INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2018/04/07 07:38:33 fuzzer started 2018/04/07 07:38:34 dialing manager at 10.128.0.26:38639 2018/04/07 07:38:40 kcov=true, comps=false 2018/04/07 07:38:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0xb6c, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00006d6000)=0xb7, 0x4) recvfrom$inet6(r0, &(0x7f0000219000)=""/246, 0xf6, 0x23fff9, 0x0, 0x0) 2018/04/07 07:38:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000500, 0x20000650, 0x20000680], 0x0, &(0x7f00000004c0), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'bcsf0\x00', 'tunl0\x00', 'lo\x00', 'lo\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [0x0, 0x0, 0x0, 0x0, 0xff], 0xf0, 0xf0, 0x120, [@state={'state\x00', 0x8}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'ifb0\x00', 'rose0\x00', 'bcsh0\x00', 'tunl0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x2c8) 2018/04/07 07:38:42 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) dup3(r1, r3, 0x0) 2018/04/07 07:38:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/07 07:38:42 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='/dev/input/event#\x00', 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000280)=""/22, &(0x7f00000002c0)=0x16) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000200)) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001640), 0x2de, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/07 07:38:42 executing program 4: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x2, [{}, {}]}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x3, 0x3b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000400), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'lo\x00', 'sit0\x00', 'gre0\x00', 'sit0\x00', @random="41704668edf1", [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xb0, 0x128, 0x158, [@statistic={'statistic\x00', 0x18}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "2d89221c5b7f400f91ebd5262e7d6bf310c87749e6ae189ab8f9ae8de86dea83c49b549fbab9b53c08b0ba432d28d3b68bc8dc90582fe18195f2d74c720440b1"}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x0, 0x0, 'syzkaller0\x00', 'gre0\x00', 'eql\x00', 'ip6gre0\x00', @random="9800e9291e09", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xa8, 0xd8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x3, 0x0, 0x0, 'bcsh0\x00', 'erspan0\x00', 'yam0\x00', 'ipddp0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xc0, 0xf8}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}]}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x430) 2018/04/07 07:38:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000008fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000016edc)={0x14, 0x24, 0x301, 0xffffffffffffffff, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/04/07 07:38:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) syz_emit_ethernet(0x2a, &(0x7f0000791fd1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f000011a000)) recvfrom$inet6(r1, &(0x7f0000a08f6e)=""/146, 0x92, 0x0, &(0x7f0000109fe4)={0xa, 0x4e20}, 0x1c) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f000060fffe)) syzkaller login: [ 43.176276] ip (3753) used greatest stack depth: 54672 bytes left [ 44.199105] ip (3849) used greatest stack depth: 54200 bytes left [ 46.726435] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.778628] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.823903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.861275] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.011424] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.158012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.205452] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.303636] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.553165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.588867] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.690953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.886519] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.016864] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.085702] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.126681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.187980] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.274461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.280917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.293871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