INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2018/04/06 23:44:22 fuzzer started 2018/04/06 23:44:22 dialing manager at 10.128.0.26:38639 2018/04/06 23:44:28 kcov=true, comps=false 2018/04/06 23:44:31 executing program 0: perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') sendfile(r0, r0, &(0x7f0000000200)=0x1fff, 0x10043) 2018/04/06 23:44:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00008f9000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0xa28, 0x38d) 2018/04/06 23:44:31 executing program 2: socket$netlink(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2}) 2018/04/06 23:44:31 executing program 7: semget$private(0x0, 0x8000000000000005, 0x0) 2018/04/06 23:44:31 executing program 4: pipe(&(0x7f0000aa4ff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000f94ff8)=[{&(0x7f00005d5fff)=';', 0x1}], 0x1, 0x0) poll(&(0x7f0000f89000)=[{r0}], 0x2000000000000032, 0x4edc8b4f) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='Z', 0x1}], 0x1, 0x0) 2018/04/06 23:44:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000b2c000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000020201000000000000cff81f2a02000733f48410"], 0x18}, 0x1}, 0x0) 2018/04/06 23:44:31 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/06 23:44:31 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) syzkaller login: [ 43.501687] ip (3870) used greatest stack depth: 54200 bytes left [ 43.738309] ip (3892) used greatest stack depth: 53656 bytes left [ 45.747468] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.941285] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.081648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.091702] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.112359] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.201663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.218105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.278529] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.827929] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.852492] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.933939] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.943693] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.965300] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.052957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.069864] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.154206] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.564099] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.570424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.581650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.618183] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.624395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.646105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.674431] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.680812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.691694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.732511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.738952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.749593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.791465] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.800131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.820114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.854719] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.860950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.878606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.944092] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.950347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.965365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.024763] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.031017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.048390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/06 23:44:47 executing program 7: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000c93fc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000ce3000)="5500000018007fafb72d1cb2a2a280930206000000a843096c26230004000800040000001000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000002040)}, 