INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. 2018/04/13 09:08:31 fuzzer started 2018/04/13 09:08:32 dialing manager at 10.128.0.26:33379 2018/04/13 09:08:39 kcov=true, comps=false 2018/04/13 09:08:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="0000ff000a000200aaaaaaaaaacc6000"], 0x2}, 0x1}, 0x0) 2018/04/13 09:08:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) 2018/04/13 09:08:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x8, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 'team_slave_1\x00'}) 2018/04/13 09:08:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup/syz0\x00', 0x200002, 0x0) 2018/04/13 09:08:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000240)=ANY=[]}) 2018/04/13 09:08:42 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [0xff, 0xff], @rand_addr}, @dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfe}) 2018/04/13 09:08:42 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) 2018/04/13 09:08:42 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x32, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) syzkaller login: [ 44.473463] ip (3721) used greatest stack depth: 54672 bytes left [ 45.736019] ip (3842) used greatest stack depth: 54200 bytes left [ 45.967610] ip (3862) used greatest stack depth: 53960 bytes left [ 46.189716] ip (3878) used greatest stack depth: 53640 bytes left [ 46.260275] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.266776] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.317014] device bridge_slave_0 entered promiscuous mode [ 46.339864] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.346330] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.359467] device bridge_slave_0 entered promiscuous mode [ 46.384086] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.390582] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.419568] device bridge_slave_0 entered promiscuous mode [ 46.441914] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.448402] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.469986] device bridge_slave_0 entered promiscuous mode [ 46.500419] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.506929] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.528559] device bridge_slave_0 entered promiscuous mode [ 46.554219] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.560697] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.580975] device bridge_slave_1 entered promiscuous mode [ 46.591236] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.598167] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.615242] device bridge_slave_0 entered promiscuous mode [ 46.630848] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.637371] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.651130] device bridge_slave_1 entered promiscuous mode [ 46.663764] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.670231] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.693233] device bridge_slave_1 entered promiscuous mode [ 46.702639] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.709186] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.727148] device bridge_slave_0 entered promiscuous mode [ 46.745155] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.751617] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.769090] device bridge_slave_0 entered promiscuous mode [ 46.778229] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.784690] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.808117] device bridge_slave_1 entered promiscuous mode [ 46.816466] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.822958] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.843084] device bridge_slave_1 entered promiscuous mode [ 46.864614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.878930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.886585] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.893168] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.917123] device bridge_slave_1 entered promiscuous mode [ 46.935363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.946181] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.952660] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.992964] device bridge_slave_1 entered promiscuous mode [ 46.999746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.006251] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.030453] device bridge_slave_1 entered promiscuous mode [ 47.040307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.048174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.057711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.088088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.100219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.148090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.216721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.259748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.272412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.288956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.355360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.426098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.515459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.046119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.103856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.145973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.239907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.296787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.315544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.324941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.335599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.356685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.423840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.514815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.524856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.542648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.582206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.665083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.872624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.159314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.355886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.371860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.398851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.437283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.556737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.581490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.598358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.610409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.634936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.658097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.672335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.679769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.690010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.778626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.814533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