INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2018/04/10 12:20:29 fuzzer started 2018/04/10 12:20:29 dialing manager at 10.128.0.26:40577 2018/04/10 12:20:35 kcov=true, comps=false 2018/04/10 12:20:38 executing program 0: unshare(0x4003fffe) 2018/04/10 12:20:38 executing program 1: mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x266b084257ded2f2, 0xffffffffffffffff, 0xfffffffffffffffd) 2018/04/10 12:20:38 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000001100)='./file1\x00', 0x0) lseek(r1, 0x0, 0x0) 2018/04/10 12:20:38 executing program 4: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) 2018/04/10 12:20:38 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 2018/04/10 12:20:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x80080, &(0x7f0000000100)) 2018/04/10 12:20:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000001100)='./file1\x00', 0x0) lseek(r1, 0x0, 0x3) 2018/04/10 12:20:38 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) mlock2(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000005000/0x1000)=nil) syzkaller login: [ 43.167122] ip (3790) used greatest stack depth: 54672 bytes left [ 44.293826] ip (3902) used greatest stack depth: 54560 bytes left [ 44.390740] ip (3910) used greatest stack depth: 54296 bytes left [ 45.123235] ip (3972) used greatest stack depth: 54256 bytes left [ 46.292199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.434552] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.443426] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.460970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.557077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.571736] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.596614] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.724117] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.040255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.096616] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.368718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.388524] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.449239] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.467136] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.555879] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.622800] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.837939] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.844232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.853890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.903489] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.920120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.930846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.155154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.161427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.180289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.216772] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.226576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.255092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.276943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.287852] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.296107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.316587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.353876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.374498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.389690] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.402140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.408330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.460378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.487736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.514558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/10 12:20:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000690ffc)=0x77, 0xfc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x60) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) 2018/04/10 12:20:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000040)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}}, {{&(0x7f00000003c0)=@in={0x2, 0x4e21, @broadcast=0xffffffff}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) 2018/04/10 12:20:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000f79000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001a00ff0b030000000000000001000000"], 0x1}, 0x1}, 0x0) 2018/04/10 12:20:56 executing program 1: r0 = gettid() setpriority(0x0, r0, 0x7fffffff) 2018/04/10 12:20:56 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) mlock2(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000005000/0x1000)=nil) 2018/04/10 12:20:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[]}}], 0x1, 0x0) 2018/04/10 12:20:56 executing program 7: