)=0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000480)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x23d, &(0x7f0000000600), 0x0, &(0x7f0000000d40)}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x1fc, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) fcntl$setsig(r2, 0xa, 0x8000000000000016) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000440), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r3, 0x3, 0x20}, 0xc) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/11 15:28:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10}, 0x211, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/04/11 15:28:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000402ff2)={&(0x7f0000000140)={0x18, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) 2018/04/11 15:28:04 executing program 5: msgsnd(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 2018/04/11 15:28:04 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0x80000000c3, 0x4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) sendto$unix(r1, &(0x7f0000000240)="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", 0x16f, 0x0, &(0x7f0000000100)=@abs, 0x6e) 2018/04/11 15:28:04 executing program 6: shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000001c0)=""/87) 2018/04/11 15:28:04 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/11 15:28:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) write$evdev(r0, &(0x7f0000000100), 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x18, r1}) fcntl$getown(0xffffffffffffffff, 0x9) 2018/04/11 15:28:04 executing program 6: r0 = socket$inet6(0x10, 0x2000000000000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001500070400000000000000000a000000", @ANYBLOB="1400020000000000000000000000ffffac1414aa5414475210f00690f1af100fcc0fc10fa74cdb52fe98a15170447e12ffe74706243ab9a4476589780f2ac27b0953cc337460f3f93601fe"], 0x2}, 0x1}, 0x0) 2018/04/11 15:28:04 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) 2018/04/11 15:28:04 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/11 15:28:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000159fe4)={0x5, 0x1, 0x7d, 0x200000000000000c}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) 2018/04/11 15:28:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000075dff8)="0000060025bd0300", 0x8) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="e22e2487470e92b36517bede94e45455cad5991653e25fd3eb20bcc96e4f1e58a5feb64b4912d550e0480568642ac82d9b6b1e683cd81fe5dc6eb378e23476d65377d64f46475a3f8025686221ea6964059f9ca5510b10e4fd8dbb6f03df01060adc380d781a6f534886f7b6977c10d889ee5a916e1ae529df7ea4fffc6c732df771208b23f56042f8a7a1f00eae61d06cab13d14579afa9ff46322cc677b732d9ae48db80239760f16e487f6a7bc0dc0528726c2ee46763d7767449b66f25f8f1a35e1419cb3c221db4a8cff9d0bcc67d77cbdd352b73bf0501eb773bd714a97f95d866bcd9e273683f", 0xea}, {&(0x7f0000000500)="f5c51d", 0x3}], 0x2}, 0x0) 2018/04/11 15:28:05 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) creat(&(0x7f00005dfffa)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) 2018/04/11 15:28:05 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) chdir(&(0x7f00000003c0)='./bus/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f000074fffc)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfc) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x200000000000, @loopback={0x0, 0x1}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0)="8e417d6f4b2d5a8ae9f855402a3bfae9b1dd08b13be6993c4e8da90892f7e4a055006b7e1ad4e17305bf0c605a7c2f2b5379674a155fce1f6e7c8bf86ca7f606c6001a76b382ac94634d4c4e1912639b48e8439c6a65e5d9fcde0cd0460a47d60747ceeb7e62cee8b6468452ff2742d8141a8c6ab867180c3421fcf34cb1239ebcce1320832b8159e9df51bbc9e3ab84d04ea8da965a1f04aa8adfcd339b230913d07330bb9663c52eada83d8e", 0xad, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400), 0x4) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f00000001c0), 0x8, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2}}}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540), &(0x7f0000000b00)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0xffff}, &(0x7f0000000d00)=0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000480)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x23d, &(0x7f0000000600), 0x0, &(0x7f0000000d40)}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x1fc, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) fcntl$setsig(r2, 0xa, 0x8000000000000016) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000440), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r3, 0x3, 0x20}, 0xc) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/11 15:28:05 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000443ff6)='./control\x00', r0, &(0x7f000034aff8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d54ff8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) creat(&(0x7f000028f000)='./control/file0\x00', 