.823628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.834825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.866665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.873832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.902307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.931228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.945354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.959376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.968204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.976197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.983909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.002279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.024099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.049877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.080908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.093844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.103633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.145585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.173900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.189120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.212094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.232303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.244418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.251863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.267385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.299574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.332850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.352012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.361218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.374184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.381278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.390362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.424938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.457811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.474681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.487305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.503614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.515052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.536555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.554157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.574629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.599561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.626344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.659640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.680956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.729950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.738552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.755116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.283745] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.290297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.297243] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.303700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.343503] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.350143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.594469] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.601138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.608074] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.614539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.669300] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.696489] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.702998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.709910] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.716396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.736127] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.749884] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.756392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.763326] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.769806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.822348] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.851291] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.857777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.864644] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.871136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.935018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.945788] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.952289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.959243] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.965740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.022963] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.038904] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.045409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.052355] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.058827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.073060] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.289515] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.296026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.303200] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.309775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.356095] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.408154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.420348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.453119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.488666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.515807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.531522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.541694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.933837] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.044705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.242605] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.276632] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.384456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.400176] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.520217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.714140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.720427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.733633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.845801] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.852178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.864795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.982152] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.988464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.001661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.038831] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.114717] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.121170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.129226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.291947] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.298243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.308140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.334408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.340700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.352936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.398107] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.408193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.431360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.892941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.899600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.907871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 