0x0) 2018/04/06 23:44:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x10001}, 0x2c) socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x29, r1}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) close(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/246, 0xf6}, 0x2022) 2018/04/06 23:44:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x100009bde) sendto$inet6(r0, &(0x7f0000fd8000)='o', 0x1, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000715ffc)=0x58, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}], 0x1) [ 57.285238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/06 23:44:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000939f01)='net/anycast6\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000019c0)={@dev={0xfe, 0x80}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) preadv(r0, &(0x7f00006c6000)=[{&(0x7f0000ed9000)=""/202, 0xca}], 0x1, 0x0) 2018/04/06 23:44:49 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={"776c616e300000020084000000000899", &(0x7f0000000100)=ANY=[@ANYBLOB="110000000000000000003c000079cfd636de5ee6db"]}) 2018/04/06 23:44:49 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 2018/04/06 23:44:49 executing program 6: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/06 23:44:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x100009bde) sendto$inet6(r0, &(0x7f0000fd8000)='o', 0x1, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000715ffc)=0x58, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}], 0x1) 2018/04/06 23:44:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000723ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000d37ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/06 23:44:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) 2018/04/06 23:44:49 executing program 4: sched_getparam(0x0, &(0x7f0000000040)) setpriority(0x0, 0x0, 0x0) 2018/04/06 23:44:49 executing program 6: r0 = socket(0x2, 0x80002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000140)={{}, 0xfffffffffffffffe}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/06 23:44:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x61) sendto$inet(r0, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000080)="c340", 0x2, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) read(r0, &(0x7f0000000540)=""/165, 0xa5) sendto$inet(r0, &(0x7f0000000480)="e5", 0x1, 0x1, 0x0, 0x0) 2018/04/06 23:44:49 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/06 23:44:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x100009bde) sendto$inet6(r0, &(0x7f0000fd8000)='o', 0x1, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000715ffc)=0x58, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}], 0x1) 2018/04/06 23:44:49 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='lp\x00', 0x3) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/06 23:44:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x68}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb630000000000000006fdc24e95e12aa7748f9f393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 2018/04/06 23:44:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000100)={0x14, 0x2, 0x400000000002, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/06 23:44:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f2e000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r1, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 2018/04/06 23:44:50 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000340)={@random="b9479e1949cd", @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, {[@rr={0x7, 0x7, 0x4, [@local={0xac, 0x14, 0x14, 0xaa}]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8554c", 0x0, "08f2d9"}}}}}}, &(0x7f0000000040)) 2018/04/06 23:44:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x100009bde) sendto$inet6(r0, &(0x7f0000fd8000)='o', 0x1, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000715ffc)=0x58, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}], 0x1) 2018/04/06 23:44:50 executing program 4: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000a0d000), 