INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2018/04/13 15:27:49 fuzzer started 2018/04/13 15:27:49 dialing manager at 10.128.0.26:33379 2018/04/13 15:27:56 kcov=true, comps=false 2018/04/13 15:27:58 executing program 0: 2018/04/13 15:27:58 executing program 2: 2018/04/13 15:27:58 executing program 7: 2018/04/13 15:27:58 executing program 1: 2018/04/13 15:27:58 executing program 4: 2018/04/13 15:27:58 executing program 3: 2018/04/13 15:27:58 executing program 5: 2018/04/13 15:27:58 executing program 6: syzkaller login: [ 42.394522] ip (3779) used greatest stack depth: 54672 bytes left [ 42.605271] ip (3801) used greatest stack depth: 54312 bytes left [ 43.485204] ip (3888) used greatest stack depth: 54200 bytes left [ 43.835587] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.842131] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.880845] device bridge_slave_0 entered promiscuous mode [ 43.909593] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.916141] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.938368] device bridge_slave_0 entered promiscuous mode [ 43.964244] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.970730] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.003334] device bridge_slave_0 entered promiscuous mode [ 44.041742] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.048230] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.072076] device bridge_slave_0 entered promiscuous mode [ 44.096918] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.103412] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.125122] device bridge_slave_1 entered promiscuous mode [ 44.134919] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.141370] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.159983] device bridge_slave_1 entered promiscuous mode [ 44.169542] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.176009] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.200234] device bridge_slave_0 entered promiscuous mode [ 44.215462] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.221908] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.239152] device bridge_slave_0 entered promiscuous mode [ 44.246662] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.253112] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.263193] device bridge_slave_1 entered promiscuous mode [ 44.272797] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.279242] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.311129] device bridge_slave_0 entered promiscuous mode [ 44.330727] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.337192] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.353614] device bridge_slave_0 entered promiscuous mode [ 44.363924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.373875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.386807] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.393375] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.423615] device bridge_slave_1 entered promiscuous mode [ 44.442707] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.449378] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.478888] device bridge_slave_1 entered promiscuous mode [ 44.488218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.497829] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.504298] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.520639] device bridge_slave_1 entered promiscuous mode [ 44.527761] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.534206] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.561424] device bridge_slave_1 entered promiscuous mode [ 44.577869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.587485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.596836] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.603293] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.649976] device bridge_slave_1 entered promiscuous mode [ 44.679510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.689243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.699300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.707080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.717327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.870132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.882678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.895102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.921463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.931484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.084097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.343330] ip (4020) used greatest stack depth: 53656 bytes left [ 45.531671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.542846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.668821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.709724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.781669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.862998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.879527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.926926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.934081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.965963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.055886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.081568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.139186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.165916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.190137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.279959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.703287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.820292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.882675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.907197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.036512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.066865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.075516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.090384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.119153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.126316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.137723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.167934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.177