09:09:08 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x30}, {&(0x7f0000957ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x0) 2018/04/13 09:09:08 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000f9bffc), 0x4) 2018/04/13 09:09:08 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r0, 0x7) 2018/04/13 09:09:09 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000f9bffc), 0x4) sendmsg$inet_sctp(r0, &(0x7f0000557fc8)={&(0x7f0000ed5fe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000001040)}, 0x0) 2018/04/13 09:09:09 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x4000084}, 0x0) 2018/04/13 09:09:09 executing program 6: socket$inet_sctp(0x2, 0x1, 0x84) 2018/04/13 09:09:09 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}], 0x1, 0x0, &(0x7f0000000400), 0x8) 2018/04/13 09:09:09 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000002c00)=[{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000006c0), 0x0, &(0x7f0000000d40)=[@rights={0x10, 0x1, 0x1, [0xffffffffffffffff]}], 0x10}], 0x1, 0x0) [ 69.147739] netlink: 'syz-executor5': attribute type 29 has an invalid length. [ 69.155250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 69.232619] netlink: 'syz-executor5': attribute type 29 has an invalid length. [ 69.240206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/13 09:09:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}}]}, 0x28}, 0x1}, 0x0) 2018/04/13 09:09:09 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/13 09:09:09 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x32, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/13 09:09:09 executing program 6: r0 = socket$inet(0x10, 0x2, 0x9) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/13 09:09:09 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffdcc) 2018/04/13 09:09:09 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) 2018/04/13 09:09:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/13 09:09:09 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/13 09:09:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @rand_addr}}) 2018/04/13 09:09:09 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/13 09:09:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f00003c4ff0)={&(0x7f00002a0e50)={0x14, 0x18, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/04/13 09:09:09 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) fstatfs(r0, &(0x7f00000001c0)=""/200) 2018/04/13 09:09:09 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/13 09:09:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x10000a0, &(0x7f00000000c0)=ANY=[]) 2018/04/13 09:09:09 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000420000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) [ 69.865196] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 69.872801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 70.005588] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 70.013202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/13 09:09:10 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000f9bffc), 0x4) 2018/04/13 09:09:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc004, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/13 09:09:10 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/13 09:09:10 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000ed4000)=0x76, 0x4) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000e00)="1d", 0x1, 0x0, 0x0, 0x0) 2018/04/13 09:09:10 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcd9df00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10000cf", 0x1f) 2018/04/13 09:09:10 executing program 5: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 2018/04/13 09:09:10 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000f9bffc)=0x800, 0x4) 2018/04/13 09:09:10 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{&(0x7f0000000240), 0x0, 0xffffffffffffffff}], 0x2000001, &(0x7f00000015c0)={[{@check_int_print_mask={'check_int_print_mask', 0x3d, [0x0]}, 0x2c}]}) [ 70.177910] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/13 09:09:10 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"6c6f01000000000800", 0x3}) 2018/04/13 09:09:10 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000ed4000)=0x76, 0x4) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000e00)="1d", 0x1, 0x0, 0x0, 0x0) 2018/04/13 09:09:10 executing program 6: socketpair$inet(0x2, 0xa, 0x0, &(0x7f0000000040)) 2018/04/13 09:09:10 executing program 3: setrlimit(0xe, &(0x7f0000000000)={0x0, 0xfff}) [ 70.347656] netlink: 'syz-executor2': attribute type 3 has an invalid length. 2018/04/13 09:09:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2, 0x3}, 0x20) [ 70.414913] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 70.415461] netlink: 'syz-executor2': attribute type 3 has an invalid length. [ 70.507172] syz-executor6 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/13 09:09:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000ed4000), 0x4) 2018/04/13 09:09:10 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pread64(r0, &(0x7f0000000200)=""/8, 0x5a, 0xa2) 2018/04/13 09:09:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2}, 0x0, 0x0, 0x3f, 0x0, 0x0, &(0x7f0000000240)='veth0_to_bridge\x00'}) 2018/04/13 09:09:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x80ffffff]}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/13 09:09:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/13 09:09:10 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$packet(r1, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x14) 2018/04/13 09:09:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) 2018/04/13 09:09:10 executing program 4: syz_open_dev$evdev(&(0x7f0000001e40)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/13 09:09:10 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, @thr={&(0x7f0000000100), &(0x7f0000000200)}}, &(0x7f0000000300)) timer_delete(0x0) 2018/04/13 09:09:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000100)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) 2018/04/13 09:09:10 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pread64(r0, &(0x7f0000000200)=""/8, 0x5a, 0xa2) 2018/04/13 09:09:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') pread64(r0, &(0x7f0000000200)=""/8, 0x5a, 0xa2) 2018/04/13 09:09:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6gre0\x00', 0x10) 2018/04/13 09:09:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) 2018/04/13 09:09:10 executing program 3: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xb620, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/04/13 