0x8) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) signalfd(r0, &(0x7f0000000000), 0x8) 2018/04/06 23:44:50 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x29}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) close(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000280)=@sco={0x2}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000380)=[{0x10, 0x1, 0x2400}], 0x10}, 0x0) 2018/04/06 23:44:50 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='lp\x00', 0x3) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/06 23:44:50 executing program 6: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="f50000000000000000000000028000006a0a00ffffffffff6910a8"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x3, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0xbb, &(0x7f0000000300)=""/187}, 0x48) 2018/04/06 23:44:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x111}, 0x14}, 0x1}, 0x0) 2018/04/06 23:44:51 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/04/06 23:44:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r0, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f0000000000)=""/159, 0x9f) 2018/04/06 23:44:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000000c0)='ppp0}cgroup@:selinux\x00') 2018/04/06 23:44:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x100009bde) sendto$inet6(r0, &(0x7f0000fd8000)='o', 0x1, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}], 0x1) 2018/04/06 23:44:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000948fee)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000cccfce)=""/50, 0x32) ioctl$TIOCSBRK(r1, 0x40044591) 2018/04/06 23:44:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="d6", 0x1}], 0x1, &(0x7f00000000c0)}, 0x0) 2018/04/06 23:44:51 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x29}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) close(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000280)=@sco={0x2}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000380)=[{0x10, 0x1, 0x2400}], 0x10}, 0x0) 2018/04/06 23:44:51 executing program 2: syz_emit_ethernet(0x15, &(0x7f0000000300)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [{[], {0x8100, 0x100000001}}], {@llc={0x4, {@llc={0x0, 0x0, 'W'}}}}}, &(0x7f0000000380)) 2018/04/06 23:44:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x100009bde) sendto$inet6(r0, &(0x7f0000fd8000)='o', 0x1, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000715ffc)=0x58, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}], 0x1) 2018/04/06 23:44:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00002f7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/06 23:44:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x111}, 0x14}, 0x1}, 0x0) 2018/04/06 23:44:51 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/06 23:44:51 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000003fc8)={&(0x7f0000000400)=@nl=@proc={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000b0000040149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000001080)}, 0x0) 2018/04/06 23:44:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="d6", 0x1}], 0x1, &(0x7f00000000c0)}, 0x0) [ 60.332027] netlink: 'syz-executor5': attribute type 11 has an invalid length. 2018/04/06 23:44:51 executing program 2: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000045147)={0x2, 0x70, 0x0, 0x303}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x8000) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x811, r0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x7, 0x32, 0xffffffffffffffff, 0x0) 2018/04/06 23:44:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000780)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000007c0)={@remote={0xfe, 0x80, [], 0xbb}, r1}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'bridge0\x00', 0x9000}) r3 = socket$packet(0x11, 0x80000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'ip6_vti0@\x00\x00+\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000c00)=ANY=[@ANYBLOB="0d0000004b660500dcbccf65a4193681f6f696a0008000000000000004000030e9c552a28b5274766ec198b0477fb5e14d4bae351c98d2952163a535384e5be113289d5d13482f65157252131a57122dbe7247fcf7f8d222994e6f66bc83e9522e2f8cc898bc6b346b7311e8"], &(0x7f00000002c0)=0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000340)={'ip6gre0\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000e00)=@add_del={0x2, &(0x7f0000000e40)='tunl0\x00', 