271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.254428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.261627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.277884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.308528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.322197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.330823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.339701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.351464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.389189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.399100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.406560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.428279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.458547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.490194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.502095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.509289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.530757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.562967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.579548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.606559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.616894] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.625072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.637461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.644652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.666763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.701865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.736791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.754587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.766239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.776302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.800259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.807396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.816665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.839077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.847369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.854799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.874095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.893531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.924930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.961746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.990724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.008847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.027430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.044601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.067119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.104505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.111637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.128820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.200423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.207563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.220785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.832994] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.839512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.846387] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.852831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.912360] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.919247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.955880] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.962382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.969249] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.975707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.035902] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.051084] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.057568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.064434] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.070888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.108543] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.126530] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.133169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.139996] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.146491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.171758] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.183928] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.190404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.197282] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.203738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.286981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.320376] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.326869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.333752] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.340208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.390465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.599528] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.606013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.612897] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.619339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.663977] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.673520] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.680018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.686886] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.693337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.707935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.976195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.989737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.027994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.062480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.089629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.098637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.107398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.037602] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.200791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.222109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.508450] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.527938] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.707611] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.814565] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.820803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.832848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.964734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.972539] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.978771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.989489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.037111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.086091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.092403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.108013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.332007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.338322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.351601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.367878] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.380224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.409849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.609225] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.617851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.634952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.855383] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.861651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.875983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.906916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.916720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.929568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 15:28:24 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x57, 0xfffffffffffffffc}, 0xfffffe55) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/13 15:28:24 executing program 2: 2018/04/13 15:28:24 executing program 7: 2018/04/13 15:28:24 executing program 2: 2018/04/13 15:28:24 executing program 7: 2018/04/13 15:28:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000001580)={0x18, 0x14, 0x7, 0x0, 0x0, {0x1e, 0xffffff7f}, [@generic="03"]}, 0x18}, 0x1}, 0x0) 2018/04/13 15:28:25 executing program 2: 2018/04/13 15:28:25 executing program 7: 2018/04/13 15:28:25 executing program 3: 2018/04/13 15:28:25 executing program 1: 2018/04/13 15:28:25 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x10000, [0x0, 0xd7f]}) 2018/04/13 15:28:25 executing program 5: r0 = socket$inet(0x2, 0x803, 0x81) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x1) sendmsg(r0, &(0x7f00002b7fc8)={&(0x7f0000a79ff0)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f0000377b44), 0x0, &(0x7f0000d76000)}, 0x0) 2018/04/13 15:28:25 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x53b2) accept4$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x9f2566ea5d2444) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x4e20, 0x4e21, 0x8}}}}}, 0x0) 2018/04/13 15:28:25 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$unix(r0, &(0x7f0000002740)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002400), 0xfc, &(0x7f0000002640)}, 0x0) 2018/04/13 15:28:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00007dcfe4)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000000000)={0x18, 0x30, 0x10000000000003, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/13 15:28:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x3) 2018/04/13 15:28:25 executing program 3: r0 = socket$nl_generic(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000001ec0)={&(0x7f0000000480)=@nl=@unspec, 0x80, &(0x7f00000019c0), 0x0, &(0x7f0000001a40)=[{0x10, 0x29, 0x3e}], 0x10}, 0x0) 2018/04/13 15:28:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff97, 0x0, 0x0, 0x4}, [], {0x95}}, &(0x7f0000e6bffc)="f45010", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$MAP_CREATE(0xa, &(0x7f00000001c0)={0x13}, 0x2c) 2018/04/13 15:28:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/187, 0xbb}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/13 15:28:25 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0xfffffffffffffff9}, 0x10) listen(r0, 0x93) accept4$inet(r0, &(0x7f00000000c0)={0x0, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) 2018/04/13 15:28:25 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "1cdccba05de2"}, 0x80) 2018/04/13 15:28:25 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89f1, &(0x7f0000000b00)={'sit0\x00'}) 2018/04/13 15:28:25 executing program 2: r0 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8913, &(0x7f0000000580)={'gre0\x00'}) 2018/04/13 15:28:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1c, 0xffffffc5}, [], {0x95}}, &(0x7f0000000000)="f45010", 0x1, 0x99, &(0x7f0000000200)=""/153}, 0x48) 2018/04/13 15:28:25 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/04/13 15:28:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x5}, 0x2c) bpf$MAP_CREATE(0x3, &(0x7f0000000040)={0x13, 0x0, 0x6e8000}, 0x14) 2018/04/13 15:28:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x148, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000000), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'gre0\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'ifb0\x00', @random="bd229cceedd0", [], @empty, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x1c0) 2018/04/13 15:28:25 executing program 3: r0 = socket$inet(0x2, 0x20000000000003, 0x40000000000002) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001040)=@nat={'na%\x00', 0x19, 0x2, 0x3a8, [0x20000c80, 0x0, 0x0, 0x20000e60, 0x20000e90], 0x0, &(0x7f0000000000), &(0x7f0000000c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'dummy0\x00', 'syzkaller0\x00', 'vlan0\x00', 'ip6gre0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf0, 0x160, 0x1b0, [@statistic={'statistic\x00', 0x18, {{0x7fffffff}}}, @mark_m={'mark_m\x00', 0x18}]}, [@arpreply={'arpreply\x00', 0x10}, @arpreply={'arpreply\x00', 0x10, {{@random="74e8a8255d3f"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00', 'tunl0\x00', 'ip6gretap0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x118, 0x118, 0x168, [@cluster={'cluster\x00', 0x10}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}}, @common=@log={'log\x00', 0x28, {{0x0, "67fa94c3f1d8bd2f9da43ce2d3a3b8b4fcd00ada3ad2194f4e11080408ef"}}}}]}]}, 0x420) 2018/04/13 15:28:25 executing program 7: socketpair$inet(0x1d, 0x0, 0x2, &(0x7f0000001f80)) 2018/04/13 