INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. 2018/04/07 07:13:33 fuzzer started 2018/04/07 07:13:34 dialing manager at 10.128.0.26:38639 2018/04/07 07:13:39 kcov=true, comps=false 2018/04/07 07:13:42 executing program 0: symlink(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00') lgetxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@known='system.posix_acl_access\x00', &(0x7f0000000a00)=""/222, 0xde) 2018/04/07 07:13:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000006000)='\x00', 0x0) fstatfs(r0, &(0x7f0000004ff8)=""/8) 2018/04/07 07:13:42 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000001400)=0x61, 0x4) 2018/04/07 07:13:42 executing program 1: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000784fef)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00006fb000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x1}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x40}], 0x2, &(0x7f00000001c0)={0x0, r2+10000000}, &(0x7f0000000200), 0x8) 2018/04/07 07:13:42 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 2018/04/07 07:13:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00004a0000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x101000, 0x0) r2 = dup3(r0, r0, 0x80000) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) 2018/04/07 07:13:42 executing program 5: r0 = gettid() exit(0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000280)) 2018/04/07 07:13:42 executing program 6: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000035c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000003580)={&(0x7f0000002280)={0x14, 0x24, 0x3}, 0x14}, 0x1}, 0x0) syzkaller login: [ 42.052438] ip (3748) used greatest stack depth: 54688 bytes left [ 42.323979] ip (3772) used greatest stack depth: 54672 bytes left [ 43.106284] ip (3847) used greatest stack depth: 54200 bytes left [ 45.606376] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.669818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.868410] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.920926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.036581] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.073266] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.114865] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.185289] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.563368] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.800614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.838993] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.856490] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.871994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.944894] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.074656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.127882] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.354956] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.361223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.373120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.581948] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.588272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.596154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.632270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.641496] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.648649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.661776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.683683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.708504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.724403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.738676] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.747635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.777642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.806392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.827066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.891715] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.897995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.919892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.069100] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.075381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.084133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 07:13:59 executing program 7: mkdir(&(0x7f0000062ff6)='./control\x00', 