0xcb}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYBLOB="d2000000f8ffffff7a0b8adeef33435f215cf0f92e237461f51fa528c04149f80081c4c692d70100000000000000e5fd27942e5fc9d3b58b3cd855e57c6b39d7057e195da0937c9e6fa467bcafe5b883315df1d24887de08240943c7c5c3b0e119647d9ce08f62aed3896ae169048a30950384b8005fec2af393093fa803ed2d3d83da997dc0740000001b6ebe0c66c50e2cbb32e6877fa8170903dc516e78dc0300000030c3aee1e5fa608370fa38356a8f71f8f99d5448bd894cc81b0000c8c40000000000"], &(0x7f0000000940)=0x2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="84ac3f00f07974e062e07f301633029c88c00ce9a010c227915229260a2ab3d93fbd38c630338044e742791760b8647e8af04dd16ea33b76c100b9318f33e24a98d939fc44fa8c250fa9808e9fa8a355dd88523d14b1a75c391652eae8a9dd831d7d40"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000280), 0x4) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0xffffff89, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0xfda9) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000840)=0x5, &(0x7f0000000600)=0x4) accept(0xffffffffffffffff, &(0x7f0000000140)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f0000000800)=0x80) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000540)=0x85aa336efdf9314b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000043c0)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x3, 0x7, 0x1, "25d08a89aae8837f726687326421747920ae1968e20cd373699fd8daea2d68bf7ee425535bff91167faa35b33054f80bdbebfd95e453d17a63c514ad40b02b", 0x16}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000e80)="914e5d11732ebce785429c758eb2901f03d6a6834cc93cf9e186b480d1491907411b1baa0eeadf76f41735857d0b6217b7e0a4f340b3c4e95ed318897c333e23b4333b634fb9326e3cc91da2417d470e65433cd0d01af4404a76ee2f2b2ed7a568612074832444634fde181c50f970d0f30e504f25868f938c432789b64bc3f712afbb7a8061fba6a1b3fc077068fbd702ab516c23a56d105322ea9652b6d54fc24e1814013791f2124fae187e082a79e9f1ed21a3277069a470d6e629a6e18006c3756bcb605845c9802b7bc35d9b845dd89ad41f2144740dd236cce9239723b545ee078d74b1cba12e8cffc9821967b003cb7a08436dfa", 0xf8}], 0x1, &(0x7f0000001240)={0xb0, 0x29, 0x1, "c856447c43748e4b7112fbd6dcacf345c3da8d1c3b31876aac8d62bdc910a4c41a17616e86517a58ae7109149de5455d84b215ca79e5859f61c5a5fb8e60d4a77e6a8ac419bf69b5cfb60981c47188e4ab860c913ee7968bee91b22e1c8f3dcf5b3852f46e5c32eb4ebc73ec1317f23b3016570b6c883d972b18816fc67d4d17a97e766d61c14cf0d8eac1f300046b746f5283a1adaa78559779"}, 0xb0}], 0x1, 0x4800) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000003c0)={'ip6_vti0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) 2018/04/06 23:44:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbfffffffffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000001580)={0x0, 0xb300}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000300)={0x0, 0x0, 0x7, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/06 23:44:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@setlink={0x40, 0x13, 0x409, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x40}, 0x1}, 0x0) 2018/04/06 23:44:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00002f7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/06 23:44:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="d6", 0x1}], 0x1, &(0x7f00000000c0)}, 0x0) 2018/04/06 23:44:51 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x117}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000003c0)) 2018/04/06 23:44:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8000000000002c) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x3c5, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x2000c080) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\a', 0x8}], 0x1) 2018/04/06 23:44:52 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00002300000086dd60110c1100383a00fe80a8de970ffbc45bc094b7024eabd5d18200000000000000000000200000ffff02000000000000000000000000000101009078000026625d838eb2b46efcceda000060cb155d00002f485203830aaf13f600ff020000010000000000000000000001fe8000000000"], 