15:28:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "0710050000ef000097"}], 0x20}, 0x0) 2018/04/13 15:28:26 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d85009", 0x10, 0x11, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff]}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8d2414", 0x0, "8da185"}}}}}}}, &(0x7f0000000280)) 2018/04/13 15:28:26 executing program 3: r0 = socket$inet(0x2, 0x200000000003, 0x88) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=""/152, 0x98}, 0x0) sendmsg(r0, &(0x7f0000043000)={&(0x7f000000cff0)=@in={0x2, 0x4e20}, 0x10, &(0x7f00003b3ff0), 0x0, &(0x7f00003b3000)}, 0x0) 2018/04/13 15:28:26 executing program 1: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10}, 0xfffffffffffffef7, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {0x3}, [{{0x8}, {0x4}}, {{0x6d}, {0x2}}]}, 0x2c}, 0x1}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890b, &(0x7f00000000c0)={"7465616d300500000200"}) 2018/04/13 15:28:26 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d98ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000506ff8)=[{0x6}]}, 0x10) listen(r0, 0x0) 2018/04/13 15:28:27 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680800a3a2d188737e0bf402002cdf1389598e2c", 0x2f}], 0x1}, 0x0) 2018/04/13 15:28:27 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "40e4b4", 0x20, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @remote={0xfe, 0x80, [], 0xbb}, {[@hopopts={0x0, 0x1, [], [@ra={0x5, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecacfa", 0x0, "5b7d99"}}}}}}}, &(0x7f0000000140)) 2018/04/13 15:28:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0x8, 0x11, [@generic="04"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 15:28:27 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="240000001200030207fffd946fa283bc0aeee6d87986c497271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmsg(r0, &(0x7f000000d000)={&(0x7f000000cff0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000000d000)=""/123, 0x7b}, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000cc0)=""/4096, 0x1000}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000004c0)=""/203, 0xcb}, 0x0) 2018/04/13 15:28:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffffc5}, [], {0x95}}, &(0x7f0000000000)="f45010", 0x1, 0x99, &(0x7f0000000200)=""/153}, 0x48) 2018/04/13 15:28:27 executing program 1: r0 = socket$netlink(0x2, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x84, 0xb, &(0x7f0000001000), 0x100000179) 2018/04/13 15:28:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/187, 0xbb}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/13 15:28:27 executing program 3: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x1d, "3147c462310b868f2382366ba7f9cf8207762c2f799bfff11a68af6139"}, &(0x7f0000000040)=0x41) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000080)=0x2, 0x700) [ 68.064901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/13 15:28:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x11, 0x65, &(0x7f0000000080)={"726177000000000000000000000000000000000000000000000300"}, &(0x7f00000001c0)=0x6) 2018/04/13 15:28:27 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "40e4b4", 0x20, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @remote={0xfe, 0x80, [], 0xbb}, {[@hopopts={0x0, 0x1, [], [@ra={0x5, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecacfa", 0x0, "5b7d99"}}}}}}}, &(0x7f0000000140)) 2018/04/13 15:28:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x864}, 0xfffffffffffffd2a) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/13 15:28:27 executing program 7: r0 = socket$inet(0x2, 0x803, 0x20) connect$inet6(r0, &(0x7f000000b000)={0xa, 0x4e20}, 0x1c) [ 68.142601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/13 15:28:27 executing program 1: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001980)={'filter\x00', 0x7, 0x4, 0x4a0, 0x280, 0x280, 0x0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000001940), {[{{@arp={@empty, @loopback=0x7f000001, 0x0, 0x0, @empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @mac=@random="053dddca6ad5", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bcsf0\x00', 'irlan0\x00', {0xff}, {}, 0x0, 0x130}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}}}, {{@arp={@dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, @mac=@link_local={0x1, 0x80, 0xc2}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x469, 0x401, '\x00', 'ifb0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @mac=@random="f2158dcdd10c", @multicast1=0xe0000001}}}, {{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4f0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00], 0xaa}}, @in={0x2, 0x0, @broadcast=0xffffffff}, @in={0x2, 0x0, @multicast1=0xe0000001}], 0xfe0c509c6c324033) 2018/04/13 15:28:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x11, &(0x7f0000000000)={{{@in, @in6=@local={0xfe, 0x80, [], 0xaa}}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) 2018/04/13 15:28:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@multicast2=0xe0000002}, @in=@rand_addr}}, 0xf0}, 0x1}, 0x0) 2018/04/13 15:28:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2e, 0xaff, 0x0, 0x0, {0x2801}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/13 15:28:27 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "40e4b4", 0x20, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @remote={0xfe, 0x80, [], 0xbb}, {[@hopopts={0x0, 0x1, [], [@ra={0x5, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecacfa", 0x0, "5b7d99"}}}}}}}, &(0x7f0000000140)) 2018/04/13 15:28:27 executing program 7: r0 = socket$inet(0x2, 0x3, 0x100000000000001) sendmsg(r0, &(0x7f0000002a80)={&(0x7f0000002440)=@in={0x2, 0x4e20}, 0x10, &(0x7f00000026c0)=[{&(0x7f00000025c0)="c4ab2aeb2f0ac879", 0x8}], 0x1, &(0x7f0000002700)}, 0x0) recvmsg(r0, &(0x7f0000001280)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/68, 0x44}, 0x60) 2018/04/13 15:28:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond0\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000500)=@bridge_setlink={0x28, 0x11, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x3}]}]}, 0x28}, 0x1}, 0x0) 2018/04/13 15:28:27 executing program 3: r0 = socket$inet(0x2, 0x802, 0x0) connect$inet(r0, &(0x7f00005a8ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x0, &(0x7f000000b000)=[{&(0x7f0000010000)="5500000020007fafb72d00b2a4a2809302000002000000000000006925000b0000000000130000008848a3c728e1c46b7b31afdc1338d5440000000000000000000000088daa7227c43ab8220000bf0c0000000004", 