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f000003cff6)='./control\x00', 0x220001a1) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) read(r0, &(0x7f0000058fef)=""/32, 0x20) 2018/04/07 07:13:59 executing program 1: 2018/04/07 07:13:59 executing program 7: 2018/04/07 07:13:59 executing program 6: 2018/04/07 07:14:00 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907f20400", 0x5) 2018/04/07 07:14:00 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/07 07:14:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2e, 0x301, 0x0, 0x0, {0x3}, [@typed={0x14, 0x0, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, 0x28}, 0x1}, 0x0) 2018/04/07 07:14:00 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000184000)={0x2, 0x40000000000010, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/07 07:14:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000040)=""/8, 0x1b6, 0x0) 2018/04/07 07:14:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:00 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f000058eff8)) read(r0, &(0x7f0000000000)=""/153, 0x99) 2018/04/07 07:14:00 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}}) clone(0x0, &(0x7f0000592ffe), &(0x7f0000bb3000), &(0x7f0000362000), &(0x7f000046e000)) pipe(&(0x7f0000652ff8)) 2018/04/07 07:14:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee, 0x0, 0x40000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/07 07:14:01 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xffffffff}], 0x1) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000a80)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000040), 0x217, &(0x7f0000000040)=[{0x10}], 0x10}}], 0x2, 0x0) 2018/04/07 07:14:01 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/04/07 07:14:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 2018/04/07 07:14:02 executing program 0: 2018/04/07 07:14:02 executing program 7: 2018/04/07 07:14:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:02 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') exit(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000080)=""/125, 0x7d) 2018/04/07 07:14:02 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/07 07:14:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x94, 0x0, 0x0, 0x1}]}) 2018/04/07 07:14:02 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, &(0x7f0000edf000), &(0x7f00005c1000), &(0x7f00003e0ffc), &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000240), 0x0, 0x0) getrlimit(0x0, &(0x7f00000001c0)) 2018/04/07 07:14:02 executing program 0: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00009d7000)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendto(r0, &(0x7f000097f000), 0x360cc1, 0x0, &(0x7f0000bdb000)=@sco={0x1f}, 0x8) 2018/04/07 07:14:02 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb, 0x20011, r1, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001a00033207fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000000c40)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000e00), 0x0, &(0x7f00000021c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xa) 2018/04/07 07:14:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) close(r0) close(r1) r2 = socket$inet6_sctp(0xa, 0x200000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961000)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000095cffe)={r3}, &(0x7f000095c000)=0x8) listen(r1, 0x0) 2018/04/07 07:14:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 2018/04/07 07:14:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:02 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}}) clone(0x0, &(0x7f0000592ffe), &(0x7f0000bb3000), &(0x7f0000362000), &(0x7f000046e000)) madvise(&(0x7f0000153000/0x800000)=nil, 0x800000, 0xf) pipe(&(0x7f0000652ff8)) 2018/04/07 07:14:02 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000cdcfb0)={{0x1}}) 2018/04/07 07:14:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x62, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x7, 0x0, &(0x7f0000000140), &(0x7f0000000080), 0x0) 2018/04/07 07:14:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000f8d000)='smaps\x00') r1 = socket$unix(0x1, 0x3, 0x0) dup2(r1, r0) 2018/04/07 07:14:03 executing program 6: perf_event_open(&(0x7f0000940000)={0x6, 0x70, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/07 07:14:03 