09:09:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x48}, 0x1}, 0x0) 2018/04/13 09:09:11 executing program 0: setpriority(0x1, 0x0, 0x0) 2018/04/13 09:09:11 executing program 1: mq_open(&(0x7f0000000000)="9b", 0x7ff, 0x0, &(0x7f0000664fc0)={0x0, 0x20}) 2018/04/13 09:09:11 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) 2018/04/13 09:09:11 executing program 6: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) 2018/04/13 09:09:11 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/250, 0xfa}, 0x0) 2018/04/13 09:09:11 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='net/ip_mr_vif\x00') 2018/04/13 09:09:11 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a40)) 2018/04/13 09:09:11 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') 2018/04/13 09:09:11 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 2018/04/13 09:09:11 executing program 1: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syz_tun\x00'}, 0x18) 2018/04/13 09:09:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getown(r0, 0x9) 2018/04/13 09:09:11 executing program 5: r0 = userfaultfd(0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/108, 0x6c}], 0x1) 2018/04/13 09:09:11 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x5}, 0xfffffffffffffec6) 2018/04/13 09:09:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x20) 2018/04/13 09:09:11 executing program 4: getitimer(0x2, &(0x7f0000000040)) 2018/04/13 09:09:11 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'lo\x00', 0x3}) 2018/04/13 09:09:11 executing program 3: ioprio_set$pid(0x0, 0x0, 0x8) 2018/04/13 09:09:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x1}, 0x20) 2018/04/13 09:09:11 executing program 6: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) 2018/04/13 09:09:11 executing program 5: setitimer(0x2, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000040)) 2018/04/13 09:09:11 executing program 2: setitimer(0x1, &(0x7f0000000000), &(0x7f0000000040)) 2018/04/13 09:09:11 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0) 2018/04/13 09:09:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/13 09:09:11 executing program 3: ioprio_set$pid(0x0, 0x0, 0x0) 2018/04/13 09:09:11 executing program 0: syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x0) 2018/04/13 09:09:11 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000080), 0x56) 2018/04/13 09:09:11 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001140)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x20, 0x0, "755ccbd589963fc68b748315ddb526e75affef53a3f70188af1358d12e76c6b9b89cf84aa9364ed24706c85f515093c2ce55dde6d80a1e59c3c13a7c2d25cea6af78a35d715cd3f9cd358dade09b8351"}, 0xd8) 2018/04/13 09:09:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000080), 0x0) 2018/04/13 09:09:12 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00'}) 2018/04/13 09:09:12 executing program 2: timerfd_create(0x0, 0x2020000800) 2018/04/13 09:09:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2018/04/13 09:09:12 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000000000000000000000000030006000000000002000000e00000eb5f06c70000000000e00000010000000000000000000000000000000000000000"], 0x50}, 0x1}, 0x0) 2018/04/13 09:09:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/04/13 09:09:12 executing program 0: statfs(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/2) 2018/04/13 09:09:12 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200), 0x8) 2018/04/13 09:09:12 executing program 4: socketpair(0x10, 0x0, 0x0, &(0x7f0000000040)) 2018/04/13 09:09:12 executing program 5: socket$inet6(0xa, 0x0, 0x5b4) 2018/04/13 09:09:12 executing program 2: clone(0x2038000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 2018/04/13 09:09:12 executing program 0: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000080)) 2018/04/13 09:09:12 executing program 4: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/04/13 09:09:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bridge_slave_1\x00'}) 2018/04/13 09:09:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000100), 0xfffffc54) 2018/04/13 09:09:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/3, 0x3}, 0x40012001) 2018/04/13 09:09:12 executing program 6: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 2018/04/13 09:09:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/04/13 09:09:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/146, &(0x7f0000000140)=0x92) 2018/04/13 09:09:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, 0x0, 0xffffffffffffff00}) 2018/04/13 09:09:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) 2018/04/13 09:09:12 executing program 5: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/13 09:09:12 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/04/13 09:09:12 executing program 1: clock_gettime(0x2000, &(0x7f0000000100)) 2018/04/13 09:09:12 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) 2018/04/13 09:09:12 executing program 0: capget(&(0x7f00000000c0), &(0x7f0000000100)) 2018/04/13 09:09:12 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000), 0x4) 2018/04/13 09:09:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/04/13 09:09:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, 0x0, 0xffffffffffffff00}) 2018/04/13 09:09:12 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) 2018/04/13 09:09:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000001c0)=0x2f0) 2018/04/13 09:09:13 executing program 7: getrusage(0x1, &(0x7f0000000140)) 2018/04/13 09:09:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/04/13 09:09:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_mr_cache\x00') ioctl$void(r0, 0xc0045878) 2018/04/13 09:09:13 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0), 0x0, 0x0) 2018/04/13 09:09:13 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) 2018/04/13 09:09:13 executing program 5: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) mount(&(0x7f00000026c0)='../file0\x00', &(0x7f00000025c0)='./file0\x00', &(0x7f0000002680)='ufs\x00', 0x5000, 0x0) 2018/04/13 09:09:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/04/13 09:09:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) tee(r0, 0xffffffffffffffff, 0xca1, 0x0) 2018/04/13 09:09:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/23, 0x17, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/13 09:09:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001140)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x0, 0x0, "755ccbd589963fc68b748315ddb526e75affef53a3f70188af1358d12e76c657b89cf84aa9364ed24706c85f515093c2ce55dde6d80a1e59c3c13a7c2d25ce090078a35d715cd3f9cd358dade09b8351"}, 0x2) 2018/04/13 09:09:13 executing program 0: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x8) 2018/04/13 09:09:13 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000240)=0x8) 2018/04/13 09:09:13 executing program 5: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r0, &(0x7f0000000900)) 2018/04/13 09:09:13 executing program 6: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)) 2018/04/13 09:09:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/04/13 