mkdir(&(0x7f0000330000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000e1bff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000bd9fff)) mount(&(0x7f0000802ff8)='./file0\x00', &(0x7f0000976000)='./file0\x00', &(0x7f0000905000)='devtmpfs\x00', 0x85030, &(0x7f0000e99f87)) 2018/04/10 12:20:56 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) [ 58.117336] 9pnet_virtio: no channels available for device ./file0 2018/04/10 12:20:56 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000104ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) 2018/04/10 12:20:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 2018/04/10 12:20:56 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040), 0x8) 2018/04/10 12:20:56 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') 2018/04/10 12:20:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:56 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) 2018/04/10 12:20:56 executing program 7: syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) 2018/04/10 12:20:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={"6c6f00000000001400000900", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x505, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1=0xe0000001}]}, 0x20}, 0x1}, 0x0) 2018/04/10 12:20:56 executing program 1: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 2018/04/10 12:20:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'gre0\x00'}, 0x18) 2018/04/10 12:20:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 2018/04/10 12:20:56 executing program 5: r0 = socket$inet6(0xa, 0x200000000003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000100)="5fb87dea0e1e27febc304ad0df0d48722a52540347a1e3ba0fecca0762ba17d63f1c602b52efde50", 0x28}], 0x1, &(0x7f00000000c0)}}], 0x1, 0x0) 2018/04/10 12:20:56 executing program 7: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 2018/04/10 12:20:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x213, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) 2018/04/10 12:20:56 executing program 5: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068d5151d65a904d7000000000000000000000002"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/10 12:20:56 executing program 7: syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x0) 2018/04/10 12:20:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/10 12:20:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/11, 0x128, 0x2, 0x0, 0xfffffffffffffebd) shutdown(r0, 0x1) 2018/04/10 12:20:56 executing program 6: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000002a0081550000000000ed76010000ecfe010000000096a119ee7002000000ffff", 0x24) 2018/04/10 12:20:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/31, 0x7ff}) 2018/04/10 12:20:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={"6c6f00000000001400000900", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x505, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1=0xe0000001}]}, 0x20}, 0x1}, 0x0) 2018/04/10 12:20:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2}, "00080700000400a0b22c582bf3aed17d"}) 2018/04/10 12:20:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x4800000008924, &(0x7f0000000040)={'bridge0\x00', @ifru_settings={0x1, 0x8000, @sync=&(0x7f0000000080)}}) 2018/04/10 12:20:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000600)="ac", 0x1, 0x20020003, &(0x7f0000000b00)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f00000005c0)="9a", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xfffffffffffff001, 0x4) sendto$inet(r0, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 2018/04/10 12:20:57 executing program 0: syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00007b5000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000becfff)='^', 0x1, 0x100000004007fff, &(0x7f0000109ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/04/10 12:20:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x213, 0x0, 0x0, {{@in=@loopback=0x7f001300, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) 2018/04/10 12:20:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x1, 0x4, 0x8000000000009, 0x9, r0, 0x0, [0x305f, 0xa]}, 0x2c) 2018/04/10 12:20:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/11, 0x128, 0x2, 0x0, 0xfffffffffffffebd) shutdown(r0, 0x1) 2018/04/10 12:20:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x4800000008924, &(0x7f0000000040)={'bridge0\x00', @ifru_settings={0x1, 0x8000, @sync=&(0x7f0000000080)}}) 2018/04/10 12:20:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/10 12:20:57 executing program 7: socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x4, 0xc0189436, 0x730000, &(0x7f00000001c0)) 2018/04/10 12:20:57 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e22}, 0x10) 2018/04/10 12:20:57 executing program 0: syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1000000000003}, 