.387378] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.393619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.404659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.491709] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.498012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.510106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.658541] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.664805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.676595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.811145] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.817430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.824946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.855532] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.862974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.874447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.925226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.931750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.947644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.121523] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.127751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.139739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.465390] device bridge0 entered promiscuous mode 2018/04/07 07:38:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) [ 57.639644] device syz_tun entered promiscuous mode 2018/04/07 07:38:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)=@acquire={0x178, 0x17, 0x301, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @in=@local={0xac, 0x14, 0x14, 0xaa}, {@in6, @in6}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}}}, [@mark={0xc, 0x15, {0x35075a}}, @tmpl={0x44, 0x5, [{{@in=@rand_addr}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}]}]}, 0x178}, 0x1}, 0x0) [ 57.734343] device bridge0 left promiscuous mode [ 57.860677] device syz_tun left promiscuous mode 2018/04/07 07:39:01 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) dup3(r1, r3, 0x0) 2018/04/07 07:39:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000aa4ff0)={&(0x7f0000f8b9e0)={0x18, 0x2, 0x3, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x5}]}, 0x18}, 0x1}, 0x0) 2018/04/07 07:39:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}, 0x1}, 0x0) 2018/04/07 07:39:01 executing program 6: recvmmsg(0xffffffffffffffff, &(0x7f0000b2fe80), 0x0, 0xfffffffffffffffc, 0x0) 2018/04/07 07:39:01 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:01 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) dup3(r1, r3, 0x0) 2018/04/07 07:39:01 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xff, 0x359) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x40002106) 2018/04/07 07:39:01 executing program 1: r0 = socket$packet(0x11, 0x80000000000002, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000003000), 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x320, 0x4) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x4e20, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x26, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@ipx, 0x10, &(0x7f0000001f40), 0x0, &(0x7f0000001fc0)=""/64, 0x40}}], 0x2, 0x2000, 0x0) 2018/04/07 07:39:01 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 59.375450] audit: type=1326 audit(1523086741.374:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5095 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0xffff0000 2018/04/07 07:39:01 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000532000)=""/1, 0x1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000010c0)={0x0, &(0x7f0000001080)}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000f38ffc)=0x3) fcntl$setown(r6, 0x8, r3) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54a9}) tkill(r3, 0x16) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001100), &(0x7f0000001140)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 2018/04/07 07:39:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) msgget(0xffffffffffffffff, 0x20) close(r0) 2018/04/07 07:39:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000eebf9e)='-', 0x1) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x40002106) 2018/04/07 07:39:01 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0xed}, 0x1}, 0x0) 2018/04/07 07:39:01 executing program 