0x0) 2018/04/06 23:44:52 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="d6", 0x1}], 0x1, &(0x7f00000000c0)}, 0x0) [ 61.043644] ================================================================== [ 61.051053] BUG: KMSAN: uninit-value in ipv6_frag_rcv+0xfa5/0x6970 [ 61.057371] CPU: 1 PID: 5253 Comm: syz-executor1 Not tainted 4.16.0+ #81 [ 61.064206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.073551] Call Trace: [ 61.076127] [ 61.078277] dump_stack+0x185/0x1d0 [ 61.081910] ? ipv6_frag_rcv+0xfa5/0x6970 [ 61.086057] kmsan_report+0x142/0x240 [ 61.089858] __msan_warning_32+0x6c/0xb0 [ 61.093920] ipv6_frag_rcv+0xfa5/0x6970 [ 61.097899] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 61.103267] ? ipv6_frag_exit+0x90/0x90 [ 61.107239] ip6_input_finish+0xa62/0x2110 [ 61.111473] ? ip6table_filter_hook+0xb5/0xe0 [ 61.115964] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 61.121328] ip6_input+0x294/0x320 [ 61.124871] ? ip6_input+0x320/0x320 [ 61.128583] ? ipv6_rcv+0x26d0/0x26d0 [ 61.132386] ipv6_rcv+0x20ec/0x26d0 [ 61.136015] ? local_bh_enable+0x40/0x40 [ 61.140087] __netif_receive_skb_core+0x47cf/0x4a80 [ 61.145104] ? kmsan_set_origin_inline+0x6b/0x120 [ 61.149937] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 61.155719] ? ip6_rcv_finish+0x4d0/0x4d0 [ 61.159846] process_backlog+0x62d/0xe20 [ 61.163885] ? rps_trigger_softirq+0x2f0/0x2f0 [ 61.168443] net_rx_action+0x7c1/0x1a70 [ 61.172396] ? net_tx_action+0xab0/0xab0 [ 61.176434] __do_softirq+0x56d/0x93d [ 61.180216] do_softirq_own_stack+0x2a/0x40 [ 61.184518] [ 61.186752] __local_bh_enable_ip+0x114/0x140 [ 61.191292] local_bh_enable+0x36/0x40 [ 61.195165] ip6_finish_output2+0x1b6c/0x1f20 [ 61.199642] ip6_finish_output+0xb3f/0xc00 [ 61.203869] ip6_output+0x597/0x6c0 [ 61.207482] ? ip6_output+0x6c0/0x6c0 [ 61.211264] ? ac6_seq_show+0x200/0x200 [ 61.215225] ip6_local_out+0x573/0x640 [ 61.219100] ? __ip6_local_out+0x4f0/0x4f0 [ 61.223327] ip6_push_pending_frames+0x218/0x4d0 [ 61.228075] rawv6_sendmsg+0x4500/0x4cc0 [ 61.232124] ? kmsan_set_origin_inline+0x6b/0x120 [ 61.236956] ? futex_wait_queue_me+0x4ba/0x710 [ 61.241528] ? futex_wait_queue_me+0x4ee/0x710 [ 61.246101] ? compat_rawv6_ioctl+0x30/0x30 [ 61.250402] inet_sendmsg+0x48d/0x740 [ 61.254352] ? security_socket_sendmsg+0x9e/0x210 [ 61.259183] ? inet_getname+0x500/0x500 [ 61.263145] sock_write_iter+0x3b9/0x470 [ 61.267205] ? sock_read_iter+0x480/0x480 [ 61.271331] do_iter_readv_writev+0x7bb/0x970 [ 61.275806] ? sock_read_iter+0x480/0x480 [ 61.279937] do_iter_write+0x30d/0xd40 [ 61.283815] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 61.289252] do_writev+0x3c9/0x830 [ 61.292785] ? syscall_return_slowpath+0xe9/0x700 [ 61.297623] SYSC_writev+0x9b/0xb0 [ 61.301153] SyS_writev+0x56/0x80 [ 61.304594] do_syscall_64+0x309/0x430 [ 61.308463] ? SYSC_readv+0xb0/0xb0 [ 61.312082] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.317256] RIP: 0033:0x455259 [ 61.320419] RSP: 002b:00007f361b3ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 61.328102] RAX: ffffffffffffffda RBX: 00007f361b3cd6d4 RCX: 0000000000455259 [ 61.335350] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 61.342597] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 61.349841] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.357094] R13: 00000000000006cd R14: 00000000006fd3d8 R15: 0000000000000000 [ 61.364350] [ 61.365952] Uninit was stored to memory at: [ 61.370254] kmsan_internal_chain_origin+0x12b/0x210 [ 61.375338] kmsan_memcpy_origins+0x11d/0x170 [ 61.379828] __msan_memcpy+0x19f/0x1f0 [ 61.383703] skb_copy_bits+0x63a/0xdb0 [ 61.387567] __pskb_pull_tail+0x483/0x22e0 [ 61.391777] ipv6_frag_rcv+0x1894/0x6970 [ 61.395814] ip6_input_finish+0xa62/0x2110 [ 61.400031] ip6_input+0x294/0x320 [ 61.403555] ipv6_rcv+0x20ec/0x26d0 [ 61.407169] __netif_receive_skb_core+0x47cf/0x4a80 [ 61.412178] process_backlog+0x62d/0xe20 [ 61.416234] net_rx_action+0x7c1/0x1a70 [ 61.420209] __do_softirq+0x56d/0x93d [ 61.423983] Uninit was created at: [ 61.427501] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 61.432500] kmsan_alloc_page+0x82/0xe0 [ 