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:03 executing program 7: r0 = perf_event_open(&(0x7f0000940000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2801}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/04/07 07:14:03 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/07 07:14:03 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "7d6496", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 2018/04/07 07:14:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f0000a9cff8)) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/223, 0xdf}, 0x0) 2018/04/07 07:14:03 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "f6a14de36addc702a9e531ae2ce47acb38a429351f3452396ef55d07925fc6d1d3d363241e711b07f5a00db1499f3a6c35aac8a7ba29509c58ce2ec44c925269e7f970e8881e93f9529a2cd600f87e7d"}, 0xd8) shutdown(r1, 0x1) 2018/04/07 07:14:03 executing program 3: r0 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:03 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'vcan0\x00', &(0x7f0000000580)=@ethtool_eeprom={0xb}}) 2018/04/07 07:14:03 executing program 2: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)="6d937543756510", 0x0, &(0x7f0000ebcffe)) 2018/04/07 07:14:03 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/134, 0x86, 0x745a440) 2018/04/07 07:14:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=@updsa={0x188, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff]}, @in6}, {@in=@rand_addr, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm(cast6)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x188}, 0x1}, 0x0) 2018/04/07 07:14:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff]}, @in6}, {@in=@rand_addr, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm(cast6)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/07 07:14:03 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)="21252a262676796e657430236d643573756d776c616e307f10df6bfbcf0e7ab3b9cec8e522b66124659447c1ae13074c6529c024c85d90e8d6f1145b4ea917c1965a32a173461f5153b0a77ab1") 2018/04/07 07:14:04 executing program 6: capset(&(0x7f0000fcdff8)={0x4000019980330}, &(0x7f0000000000)={0x800000, 0xfffffffffff7ffff}) ioprio_set$pid(0x3, 0x0, 0x0) 2018/04/07 07:14:04 executing program 2: set_mempolicy(0x4, &(0x7f00001cd000), 0x3) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) 2018/04/07 07:14:04 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:04 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:04 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@random="fd7ff96905d1"]}) 2018/04/07 07:14:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=@updsa={0x188, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff]}, @in6}, {@in=@rand_addr, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm(cast6)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x188}, 0x1}, 0x0) 2018/04/07 07:14:04 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000016) 2018/04/07 07:14:04 executing program 7: syz_emit_ethernet(0xe, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="e2701bb60589", [], {@mpls_uc={0x8847}}}, &(0x7f0000ea3000)) [ 61.224005] device bridge0 entered promiscuous mode [ 61.242846] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) 2018/04/07 07:14:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=@updsa={0x188, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff]}, @in6}, {@in=@rand_addr, 0x0, 0x33}, @in6, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm(cast6)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x188}, 0x1}, 0x0) 2018/04/07 07:14:04 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}, {{@in=@rand_addr, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x9}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x33}, 0x0, @in=@multicast1=0xe0000001}]}]}, 0x16c}, 0x1}, 0x0) 2018/04/07 07:14:04 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000000000000001900a307a000000600000000000000d54400009b61136ef75afb83de448daa7227c43ab8220000060cec4fab91", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:04 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000006000)}, 0x0) 2018/04/07 07:14:04 executing program 6: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000002000000000000ffff0c00000000000000000000005b659a62290ffc380c2dbfc75e9f17e104000000000000001cb4e2bf501db1bb949869c29c4d914d9f26a203415e66cd4dd3050b183c0612e4c3080c9112030058cf0d70309f7f1969136edfd73294c0351575a9e8aa5944f2a432a15b3fe56aa5"], 