3: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f000002aff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b38000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigsuspend(&(0x7f0000b33000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0xb, 0x32, 0xffffffffffffffff, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b39ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom(r5, &(0x7f0000012f73), 0x0, 0x0, &(0x7f0000012ff0)=@ax25={0x6, {"2d13d4162d9f33"}}, 0x10) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r8, &(0x7f000004bfa2)=""/1, 0x1) ioctl$int_in(r7, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r7, 0x8, r6) fcntl$setsig(r7, 0xa, 0x12) dup2(r7, r8) tkill(r3, 0x16) fcntl$setsig(r4, 0xa, 0x12) r9 = dup2(r4, r5) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fcntl$setown(r9, 0x8, r6) tkill(r0, 0x16) 2018/04/07 07:39:01 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 60.243754] audit: type=1326 audit(1523086742.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5095 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0xffff0000 2018/04/07 07:39:02 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) dup3(r1, r3, 0x0) 2018/04/07 07:39:02 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000dcdff0), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000ccb000)) r3 = dup2(r1, r2) clone(0x0, &(0x7f0000445000), &(0x7f0000d4f000), &(0x7f0000d5a000), &(0x7f00008a7f0e)) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x16) 2018/04/07 07:39:02 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:03 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) dup3(r1, r3, 0x0) 2018/04/07 07:39:03 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) dup3(r1, r3, 0x0) 2018/04/07 07:39:03 executing program 1: clone(0x200, &(0x7f00000e7000), &(0x7f000025e000), &(0x7f0000c47000), &(0x7f0000a89000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000479000), &(0x7f0000dd7000), &(0x7f00000e7ffc), &(0x7f0000fa1f78)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26502, 0x0) 2018/04/07 07:39:03 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000532000)=""/1, 0x1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000010c0)={0x0, &(0x7f0000001080)}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000f38ffc)=0x3) fcntl$setown(r6, 0x8, r3) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54a9}) tkill(r3, 0x16) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001100), &(0x7f0000001140)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 2018/04/07 07:39:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={"47727303001e610000000000ab1b00", {0x0, 0x4e20}}) 2018/04/07 07:39:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f00001caf8e)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "050101", 0x3, 0x3c, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}}}}}}}, &(0x7f0000efe000)={0x0, 0x1}) 2018/04/07 07:39:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000051f000)='./file0\x00', 0x40, 0x40) unlink(&(0x7f000010effc)='./file0\x00') execveat(r0, &(0x7f0000001ff8)='./file0\x00', &(0x7f0000000ff0), &(0x7f0000001fe4)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000001000)="747275737465641e00", &(0x7f0000001fff)='\x00'], 0x1000) 2018/04/07 07:39:03 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed0000464caeedf840d001fe92b08c3f7b8e1596417d7dcd645413be450000000000000001c122283846253398a04d99ca8680deb20632834bc027c44d4cf3fd102724d6748de61eebb06801048dea7636f3a248a9bf3123882ca9fc66b4e70b06d43045", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:03 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f000037c000)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff}, @udp={0x4e20, 0x4e20, 0x8}}}}}, 0x0) 2018/04/07 07:39:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfd) connect$inet6(r0, &(0x7f000052f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xb7) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) 2018/04/07 07:39:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000051f000)='./file0\x00', 0x40, 0x40) unlink(&(0x7f000010effc)='./file0\x00') execveat(r0, &(0x7f0000001ff8)='./file0\x00', &(0x7f0000000ff0), &(0x7f0000001fe4)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000001000)="747275737465641e00", &(0x7f0000001fff)='\x00'], 0x1000) 2018/04/07 07:39:03 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f00000001c0)=[{0x10, 0x29}], 0x10}}], 0x2, 0x0) 2018/04/07 