61.436460] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 61.441204] alloc_pages_current+0x6b5/0x970 [ 61.445602] skb_page_frag_refill+0x3ba/0x5e0 [ 61.450088] sk_page_frag_refill+0xa4/0x340 [ 61.454395] __ip6_append_data+0x1a20/0x4bb0 [ 61.458779] ip6_append_data+0x40e/0x6b0 [ 61.462817] rawv6_sendmsg+0x2787/0x4cc0 [ 61.466853] inet_sendmsg+0x48d/0x740 [ 61.470635] sock_write_iter+0x3b9/0x470 [ 61.474681] do_iter_readv_writev+0x7bb/0x970 [ 61.479161] do_iter_write+0x30d/0xd40 [ 61.483028] do_writev+0x3c9/0x830 [ 61.486553] SYSC_writev+0x9b/0xb0 [ 61.490080] SyS_writev+0x56/0x80 [ 61.493509] do_syscall_64+0x309/0x430 [ 61.497372] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.502532] ================================================================== [ 61.509872] Disabling lock debugging due to kernel taint [ 61.515302] Kernel panic - not syncing: panic_on_warn set ... [ 61.515302] [ 61.522665] CPU: 1 PID: 5253 Comm: syz-executor1 Tainted: G B 4.16.0+ #81 [ 61.530795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.540136] Call Trace: [ 61.542708] [ 61.544858] dump_stack+0x185/0x1d0 [ 61.548488] panic+0x39d/0x940 [ 61.551703] ? ipv6_frag_rcv+0xfa5/0x6970 [ 61.555847] kmsan_report+0x238/0x240 [ 61.559647] __msan_warning_32+0x6c/0xb0 [ 61.563708] ipv6_frag_rcv+0xfa5/0x6970 [ 61.567678] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 61.573037] ? ipv6_frag_exit+0x90/0x90 [ 61.576999] ip6_input_finish+0xa62/0x2110 [ 61.581221] ? ip6table_filter_hook+0xb5/0xe0 [ 61.585694] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 61.591056] ip6_input+0x294/0x320 [ 61.594590] ? ip6_input+0x320/0x320 [ 61.598285] ? ipv6_rcv+0x26d0/0x26d0 [ 61.602071] ipv6_rcv+0x20ec/0x26d0 [ 61.605697] ? local_bh_enable+0x40/0x40 [ 61.609744] __netif_receive_skb_core+0x47cf/0x4a80 [ 61.614752] ? kmsan_set_origin_inline+0x6b/0x120 [ 61.619572] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 61.625533] ? ip6_rcv_finish+0x4d0/0x4d0 [ 61.629658] process_backlog+0x62d/0xe20 [ 61.633698] ? rps_trigger_softirq+0x2f0/0x2f0 [ 61.638257] net_rx_action+0x7c1/0x1a70 [ 61.642218] ? net_tx_action+0xab0/0xab0 [ 61.646257] __do_softirq+0x56d/0x93d [ 61.650051] do_softirq_own_stack+0x2a/0x40 [ 61.654356] [ 61.656593] __local_bh_enable_ip+0x114/0x140 [ 61.661083] local_bh_enable+0x36/0x40 [ 61.664951] ip6_finish_output2+0x1b6c/0x1f20 [ 61.669426] ip6_finish_output+0xb3f/0xc00 [ 61.673641] ip6_output+0x597/0x6c0 [ 61.677246] ? ip6_output+0x6c0/0x6c0 [ 61.681037] ? ac6_seq_show+0x200/0x200 [ 61.684999] ip6_local_out+0x573/0x640 [ 61.688871] ? __ip6_local_out+0x4f0/0x4f0 [ 61.693084] ip6_push_pending_frames+0x218/0x4d0 [ 61.697817] rawv6_sendmsg+0x4500/0x4cc0 [ 61.701857] ? kmsan_set_origin_inline+0x6b/0x120 [ 61.706683] ? futex_wait_queue_me+0x4ba/0x710 [ 61.711242] ? futex_wait_queue_me+0x4ee/0x710 [ 61.715804] ? compat_rawv6_ioctl+0x30/0x30 [ 61.720105] inet_sendmsg+0x48d/0x740 [ 61.723881] ? security_socket_sendmsg+0x9e/0x210 [ 61.728704] ? inet_getname+0x500/0x500 [ 61.732653] sock_write_iter+0x3b9/0x470 [ 61.736696] ? sock_read_iter+0x480/0x480 [ 61.740829] do_iter_readv_writev+0x7bb/0x970 [ 61.745319] ? sock_read_iter+0x480/0x480 [ 61.749450] do_iter_write+0x30d/0xd40 [ 61.753334] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 61.758784] do_writev+0x3c9/0x830 [ 61.762322] ? syscall_return_slowpath+0xe9/0x700 [ 61.767145] SYSC_writev+0x9b/0xb0 [ 61.770664] SyS_writev+0x56/0x80 [ 61.774101] do_syscall_64+0x309/0x430 [ 61.777975] ? SYSC_readv+0xb0/0xb0 [ 61.781589] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.786752] RIP: 0033:0x455259 [ 61.789916] RSP: 002b:00007f361b3ccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 61.797598] RAX: ffffffffffffffda RBX: 00007f361b3cd6d4 RCX: 0000000000455259 [ 61.804852] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 61.812107] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 61.819354] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.826598] R13: 00000000000006cd R14: 00000000006fd3d8 R15: 0000000000000000 [ 61.834301] Dumping ftrace buffer: [ 61.837820] (ftrace buffer empty) [ 61.841499] Kernel Offset: disabled [ 61.845096] Rebooting in 86400 seconds..