0x1c) 2018/04/10 12:20:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000140)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/04/10 12:20:57 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002bbf975e2c0e4fe90000000043c7049b5c7047ed618db6303a5a24345de10a11712f31815354b23e2829d2e780a398430b119fb96aa47f2774fdb60b4aa3fa765db0e888e7d896a8b0180fecc60a3658b16cf26db90ad6e669ac8293885b336efe2aa555f5160b3210f6ae3ab45b9fc8f4124e86c932008251694cf7d9e80a77c34e9479105238daafde38d2d7ddefa8b0430764b3612ae0fe0150d4bad0329619e3fb7eaddaa99cadc2c9c4afbbbdd1171a7ca2cf54de59e30cce7e048840cb11db52f392c3206bbe6ea7cece47f8514f17480b30e2c0b46503ce783654840c88c8"], 0x1}, 0x1}, 0x0) r0 = socket(0x2, 0x2000000000000005, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) [ 59.966455] sctp: [Deprecated]: syz-executor5 (pid 5227) Use of int in max_burst socket option. [ 59.966455] Use struct sctp_assoc_value instead [ 60.050236] sctp: [Deprecated]: syz-executor5 (pid 5235) Use of int in max_burst socket option. [ 60.050236] Use struct sctp_assoc_value instead 2018/04/10 12:20:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="6b4094798efc"}, 0x10) 2018/04/10 12:20:58 executing program 0: syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000a000)={&(0x7f0000010ff4)={0x10}, 0xc, &(0x7f0000012000)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x305, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/10 12:20:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x4800000008924, &(0x7f0000000040)={'bridge0\x00', @ifru_settings={0x1, 0x0, @sync=&(0x7f0000000080)}}) 2018/04/10 12:20:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}]}, 0x20}, 0x1}, 0x0) 2018/04/10 12:20:58 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002bbf975e2c0e4fe90000000043c7049b5c7047ed618db6303a5a24345de10a11712f31815354b23e2829d2e780a398430b119fb96aa47f2774fdb60b4aa3fa765db0e888e7d896a8b0180fecc60a3658b16cf26db90ad6e669ac8293885b336efe2aa555f5160b3210f6ae3ab45b9fc8f4124e86c932008251694cf7d9e80a77c34e9479105238daafde38d2d7ddefa8b0430764b3612ae0fe0150d4bad0329619e3fb7eaddaa99cadc2c9c4afbbbdd1171a7ca2cf54de59e30cce7e048840cb11db52f392c3206bbe6ea7cece47f8514f17480b30e2c0b46503ce783654840c88c8"], 0x1}, 0x1}, 0x0) r0 = socket(0x2, 0x2000000000000005, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) 2018/04/10 12:20:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/11, 0x128, 0x2, 0x0, 0xfffffffffffffebd) shutdown(r0, 0x1) 2018/04/10 12:20:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000140)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) [ 60.535178] sctp: [Deprecated]: syz-executor5 (pid 5251) Use of int in max_burst socket option. [ 60.535178] Use struct sctp_assoc_value instead 2018/04/10 12:20:58 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:58 executing program 1: mount(&(0x7f00006f9ff8)="2e2f66696c6530f6", &(0x7f0000145ffe)='..', &(0x7f0000c31000)='devpts\x00', 0x0, 0x0) 2018/04/10 12:20:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='`', 0x1, r1) add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)='\x00', 0x1, r1) 2018/04/10 12:20:58 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c4, &(0x7f0000b56000)={0x2}, 0x10) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/244, 0xf4}, 0x0) 2018/04/10 12:20:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={"6c6f00ecff00000000000000f9ff00", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/04/10 12:20:58 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002bbf975e2c0e4fe90000000043c7049b5c7047ed618db6303a5a24345de10a11712f31815354b23e2829d2e780a398430b119fb96aa47f2774fdb60b4aa3fa765db0e888e7d896a8b0180fecc60a3658b16cf26db90ad6e669ac8293885b336efe2aa555f5160b3210f6ae3ab45b9fc8f4124e86c932008251694cf7d9e80a77c34e9479105238daafde38d2d7ddefa8b0430764b3612ae0fe0150d4bad0329619e3fb7eaddaa99cadc2c9c4afbbbdd1171a7ca2cf54de59e30cce7e048840cb11db52f392c3206bbe6ea7cece47f8514f17480b30e2c0b46503ce783654840c88c8"], 0x1}, 0x1}, 0x0) r0 = socket(0x2, 0x2000000000000005, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) 2018/04/10 12:20:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x200000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8932, &(0x7f00000000c0)) [ 60.829846] sctp: [Deprecated]: syz-executor5 (pid 5278) Use of int in max_burst socket option. [ 60.829846] Use struct sctp_assoc_value instead 2018/04/10 12:20:59 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:59 executing program 1: r0 = socket$kcm(0xa, 0x200000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8932, &(0x7f00000000c0)) 2018/04/10 12:20:59 executing program 6: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)}, 0x0) 2018/04/10 12:20:59 executing program 2: add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0xfffffff0}, &(0x7f00000001c0)="9b", 