07:39:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfd) connect$inet6(r0, &(0x7f000052f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xb7) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) 2018/04/07 07:39:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x3, 0x3e0, [0x20000900, 0x0, 0x0, 0x20000a40, 0x20000b80], 0x0, &(0x7f0000000040), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ifb0\x00', 'sit0\x00', 'teql0\x00', 'erspan0\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [], 0xa0, 0xd8, 0x110, [@m802_3={'802_3\x00', 0x8}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, '\x00', 'sit0\x00', 'dummy0\x00', 'yam0\x00', @random="11aff38b01b2", [], @empty, [], 0x70, 0xd8, 0x110}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @snat={'snat\x00', 0x10, {{@random="2bb11f028c8f"}}}]}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x1f, 0x0, 0x0, 'yam0\x00', 'bcsh0\x00', 'syz_tun\x00', 'erspan0\x00', @random="d0ec22d72201", [], @empty, [], 0xc0, 0xf8, 0x130, [@ipvs={'ipvs\x00', 0x28, {{@ipv6}}}]}, [@snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}]}, 0x458) 2018/04/07 07:39:04 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) dup3(r1, r3, 0x0) 2018/04/07 07:39:04 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed0000464caeedf840d001fe92b08c3f7b8e1596417d7dcd645413be450000000000000001c122283846253398a04d99ca8680deb20632834bc027c44d4cf3fd102724d6748de61eebb06801048dea7636f3a248a9bf3123882ca9fc66b4e70b06d43045", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000001afc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x1c, 0x301, 0xffffffffffffffff, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/04/07 07:39:04 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) syz_open_procfs(r0, &(0x7f00005b7000)='environ\x00') fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/04/07 07:39:04 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001}, @dccp={{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00004c3f70)={0x2, {{0x2, 0x4e20, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000092000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x1, [@loopback=0x7f000001]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f000037c000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @multicast1=0xe0000001, @multicast1=0xe0000001}, @udp={0x4e20, 0x4e21, 0x8}}}}}, 0x0) 2018/04/07 07:39:04 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000532000)=""/1, 0x1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000010c0)={0x0, &(0x7f0000001080)}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000f38ffc)=0x3) fcntl$setown(r6, 0x8, r3) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54a9}) tkill(r3, 0x16) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001100), &(0x7f0000001140)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 2018/04/07 07:39:04 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000f71000)=[{&(0x7f0000f6ff9b)="470a3747e4d6c6dc7e519c8cfa37b13380c40d870100010000000000a6fa401ca8969a47542c8e2cb000000b0000000000dbf1eedf91d955a9e84c62af9fc4452b9c97c651", 0x45}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f00000004c0)=@ipx, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x2, &(0x7f0000001700)={0x77359400}) 2018/04/07 07:39:04 executing program 1: clone(0x200, &(0x7f00000e7000), &(0x7f000025e000), &(0x7f0000c47000), &(0x7f0000a89000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000479000), &(0x7f0000dd7000), &(0x7f00000e7ffc), &(0x7f0000fa1f78)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26502, 0x0) 2018/04/07 07:39:04 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9, 0x876}, 0x14) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000a77000)=[{&(0x7f0000bc7f9a)='1', 0x1}], 0x1) sendto(r0, &(0x7f0000000340)='b', 0x1, 0x0, &(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendmsg(r0, &(0x7f0000207000)={&(0x7f0000b5b000)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000c79fa0)=[{&(0x7f0000000000)='9', 0x1}], 0x1, &(0x7f0000f93000)}, 0x0) close(r0) 2018/04/07 07:39:04 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000e85000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f00006fbff0)={&(0x7f0000831000)={0x14, 0x3, 0x8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/04/07 07:39:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f0000369fa8)=@newneigh={0x1c, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff}, 0x1c}, 0x1}, 0x0) 2018/04/07 07:39:04 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:04 