09:09:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x304, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x4, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, "0008000000759b288842f5ac1f020409"}) 2018/04/13 09:09:13 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcd9df00", 0x1f) 2018/04/13 09:09:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xeb8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/13 09:09:13 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="81081800001d000000010054409d0954", 0x10) r1 = accept(r0, 0x0, &(0x7f00000005c0)=0xffffffffffffffad) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/13 09:09:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x15}}) 2018/04/13 09:09:13 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/13 09:09:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x1ffff) 2018/04/13 09:09:13 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0xc000, 0x3, &(0x7f0000ff1000/0xc000)=nil) symlinkat(&(0x7f0000000000)='./bus\x00', r0, &(0x7f0000000040)='./bus\x00') madvise(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x80000000000009) 2018/04/13 09:09:13 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000505000)='/dev/sg#\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000480)=0x3) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000240)={0x5, 0xfffffffffffffffd, 0x21f0, 'queue1\x00', 0x7f}) inotify_init1(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x8001, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x2, 0x8, 0xffffffffcbebbf1c, 0x5}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x80000001, 0x0, 0xffffffff}, 0x6, 0x81}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000600)) sync() socket$packet(0x11, 0x0, 0x300) r3 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c9", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="f74dda86") read$eventfd(r1, &(0x7f0000000640), 0x8) gettid() epoll_wait(r3, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x401) getsockname$inet6(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000004c0), &(0x7f0000000580)=0x6) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000400)={r2, 0x9}, 0x8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="b1bdb4c0fc26985066b134ce83d12ade694b6edf704ff96116192551aec53a71d865aae6e7be26d7118c2c957431851914c8"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r4) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) [ 73.741382] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 73.857403] ================================================================== [ 73.864831] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940 [ 73.870900] CPU: 0 PID: 6143 Comm: syz-executor7 Not tainted 4.16.0+ #83 [ 73.877736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.887083] Call Trace: [ 73.889675] dump_stack+0x185/0x1d0 [ 73.893306] ? vmac_setkey+0x337/0x940 [ 73.897194] kmsan_report+0x142/0x240 [ 73.901000] ? aes_set_key+0x260/0x260 [ 73.904891] __msan_warning_32+0x6c/0xb0 [ 73.908954] ? aes_set_key+0x260/0x260 [ 73.912850] vmac_setkey+0x337/0x940 [ 73.916572] ? vmac_final+0x3f80/0x3f80 [ 73.920547] shash_async_setkey+0x337/0x4c0 [ 73.924869] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 73.930238] ? trace_kmalloc+0xb6/0x2b0 [ 73.934217] ? shash_async_digest+0x1b0/0x1b0 [ 73.938716] crypto_ahash_setkey+0x31a/0x470 [ 73.943131] hash_setkey+0x8b/0xa0 [ 73.946679] alg_setsockopt+0x6c5/0x740 [ 73.950655] ? hash_release+0x50/0x50 [ 73.954457] ? alg_accept+0xd0/0xd0 [ 73.958095] SYSC_setsockopt+0x4b8/0x570 [ 73.962169] SyS_setsockopt+0x76/0xa0 [ 73.965976] do_syscall_64+0x309/0x430 [ 73.969870] ? SYSC_recv+0xe0/0xe0 [ 73.973430] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.978617] RIP: 0033:0x455319 [ 73.981798] RSP: 002b:00007f9aa1a85c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.989510] RAX: ffffffffffffffda RBX: 00007f9aa1a866d4 RCX: 0000000000455319 [ 73.996777] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 2018/04/13 09:09:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xeb8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/13 09:09:13 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/13 09:09:14 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000e2701bb606890804450000140000e0000000907800000000ffffffff2100907800000000450000000000000000000000ac14ffbbe0000001"], &(0x7f0000ea3000)) 2018/04/13 09:09:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x15}}) 2018/04/13 09:09:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000100)=0xe8) pause() sendto$packet(r1, &(0x7f00005f0f3d), 0x0, 0x0, &(0x7f0000a4cfec)={0x11, 0xff, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) [ 74.004045] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 74.011318] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 74.018586] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 74.025859] [ 74.027485] Local variable description: ----out.i@vmac_setkey [ 74.033356] Variable was created at: [ 74.037083] vmac_setkey+0x93/0x940 [ 74.040710] shash_async_setkey+0x337/0x4c0 [ 74.045018] ================================================================== [ 74.052375] Disabling lock debugging due to kernel taint [ 74.057821] Kernel panic - not syncing: panic_on_warn set ... [ 74.057821] [ 74.065196] CPU: 0 PID: 6143 Comm: syz-executor7 Tainted: G B 4.16.0+ #83 [ 74.073345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.082704] Call Trace: [ 74.085310] dump_stack+0x185/0x1d0 [ 74.088952] panic+0x39d/0x940 [ 74.092172] ? vmac_setkey+0x337/0x940 [ 74.096071] kmsan_report+0x238/0x240 [ 74.099904] ? aes_set_key+0x260/0x260 [ 74.103800] __msan_warning_32+0x6c/0xb0 [ 74.107863] ? aes_set_key+0x260/0x260 [ 74.111763] vmac_setkey+0x337/0x940 [ 74.115485] ? vmac_final+0x3f80/0x3f80 [ 74.119459] shash_async_setkey+0x337/0x4c0 [ 74.123784] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 74.129150] ? trace_kmalloc+0xb6/0x2b0 [ 74.133126] ? shash_async_digest+0x1b0/0x1b0 [ 74.137627] crypto_ahash_setkey+0x31a/0x470 [ 74.142044] hash_setkey+0x8b/0xa0 [ 74.145589] alg_setsockopt+0x6c5/0x740 [ 74.149558] ? hash_release+0x50/0x50 [ 74.153358] ? alg_accept+0xd0/0xd0 2018/04/13 09:09:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x295) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0xfffffffffffffffd) [ 74.156989] SYSC_setsockopt+0x4b8/0x570 [ 74.161069] SyS_setsockopt+0x76/0xa0 [ 74.164901] do_syscall_64+0x309/0x430 [ 74.168795] ? SYSC_recv+0xe0/0xe0 [ 74.172342] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 74.177529] RIP: 0033:0x455319 [ 74.180714] RSP: 002b:00007f9aa1a85c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.188424] RAX: ffffffffffffffda RBX: 00007f9aa1a866d4 RCX: 0000000000455319 [ 74.195698] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 74.202980] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 74.210276] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 74.217554] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 74.225270] Dumping ftrace buffer: [ 74.228797] (ftrace buffer empty) [ 74.232479] Kernel Offset: disabled [ 74.236080] Rebooting in 86400 seconds..