0x0) unlink(&(0x7f0000e92ff0)='./control/file0\x00') 2018/04/11 15:28:05 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x1, "cf"}, &(0x7f0000000340)=0x9) 2018/04/11 15:28:05 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/11 15:28:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x0) 2018/04/11 15:28:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000d73000)=ANY=[@ANYBLOB="020500000c000000ffffff11ffffffff030006000000000002004e20e000000100000000000000000200010000000000000000000000000005000500000000000a004e200000000000000000000000002000ffff00000000"], 0x58}, 0x1}, 0x0) 2018/04/11 15:28:05 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0x1f, &(0x7f00000000c0)) 2018/04/11 15:28:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(r0, &(0x7f0000001400)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=@abs, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000000ac0)=@ipv4_getaddr={0x18, 0x16, 0x321, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/11 15:28:05 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000443ff6)='./control\x00', r0, &(0x7f000034aff8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d54ff8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) creat(&(0x7f000028f000)='./control/file0\x00', 0x0) unlink(&(0x7f0000e92ff0)='./control/file0\x00') 2018/04/11 15:28:05 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/11 15:28:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000159fe4)={0x5, 0x1, 0x7d, 0x200000000000000c}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000eeb000)={r1, &(0x7f0000eed000), &(0x7f0000eee000)="13"}, 0x20) 2018/04/11 15:28:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0xa, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/04/11 15:28:05 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) chdir(&(0x7f00000003c0)='./bus/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f000074fffc)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfc) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x200000000000, @loopback={0x0, 0x1}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0)="8e417d6f4b2d5a8ae9f855402a3bfae9b1dd08b13be6993c4e8da90892f7e4a055006b7e1ad4e17305bf0c605a7c2f2b5379674a155fce1f6e7c8bf86ca7f606c6001a76b382ac94634d4c4e1912639b48e8439c6a65e5d9fcde0cd0460a47d60747ceeb7e62cee8b6468452ff2742d8141a8c6ab867180c3421fcf34cb1239ebcce1320832b8159e9df51bbc9e3ab84d04ea8da965a1f04aa8adfcd339b230913d07330bb9663c52eada83d8e", 0xad, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400), 0x4) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f00000001c0), 0x8, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2}}}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540), &(0x7f0000000b00)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0xffff}, &(0x7f0000000d00)=0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000480)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x23d, &(0x7f0000000600), 0x0, &(0x7f0000000d40)}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x1fc, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) fcntl$setsig(r2, 0xa, 0x8000000000000016) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000440), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r3, 0x3, 0x20}, 0xc) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/11 15:28:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000075dff8)="0000060025bd0300", 0x8) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="e22e2487470e92b36517bede94e45455cad5991653e25fd3eb20bcc96e4f1e58a5feb64b4912d550e0480568642ac82d9b6b1e683cd81fe5dc6eb378e23476d65377d64f46475a3f8025686221ea6964059f9ca5510b10e4fd8dbb6f03df01060adc380d781a6f534886f7b6977c10d889ee5a916e1ae529df7ea4fffc6c732df771208b23f56042f8a7a1f00eae61d06cab13d14579afa9ff46322cc677b732d9ae48db80239760f16e487f6a7bc0dc0528726c2ee46763d7767449b66f25f8f1a35e1419cb3c221db4a8cff9d0bcc67d77cbdd352b73bf0501eb773bd714a97f95d866bcd9e273683f", 0xea}, {&(0x7f0000000500)="f5c51d", 0x3}], 0x2}, 0x0) [ 62.922270] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/11 15:28:06 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/11 15:28:06 executing program 1: syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x2, 0x0, 0x400}, {}], 0x30) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0x7530}, 0x2, 0x0, 0x80000001}, {{0x77359400}}], 0x20) 2018/04/11 15:28:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000075dff8)="0000060025bd0300", 