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f8e)="ac2524ed7dbf3553e99e2123f59f0900000000000000025b00ae1c9087fdc351732cff4e4b58928fb3dce7c781649ba9f8817cf593dfbe5c6a448d8d189c3fdf8d78107af39b544bb8130f3ef14009c6ff40e050fc8326f0b80f68b00806775026313a2568fa9570c154b9e6d698b9f461", 0x71) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 07:39:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, &(0x7f000014cf2c), 0x0, 0x8000, &(0x7f00005b5ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000040)="69cf787a7be6df0004afde349c3059032ec4cc63ca4204c406e1023291423264f41ca571", 0x24, 0x0, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) 2018/04/07 07:39:05 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f0000000080)=0xc) r0 = socket(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@hci, 0x357, &(0x7f0000000000), 0x0, &(0x7f0000000180)=""/110, 0xfffffeb8}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f000062f000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000c9b2ac)=@ipv4_getnetconf={0x14, 0x52, 0x711, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}}, 0x14}, 0x1}, 0x0) [ 63.080573] ================================================================== [ 63.087987] BUG: KMSAN: uninit-value in tcp_v4_rcv+0xc5f/0x6750 [ 63.094040] CPU: 0 PID: 5298 Comm: syz-executor3 Not tainted 4.16.0+ #81 [ 63.100873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.110216] Call Trace: [ 63.112788] [ 63.114936] dump_stack+0x185/0x1d0 [ 63.118567] ? tcp_v4_rcv+0xc5f/0x6750 [ 63.122451] kmsan_report+0x142/0x240 [ 63.126251] __msan_warning_32+0x6c/0xb0 [ 63.130316] tcp_v4_rcv+0xc5f/0x6750 [ 63.134029] ? sock_queue_rcv_skb+0xf9/0x130 [ 63.138435] ? raw_rcv+0x680/0x730 [ 63.141974] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 63.147333] ? raw_local_deliver+0x1462/0x1470 [ 63.151908] ? ip_local_deliver_finish+0x4a5/0xd40 [ 63.156815] ? tcp_filter+0x270/0x270 [ 63.160598] ip_local_deliver_finish+0x6ed/0xd40 [ 63.165339] ip_local_deliver+0x43c/0x4e0 [ 63.169472] ? ip_local_deliver+0x4e0/0x4e0 [ 63.173781] ? ip_call_ra_chain+0x7b0/0x7b0 [ 63.178092] ip_rcv_finish+0x1253/0x16d0 [ 63.182148] ip_rcv+0x119d/0x16f0 [ 63.185591] ? ip_rcv+0x16f0/0x16f0 [ 63.189215] __netif_receive_skb_core+0x47cf/0x4a80 [ 63.194216] ? try_to_wake_up+0x1ab2/0x20a0 [ 63.198524] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 63.204320] ? ip_local_deliver_finish+0xd40/0xd40 [ 63.209231] ? intel_dp_destroy_mst_connector+0x131/0x300 [ 63.214749] process_backlog+0x62d/0xe20 [ 63.218791] ? rps_trigger_softirq+0x2f0/0x2f0 [ 63.223354] net_rx_action+0x7c1/0x1a70 [ 63.227326] ? net_tx_action+0xab0/0xab0 [ 63.231378] __do_softirq+0x56d/0x93d [ 63.235158] do_softirq_own_stack+0x2a/0x40 [ 63.239453] [ 63.241682] __local_bh_enable_ip+0x114/0x140 [ 63.246172] local_bh_enable+0x36/0x40 [ 63.250057] ip_finish_output2+0x124e/0x1380 [ 63.254457] ip_finish_output+0xcb0/0xff0 [ 63.258591] ip_output+0x502/0x5c0 [ 63.262118] ? ip_mc_finish_output+0x3b0/0x3b0 [ 63.266688] ? ip_finish_output+0xff0/0xff0 [ 63.270991] ip_send_skb+0x5f3/0x820 [ 63.274697] ? __ip_local_out+0x5b0/0x5b0 [ 63.278842] ip_push_pending_frames+0x105/0x170 [ 63.283509] raw_sendmsg+0x2960/0x3ed0 [ 63.287418] ? compat_raw_ioctl+0x100/0x100 [ 63.291730] inet_sendmsg+0x48d/0x740 [ 63.295519] ? security_socket_sendmsg+0x9e/0x210 [ 63.300356] ? inet_getname+0x500/0x500 [ 63.304317] SYSC_sendto+0x6c3/0x7e0 [ 63.308023] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 63.313461] ? prepare_exit_to_usermode+0x149/0x3a0 [ 63.318461] SyS_sendto+0x8a/0xb0 [ 63.321906] do_syscall_64+0x309/0x430 [ 63.325786] ? SYSC_getpeername+0x560/0x560 [ 63.330110] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 63.335293] RIP: 0033:0x455259 [ 63.338470] RSP: 002b:00007fa49aa6cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 63.346171] RAX: ffffffffffffffda RBX: 00007fa49aa6d6d4 RCX: 0000000000455259 [ 63.353423] RDX: 0000000000000024 RSI: 0000000020000040 RDI: 0000000000000013 [ 63.360668] RBP: 000000000072bea0 R08: 00000000200000c0 R09: 0000000000000010 [ 63.367922] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 63.375182] R13: 00000000000004f7 R14: 00000000006fa7c8 R15: 0000000000000000 [ 63.382430] [ 63.384036] Uninit was stored to memory at: [ 63.388351] kmsan_internal_chain_origin+0x12b/0x210 [ 63.393440] kmsan_memcpy_origins+0x11d/0x170 [ 63.397922] __msan_memcpy+0x19f/0x1f0 [ 63.401796] skb_copy_bits+0x63a/0xdb0 [ 63.405672] __pskb_pull_tail+0x483/0x22e0 [ 63.409898] tcp_v4_rcv+0xc09/0x6750 [ 63.413607] ip_local_deliver_finish+0x6ed/0xd40 [ 63.418354] ip_local_deliver+0x43c/0x4e0 [ 63.422489] ip_rcv_finish+0x1253/0x16d0 [ 63.426540] ip_rcv+0x119d/0x16f0 [ 63.429975] __netif_receive_skb_core+0x47cf/0x4a80 [ 63.434978] process_backlog+0x62d/0xe20 [ 63.439032] net_rx_action+0x7c1/0x1a70 [ 63.443005] __do_softirq+0x56d/0x93d [ 63.446793] Uninit was created at: [ 63.450325] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 63.455324] kmsan_alloc_page+0x82/0xe0 [ 63.459281] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 63.464029] alloc_pages_current+0x6b5/0x970 [ 63.468430] skb_page_frag_refill+0x3ba/0x5e0 [ 63.472917] sk_page_frag_refill+0xa4/0x340 [ 63.477230] __ip_append_data+0x107e/0x3d10 [ 63.481548] ip_append_data+0x2fb/0x440 [ 63.485518] raw_sendmsg+0x287b/0x3ed0 [ 63.489404] inet_sendmsg+0x48d/0x740 [ 63.493199] SYSC_sendto+0x6c3/0x7e0 [ 63.496916] SyS_sendto+0x8a/0xb0 [ 63.500378] do_syscall_64+0x309/0x430 [ 63.504257] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 63.509430] ================================================================== [ 63.516775] Disabling lock debugging due to kernel taint [ 63.522216] Kernel panic - not syncing: panic_on_warn set ... [ 63.522216] [ 63.529577] CPU: 0 PID: 5298 Comm: syz-executor3 Tainted: G B 4.16.0+ #81 [ 63.537701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.547036] Call Trace: [ 63.549614] [ 63.551762] dump_stack+0x185/0x1d0 [ 63.555391] panic+0x39d/0x940 [ 63.558598] ? tcp_v4_rcv+0xc5f/0x6750 [ 63.562490] kmsan_report+0x238/0x240 [ 63.566293] __msan_warning_32+0x6c/0xb0 [ 63.570354] tcp_v4_rcv+0xc5f/0x6750 [ 63.574067] ? sock_queue_rcv_skb+0xf9/0x130 [ 63.578475] ? raw_rcv+0x680/0x730 [ 63.582016] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 63.587379] ? raw_local_deliver+0x1462/0x1470 [ 63.591960] ? ip_local_deliver_finish+0x4a5/0xd40 [ 63.596873] ? tcp_filter+0x270/0x270 [ 63.600667] ip_local_deliver_finish+0x6ed/0xd40 [ 63.605426] ip_local_deliver+0x43c/0x4e0 [ 63.609559] ? ip_local_deliver+0x4e0/0x4e0 [ 63.613860] ? ip_call_ra_chain+0x7b0/0x7b0 [ 63.618161] ip_rcv_finish+0x1253/0x16d0 [ 63.622221] ip_rcv+0x119d/0x16f0 [ 63.625652] ? ip_rcv+0x16f0/0x16f0 [ 63.629273] __netif_receive_skb_core+0x47cf/0x4a80 [ 63.634274] ? try_to_wake_up+0x1ab2/0x20a0 [ 63.638573] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 63.644348] ? ip_local_deliver_finish+0xd40/0xd40 [ 63.649266] ? intel_dp_destroy_mst_connector+0x131/0x300 [ 63.654797] process_backlog+0x62d/0xe20 [ 63.658847] ? rps_trigger_softirq+0x2f0/0x2f0 [ 63.663412] net_rx_action+0x7c1/0x1a70 [ 63.667382] ? net_tx_action+0xab0/0xab0 [ 63.671428] __do_softirq+0x56d/0x93d [ 63.675221] do_softirq_own_stack+0x2a/0x40 [ 63.679522] [ 63.681738] __local_bh_enable_ip+0x114/0x140 [ 63.686212] local_bh_enable+0x36/0x40 [ 63.690083] ip_finish_output2+0x124e/0x1380 [ 63.694485] ip_finish_output+0xcb0/0xff0 [ 63.698626] ip_output+0x502/0x5c0 [ 63.702158] ? ip_mc_finish_output+0x3b0/0x3b0 [ 63.706724] ? ip_finish_output+0xff0/0xff0 [ 63.711026] ip_send_skb+0x5f3/0x820 [ 63.714722] ? __ip_local_out+0x5b0/0x5b0 [ 63.718859] ip_push_pending_frames+0x105/0x170 [ 63.723525] raw_sendmsg+0x2960/0x3ed0 [ 63.727408] ? compat_raw_ioctl+0x100/0x100 [ 63.731703] inet_sendmsg+0x48d/0x740 [ 63.735499] ? security_socket_sendmsg+0x9e/0x210 [ 63.740328] ? inet_getname+0x500/0x500 [ 63.744280] SYSC_sendto+0x6c3/0x7e0 [ 63.747982] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 63.753416] ? prepare_exit_to_usermode+0x149/0x3a0 [ 63.758436] SyS_sendto+0x8a/0xb0 [ 63.761872] do_syscall_64+0x309/0x430 [ 63.765739] ? SYSC_getpeername+0x560/0x560 [ 63.770046] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 63.775217] RIP: 0033:0x455259 [ 63.778383] RSP: 002b:00007fa49aa6cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 63.786073] RAX: ffffffffffffffda RBX: 00007fa49aa6d6d4 RCX: 0000000000455259 [ 63.793326] RDX: 0000000000000024 RSI: 0000000020000040 RDI: 0000000000000013 [ 63.800583] RBP: 000000000072bea0 R08: 00000000200000c0 R09: 0000000000000010 [ 63.807842] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 63.815099] R13: 00000000000004f7 R14: 00000000006fa7c8 R15: 0000000000000000 [ 63.822800] Dumping ftrace buffer: [ 63.826313] (ftrace buffer empty) [ 63.829991] Kernel Offset: disabled [ 63.833589] Rebooting in 86400 seconds..