0x81}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) 2018/04/07 07:14:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00007cfff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000000200)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, @NDA_DST_IPV4={0x8, 0x1, @local={0xac, 0x14, 0x14, 0xaa}}]}, 0x30}, 0x1}, 0x0) 2018/04/07 07:14:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f000000af89)="0600", 0x2}], 0x1, &(0x7f0000026000)}, 0x2000c080) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000015000)=[{&(0x7f0000000780)="0eb573a132b792c454f877b82c7500100000100000004eafbb4d", 0x1a}], 0x1}, 0x0) [ 61.404940] device bridge0 left promiscuous mode [ 61.505372] ================================================================== [ 61.512870] BUG: KMSAN: uninit-value in tcp_v6_rcv+0x86e/0x62c0 [ 61.518928] CPU: 0 PID: 5294 Comm: syz-executor2 Not tainted 4.16.0+ #81 [ 61.525763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.535110] Call Trace: [ 61.537683] [ 61.539832] dump_stack+0x185/0x1d0 [ 61.543459] ? tcp_v6_rcv+0x86e/0x62c0 [ 61.547342] kmsan_report+0x142/0x240 [ 61.551138] __msan_warning_32+0x6c/0xb0 [ 61.555199] tcp_v6_rcv+0x86e/0x62c0 [ 61.558917] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 61.564290] ? ip6_input_finish+0x805/0x2110 [ 61.568699] ? tcp_v6_early_demux+0xab0/0xab0 [ 61.573194] ip6_input_finish+0xa62/0x2110 [ 61.577430] ? ip6table_filter_hook+0xb5/0xe0 [ 61.581924] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 61.587292] ? ip6_input_finish+0x12a1/0x2110 [ 61.591788] ip6_input+0x294/0x320 [ 61.595325] ? ip6_input+0x320/0x320 [ 61.599037] ? ipv6_rcv+0x26d0/0x26d0 [ 61.602838] ipv6_rcv+0x20ec/0x26d0 [ 61.606462] ? local_bh_enable+0x40/0x40 [ 61.610531] __netif_receive_skb_core+0x47cf/0x4a80 [ 61.615549] ? rb_insert_color+0x1122/0x1300 [ 61.619957] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 61.625758] ? ip6_rcv_finish+0x4d0/0x4d0 [ 61.629906] process_backlog+0x62d/0xe20 [ 61.634146] ? rps_trigger_softirq+0x2f0/0x2f0 [ 61.638722] net_rx_action+0x7c1/0x1a70 [ 61.642700] ? net_tx_action+0xab0/0xab0 [ 61.646761] __do_softirq+0x56d/0x93d [ 61.650570] do_softirq_own_stack+0x2a/0x40 [ 61.654880] [ 61.657119] __local_bh_enable_ip+0x114/0x140 [ 61.661616] local_bh_enable+0x36/0x40 [ 61.665506] ip6_finish_output2+0x1b6c/0x1f20 [ 61.670011] ip6_finish_output+0xb3f/0xc00 [ 61.674254] ip6_output+0x597/0x6c0 [ 61.677884] ? ip6_output+0x6c0/0x6c0 [ 61.681686] ? ac6_seq_show+0x200/0x200 [ 61.685659] ip6_local_out+0x573/0x640 [ 61.689547] ? __ip6_local_out+0x4f0/0x4f0 [ 61.693789] ip6_push_pending_frames+0x218/0x4d0 [ 61.698550] rawv6_sendmsg+0x4500/0x4cc0 [ 61.702614] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 61.707975] ? rw_copy_check_uvector+0x5af/0x6c0 [ 61.712743] ? compat_rawv6_ioctl+0x30/0x30 [ 61.717059] inet_sendmsg+0x48d/0x740 [ 61.720855] ? security_socket_sendmsg+0x9e/0x210 [ 61.725697] ? inet_getname+0x500/0x500 [ 61.729666] ___sys_sendmsg+0xec0/0x1310 [ 61.733727] ? __fdget+0x4e/0x60 [ 61.737088] ? __fget_light+0x56/0x710 [ 61.740970] ? __fdget+0x4e/0x60 [ 61.744334] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 61.749692] ? __fget_light+0x6b9/0x710 [ 61.753677] SYSC_sendmsg+0x2a3/0x3d0 [ 61.757479] SyS_sendmsg+0x54/0x80 [ 61.761018] do_syscall_64+0x309/0x430 [ 61.764909] ? ___sys_sendmsg+0x1310/0x1310 [ 61.769228] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.774408] RIP: 0033:0x455259 [ 61.777588] RSP: 002b:00007fbcb0009c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.785295] RAX: ffffffffffffffda RBX: 00007fbcb000a6d4 RCX: 0000000000455259 [ 61.792558] RDX: 0000000000000000 RSI: 000000002001b000 RDI: 0000000000000013 [ 61.799821] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 61.807089] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.814346] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 61.821599] [ 61.823200] Uninit was stored to memory at: [ 61.827587] kmsan_internal_chain_origin+0x12b/0x210 [ 61.832664] kmsan_memcpy_origins+0x11d/0x170 [ 61.837134] __msan_memcpy+0x19f/0x1f0 [ 61.840995] skb_copy_bits+0x63a/0xdb0 [ 61.844863] __pskb_pull_tail+0x483/0x22e0 [ 61.849074] tcp_v6_rcv+0x81f/0x62c0 [ 61.852762] ip6_input_finish+0xa62/0x2110 [ 61.856969] ip6_input+0x294/0x320 [ 61.860483] ipv6_rcv+0x20ec/0x26d0 [ 61.864096] __netif_receive_skb_core+0x47cf/0x4a80 [ 61.869091] process_backlog+0x62d/0xe20 [ 61.873142] net_rx_action+0x7c1/0x1a70 [ 61.877110] __do_softirq+0x56d/0x93d [ 61.880881] Uninit was created at: [ 61.884406] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 61.889397] kmsan_alloc_page+0x82/0xe0 [ 61.893345] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 61.898078] alloc_pages_current+0x6b5/0x970 [ 61.902460] skb_page_frag_refill+0x3ba/0x5e0 [ 61.906930] sk_page_frag_refill+0xa4/0x340 [ 61.911227] __ip6_append_data+0x1a20/0x4bb0 [ 61.915609] ip6_append_data+0x40e/0x6b0 [ 61.919649] rawv6_sendmsg+0x2787/0x4cc0 [ 61.923687] inet_sendmsg+0x48d/0x740 [ 61.927465] ___sys_sendmsg+0xec0/0x1310 [ 61.931501] SYSC_sendmsg+0x2a3/0x3d0 [ 61.935283] SyS_sendmsg+0x54/0x80 [ 61.938805] do_syscall_64+0x309/0x430 [ 61.942672] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.947838] ================================================================== [ 61.955172] Disabling lock debugging due to kernel taint [ 61.960601] Kernel panic - not syncing: panic_on_warn set ... [ 61.960601] [ 61.967938] CPU: 0 PID: 5294 Comm: syz-executor2 Tainted: G B 4.16.0+ #81 [ 61.976053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.985388] Call Trace: [ 61.987954] [ 61.990083] dump_stack+0x185/0x1d0 [ 61.993688] panic+0x39d/0x940 [ 61.996866] ? tcp_v6_rcv+0x86e/0x62c0 [ 62.000733] kmsan_report+0x238/0x240 [ 62.004510] __msan_warning_32+0x6c/0xb0 [ 62.008546] tcp_v6_rcv+0x86e/0x62c0 [ 62.012240] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 62.017584] ? ip6_input_finish+0x805/0x2110 [ 62.021979] ? tcp_v6_early_demux+0xab0/0xab0 [ 62.026454] ip6_input_finish+0xa62/0x2110 [ 62.030678] ? ip6table_filter_hook+0xb5/0xe0 [ 62.035167] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 62.040519] ? ip6_input_finish+0x12a1/0x2110 [ 62.044991] ip6_input+0x294/0x320 [ 62.048520] ? ip6_input+0x320/0x320 [ 62.052214] ? ipv6_rcv+0x26d0/0x26d0 [ 62.056000] ipv6_rcv+0x20ec/0x26d0 [ 62.059617] ? local_bh_enable+0x40/0x40 [ 62.063662] __netif_receive_skb_core+0x47cf/0x4a80 [ 62.068656] ? rb_insert_color+0x1122/0x1300 [ 62.073058] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 62.078853] ? ip6_rcv_finish+0x4d0/0x4d0 [ 62.082998] process_backlog+0x62d/0xe20 [ 62.087061] ? rps_trigger_softirq+0x2f0/0x2f0 [ 62.091633] net_rx_action+0x7c1/0x1a70 [ 62.095604] ? net_tx_action+0xab0/0xab0 [ 62.099658] __do_softirq+0x56d/0x93d [ 62.103451] do_softirq_own_stack+0x2a/0x40 [ 62.107753] [ 62.109972] __local_bh_enable_ip+0x114/0x140 [ 62.114445] local_bh_enable+0x36/0x40 [ 62.118311] ip6_finish_output2+0x1b6c/0x1f20 [ 62.122788] ip6_finish_output+0xb3f/0xc00 [ 62.127011] ip6_output+0x597/0x6c0 [ 62.130622] ? ip6_output+0x6c0/0x6c0 [ 62.134402] ? ac6_seq_show+0x200/0x200 [ 62.138355] ip6_local_out+0x573/0x640 [ 62.142225] ? __ip6_local_out+0x4f0/0x4f0 [ 62.146447] ip6_push_pending_frames+0x218/0x4d0 [ 62.151184] rawv6_sendmsg+0x4500/0x4cc0 [ 62.155233] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 62.160578] ? rw_copy_check_uvector+0x5af/0x6c0 [ 62.165338] ? compat_rawv6_ioctl+0x30/0x30 [ 62.169645] inet_sendmsg+0x48d/0x740 [ 62.173422] ? security_socket_sendmsg+0x9e/0x210 [ 62.178240] ? inet_getname+0x500/0x500 [ 62.182193] ___sys_sendmsg+0xec0/0x1310 [ 62.186258] ? __fdget+0x4e/0x60 [ 62.189627] ? __fget_light+0x56/0x710 [ 62.194038] ? __fdget+0x4e/0x60 [ 62.197401] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 62.202758] ? __fget_light+0x6b9/0x710 [ 62.206723] SYSC_sendmsg+0x2a3/0x3d0 [ 62.210504] SyS_sendmsg+0x54/0x80 [ 62.214034] do_syscall_64+0x309/0x430 [ 62.217911] ? ___sys_sendmsg+0x1310/0x1310 [ 62.222212] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 62.227380] RIP: 0033:0x455259 [ 62.230554] RSP: 002b:00007fbcb0009c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.238236] RAX: ffffffffffffffda RBX: 00007fbcb000a6d4 RCX: 0000000000455259 [ 62.245483] RDX: 0000000000000000 RSI: 000000002001b000 RDI: 0000000000000013 [ 62.252731] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 62.259978] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 62.267222] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 62.274926] Dumping ftrace buffer: [ 62.278441] (ftrace buffer empty) [ 62.282122] Kernel Offset: disabled [ 62.285719] Rebooting in 86400 seconds..