0x8) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="e22e2487470e92b36517bede94e45455cad5991653e25fd3eb20bcc96e4f1e58a5feb64b4912d550e0480568642ac82d9b6b1e683cd81fe5dc6eb378e23476d65377d64f46475a3f8025686221ea6964059f9ca5510b10e4fd8dbb6f03df01060adc380d781a6f534886f7b6977c10d889ee5a916e1ae529df7ea4fffc6c732df771208b23f56042f8a7a1f00eae61d06cab13d14579afa9ff46322cc677b732d9ae48db80239760f16e487f6a7bc0dc0528726c2ee46763d7767449b66f25f8f1a35e1419cb3c221db4a8cff9d0bcc67d77cbdd352b73bf0501eb773bd714a97f95d866bcd9e273683f", 0xea}, {&(0x7f0000000500)="f5c51d", 0x3}], 0x2}, 0x0) 2018/04/11 15:28:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f3eff0)="010e800000491c5ccd165459faffff6c", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000180)=0xfc81, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/11 15:28:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r0}) 2018/04/11 15:28:06 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000443ff6)='./control\x00', r0, &(0x7f000034aff8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d54ff8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) creat(&(0x7f000028f000)='./control/file0\x00', 0x0) unlink(&(0x7f0000e92ff0)='./control/file0\x00') [ 63.476604] ================================================================== [ 63.484020] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940 [ 63.490080] CPU: 1 PID: 5386 Comm: syz-executor0 Not tainted 4.16.0+ #83 [ 63.496913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.506259] Call Trace: [ 63.508847] dump_stack+0x185/0x1d0 [ 63.512468] ? vmac_setkey+0x337/0x940 [ 63.516345] kmsan_report+0x142/0x240 [ 63.520138] ? aes_set_key+0x260/0x260 [ 63.524023] __msan_warning_32+0x6c/0xb0 [ 63.528072] ? aes_set_key+0x260/0x260 [ 63.531973] vmac_setkey+0x337/0x940 [ 63.535683] ? vmac_final+0x3f80/0x3f80 [ 63.539655] shash_async_setkey+0x337/0x4c0 [ 63.543973] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 63.549343] ? trace_kmalloc+0xb6/0x2b0 [ 63.553319] ? shash_async_digest+0x1b0/0x1b0 [ 63.557828] crypto_ahash_setkey+0x31a/0x470 [ 63.562238] hash_setkey+0x8b/0xa0 [ 63.565771] alg_setsockopt+0x6c5/0x740 [ 63.569746] ? hash_release+0x50/0x50 [ 63.573541] ? alg_accept+0xd0/0xd0 [ 63.577158] SYSC_setsockopt+0x4b8/0x570 [ 63.581217] SyS_setsockopt+0x76/0xa0 [ 63.585022] do_syscall_64+0x309/0x430 [ 63.588930] ? SYSC_recv+0xe0/0xe0 [ 63.592484] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 63.597762] RIP: 0033:0x455259 [ 63.600947] RSP: 002b:00007f5282aacc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 63.608651] RAX: ffffffffffffffda RBX: 00007f5282aad6d4 RCX: 0000000000455259 [ 63.615900] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 63.623155] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 63.630409] R10: 0000000020f3eff0 R11: 0000000000000246 R12: 00000000ffffffff [ 63.637659] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 63.644920] [ 63.646533] Local variable description: ----out.i@vmac_setkey [ 63.652423] Variable was created at: [ 63.656131] vmac_setkey+0x93/0x940 [ 63.659747] shash_async_setkey+0x337/0x4c0 [ 63.664050] ================================================================== [ 63.671425] Disabling lock debugging due to kernel taint [ 63.676855] Kernel panic - not syncing: panic_on_warn set ... [ 63.676855] [ 63.684203] CPU: 1 PID: 5386 Comm: syz-executor0 Tainted: G B 4.16.0+ #83 [ 63.692321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.701659] Call Trace: [ 63.704247] dump_stack+0x185/0x1d0 [ 63.707865] panic+0x39d/0x940 [ 63.711070] ? vmac_setkey+0x337/0x940 [ 63.714960] kmsan_report+0x238/0x240 [ 63.718754] ? aes_set_key+0x260/0x260 [ 63.722639] __msan_warning_32+0x6c/0xb0 [ 63.726699] ? aes_set_key+0x260/0x260 [ 63.730582] vmac_setkey+0x337/0x940 [ 63.734289] ? vmac_final+0x3f80/0x3f80 [ 63.738244] shash_async_setkey+0x337/0x4c0 [ 63.742549] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 63.747889] ? trace_kmalloc+0xb6/0x2b0 [ 63.751841] ? shash_async_digest+0x1b0/0x1b0 [ 63.756316] crypto_ahash_setkey+0x31a/0x470 [ 63.760704] hash_setkey+0x8b/0xa0 [ 63.764224] alg_setsockopt+0x6c5/0x740 [ 63.768183] ? hash_release+0x50/0x50 [ 63.771961] ? alg_accept+0xd0/0xd0 [ 63.775566] SYSC_setsockopt+0x4b8/0x570 [ 63.779610] SyS_setsockopt+0x76/0xa0 [ 63.783388] do_syscall_64+0x309/0x430 [ 63.787258] ? SYSC_recv+0xe0/0xe0 [ 63.790790] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 63.795965] RIP: 0033:0x455259 [ 63.799130] RSP: 002b:00007f5282aacc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 63.806813] RAX: ffffffffffffffda RBX: 00007f5282aad6d4 RCX: 0000000000455259 [ 63.814060] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 63.821307] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 63.828572] R10: 0000000020f3eff0 R11: 0000000000000246 R12: 00000000ffffffff [ 63.835816] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 63.843491] Dumping ftrace buffer: [ 63.847019] (ftrace buffer empty) [ 63.850701] Kernel Offset: disabled [ 63.854301] Rebooting in 86400 seconds..