0x55}], 0x1, &(0x7f00000002c0)}, 0x0) sendmsg(r0, &(0x7f0000779fc8)={0x0, 0x0, &(0x7f00002f0000)}, 0x0) 2018/04/13 15:28:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0xa, 0x0, &(0x7f0000000180)) [ 68.531904] netlink: 'syz-executor3': attribute type 11 has an invalid length. [ 68.539552] netlink: 17 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/13 15:28:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x4, 0x4000000004, 0x6}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x13, 0x0, 0x710000, 0x0, 0x20000000, 0x0}, 0x2b4) [ 68.656569] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) [ 68.677203] netlink: 'syz-executor3': attribute type 11 has an invalid length. [ 68.684795] netlink: 17 bytes leftover after parsing attributes in process `syz-executor3'. [ 75.326122] oom_reaper: reaped process 5904 (syz-executor1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 75.360376] rsyslogd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 75.371843] rsyslogd cpuset=/ mems_allowed=0 [ 75.376354] CPU: 0 PID: 3451 Comm: rsyslogd Not tainted 4.16.0+ #83 [ 75.382772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.392152] Call Trace: [ 75.394777] dump_stack+0x185/0x1d0 [ 75.398440] dump_header+0x2cc/0x16f0 [ 75.402283] ? __msan_poison_alloca+0x15c/0x1d0 [ 75.406956] ================================================================== [ 75.414321] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 75.421068] CPU: 0 PID: 3451 Comm: rsyslogd Not tainted 4.16.0+ #83 [ 75.427462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.436812] Call Trace: [ 75.439398] dump_stack+0x14a/0x1d0 [ 75.443026] ? kernel_text_address+0x248/0x3a0 [ 75.447606] kmsan_report+0x142/0x240 [ 75.451406] __msan_warning_32+0x6c/0xb0 [ 75.454153] syz-executor1: vmalloc: allocation failure, allocated 1603141632 of 1815240704 bytes, mode:0x14200c0(GFP_USER), nodemask=(null) [ 75.455467] kernel_text_address+0x248/0x3a0 [ 75.455485] __kernel_text_address+0x34/0xe0 [ 75.455502] show_trace_log_lvl+0x954/0x1030 [ 75.455529] ? oom_kill_process+0x341/0x2160 [ 75.468213] syz-executor1 cpuset= [ 75.472565] show_stack+0xfc/0x150 [ 75.472578] ? print_worker_info+0x1b0/0x660 [ 75.472591] dump_stack+0x185/0x1d0 [ 75.472612] dump_header+0x2cc/0x16f0 [ 75.477059] syz1 [ 75.481392] ? __msan_poison_alloca+0x15c/0x1d0 [ 75.485813] mems_allowed=0 [ 75.489202] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 75.489215] ? ___ratelimit+0x67f/0x760 [ 75.489232] oom_kill_process+0x341/0x2160 [ 75.489258] ? oom_evaluate_task+0x562/0xb60 [ 75.531977] out_of_memory+0x1700/0x1da0 [ 75.536032] __alloc_pages_nodemask+0x4ee3/0x5dc0 [ 75.540881] alloc_pages_current+0x6b5/0x970 [ 75.545274] __page_cache_alloc+0x95/0x320 [ 75.549492] filemap_fault+0x1618/0x24e0 [ 75.553546] ext4_filemap_fault+0xbb/0x130 [ 75.557765] ? ext4_page_mkwrite+0x2a30/0x2a30 [ 75.562330] handle_mm_fault+0x58fe/0x7ba0 [ 75.566552] ? filemap_fault+0x24e0/0x24e0 [ 75.570775] __do_page_fault+0xec4/0x1a10 [ 75.574911] ? page_fault+0x45/0x50 [ 75.578518] do_page_fault+0xd3/0x260 [ 75.582299] ? page_fault+0x2f/0x50 [ 75.585909] page_fault+0x45/0x50 [ 75.589344] RIP: 0033:0x7f13b07491fd [ 75.593037] RSP: 002b:00007f13adce8e30 EFLAGS: 00010293 [ 75.598385] RAX: 0000000000000071 RBX: 0000000001b6bce0 RCX: 00007f13b07491fd [ 75.605637] RDX: 0000000000000fff RSI: 00007f13af51d5a0 RDI: 0000000000000004 [ 75.612886] RBP: 0000000000000000 R08: 0000000001b57260 R09: 0000000000000000 [ 75.620139] R10: 362e38362020205b R11: 0000000000000293 R12: 000000000065e420 [ 75.627396] R13: 00007f13adce99c0 R14: 00007f13b0d8e040 R15: 0000000000000003 [ 75.634650] [ 75.636254] Local variable description: ----c.i.i.i.i.i@mem_cgroup_soft_limit_reclaim [ 75.644196] Variable was created at: [ 75.647892] mem_cgroup_soft_limit_reclaim+0x13f/0x2480 [ 75.653238] do_try_to_free_pages+0xda1/0x1f80 [ 75.657796] ================================================================== [ 75.665133] Disabling lock debugging due to kernel taint [ 75.670563] Kernel panic - not syncing: panic_on_warn set ... [ 75.670563] [ 75.677910] CPU: 0 PID: 3451 Comm: rsyslogd Tainted: G B 4.16.0+ #83 [ 75.685594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.694925] Call Trace: [ 75.697497] dump_stack+0x14a/0x1d0 [ 75.701107] panic+0x39d/0x940 [ 75.704300] ? kernel_text_address+0x248/0x3a0 [ 75.708863] kmsan_report+0x238/0x240 [ 75.712649] __msan_warning_32+0x6c/0xb0 [ 75.716695] kernel_text_address+0x248/0x3a0 [ 75.721088] __kernel_text_address+0x34/0xe0 [ 75.725484] show_trace_log_lvl+0x954/0x1030 [ 75.729876] ? oom_kill_process+0x341/0x2160 [ 75.734275] show_stack+0xfc/0x150 [ 75.737799] ? print_worker_info+0x1b0/0x660 [ 75.742190] dump_stack+0x185/0x1d0 [ 75.745804] dump_header+0x2cc/0x16f0 [ 75.749589] ? __msan_poison_alloca+0x15c/0x1d0 [ 75.754242] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 75.759676] ? ___ratelimit+0x67f/0x760 [ 75.763637] oom_kill_process+0x341/0x2160 [ 75.767859] ? oom_evaluate_task+0x562/0xb60 [ 75.772253] out_of_memory+0x1700/0x1da0 [ 75.776302] __alloc_pages_nodemask+0x4ee3/0x5dc0 [ 75.781147] alloc_pages_current+0x6b5/0x970 [ 75.785541] __page_cache_alloc+0x95/0x320 [ 75.789760] filemap_fault+0x1618/0x24e0 [ 75.793817] ext4_filemap_fault+0xbb/0x130 [ 75.798044] ? ext4_page_mkwrite+0x2a30/0x2a30 [ 75.802611] handle_mm_fault+0x58fe/0x7ba0 [ 75.806834] ? filemap_fault+0x24e0/0x24e0 [ 75.811057] __do_page_fault+0xec4/0x1a10 [ 75.815197] ? page_fault+0x45/0x50 [ 75.818805] do_page_fault+0xd3/0x260 [ 75.822589] ? page_fault+0x2f/0x50 [ 75.826198] page_fault+0x45/0x50 [ 75.829633] RIP: 0033:0x7f13b07491fd [ 75.833325] RSP: 002b:00007f13adce8e30 EFLAGS: 00010293 [ 75.838669] RAX: 0000000000000071 RBX: 0000000001b6bce0 RCX: 00007f13b07491fd [ 75.845921] RDX: 0000000000000fff RSI: 00007f13af51d5a0 RDI: 0000000000000004 [ 75.853172] RBP: 0000000000000000 R08: 0000000001b57260 R09: 0000000000000000 [ 75.860423] R10: 362e38362020205b R11: 0000000000000293 R12: 000000000065e420 [ 75.867676] R13: 00007f13adce99c0 R14: 00007f13b0d8e040 R15: 0000000000000003 [ 75.875363] Dumping ftrace buffer: [ 75.878880] (ftrace buffer empty) [ 75.882561] Kernel Offset: disabled [ 75.886160] Rebooting in 86400 seconds..