0x1, 0xfffffffffffffffc) 2018/04/10 12:20:59 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7b7) write$sndseq(r1, &(0x7f000082cf40), 0x2082cf40) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/04/10 12:20:59 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002bbf975e2c0e4fe90000000043c7049b5c7047ed618db6303a5a24345de10a11712f31815354b23e2829d2e780a398430b119fb96aa47f2774fdb60b4aa3fa765db0e888e7d896a8b0180fecc60a3658b16cf26db90ad6e669ac8293885b336efe2aa555f5160b3210f6ae3ab45b9fc8f4124e86c932008251694cf7d9e80a77c34e9479105238daafde38d2d7ddefa8b0430764b3612ae0fe0150d4bad0329619e3fb7eaddaa99cadc2c9c4afbbbdd1171a7ca2cf54de59e30cce7e048840cb11db52f392c3206bbe6ea7cece47f8514f17480b30e2c0b46503ce783654840c88c8"], 0x1}, 0x1}, 0x0) r0 = socket(0x2, 0x2000000000000005, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) 2018/04/10 12:20:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/11, 0x128, 0x2, 0x0, 0xfffffffffffffebd) shutdown(r0, 0x1) 2018/04/10 12:20:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000c26000)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x8, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x800000020000000, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) sendto$inet(r0, &(0x7f0000000040), 0x3e1, 0x40881, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 61.454243] sctp: [Deprecated]: syz-executor5 (pid 5307) Use of int in max_burst socket option. [ 61.454243] Use struct sctp_assoc_value instead 2018/04/10 12:20:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2000000028801) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}}], 0xfffffffffffffddd) 2018/04/10 12:20:59 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x14, 0x4) unshare(0x40040000) 2018/04/10 12:20:59 executing program 1: syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002940)) 2018/04/10 12:20:59 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 12:20:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0xa, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x30}, {&(0x7f0000957ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x0) 2018/04/10 12:20:59 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002bbf975e2c0e4fe90000000043c7049b5c7047ed618db6303a5a24345de10a11712f31815354b23e2829d2e780a398430b119fb96aa47f2774fdb60b4aa3fa765db0e888e7d896a8b0180fecc60a3658b16cf26db90ad6e669ac8293885b336efe2aa555f5160b3210f6ae3ab45b9fc8f4124e86c932008251694cf7d9e80a77c34e9479105238daafde38d2d7ddefa8b0430764b3612ae0fe0150d4bad0329619e3fb7eaddaa99cadc2c9c4afbbbdd1171a7ca2cf54de59e30cce7e048840cb11db52f392c3206bbe6ea7cece47f8514f17480b30e2c0b46503ce783654840c88c8"], 0x1}, 0x1}, 0x0) r0 = socket(0x2, 0x2000000000000005, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 61.746257] ================================================================== [ 61.753689] BUG: KMSAN: uninit-value in sctp_sendmsg+0x1ced/0x6020 [ 61.760031] CPU: 0 PID: 5330 Comm: syz-executor4 Not tainted 4.16.0+ #83 [ 61.766868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.776220] Call Trace: [ 61.778817] dump_stack+0x185/0x1d0 [ 61.782458] ? sctp_sendmsg+0x1ced/0x6020 [ 61.786609] kmsan_report+0x142/0x240 [ 61.790419] __msan_warning_32+0x6c/0xb0 [ 61.794488] sctp_sendmsg+0x1ced/0x6020 [ 61.798465] ? __local_bh_enable_ip+0x3b/0x140 [ 61.803057] ? local_bh_enable+0x36/0x40 [ 61.807120] ? kmsan_set_origin_inline+0x6b/0x120 [ 61.811980] ? sctp_getsockopt+0x145b0/0x145b0 [ 61.816565] inet_sendmsg+0x48d/0x740 [ 61.820369] ? inet_getname+0x500/0x500 [ 61.824344] ___sys_sendmsg+0xec0/0x1310 [ 61.828416] ? __fget_light+0x56/0x710 [ 61.832305] ? __fdget+0x4e/0x60 [ 61.835670] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 61.841047] ? __fget_light+0x6b9/0x710 [ 61.845041] __sys_sendmmsg+0x42d/0x800 [ 61.849029] ? __msan_poison_alloca+0x15c/0x1d0 [ 61.853709] ? syscall_return_slowpath+0xe9/0x700 [ 61.858564] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 61.863511] SYSC_sendmmsg+0xc4/0x110 [ 61.867325] SyS_sendmmsg+0x63/0x90 [ 61.870951] do_syscall_64+0x309/0x430 [ 61.874847] ? __sys_sendmmsg+0x800/0x800 [ 61.879000] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.884194] RIP: 0033:0x455259 [ 61.887468] RSP: 002b:00007f0335415c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 2018/04/10 12:20:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) [ 61.895178] RAX: ffffffffffffffda RBX: 00007f03354166d4 RCX: 0000000000455259 [ 61.902446] RDX: 0000000000000002 RSI: 000000002093eee8 RDI: 0000000000000013 [ 61.905302] sctp: [Deprecated]: syz-executor5 (pid 5334) Use of int in max_burst socket option. [ 61.905302] Use struct sctp_assoc_value instead [ 61.909711] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 61.909719] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 61.909727] R13: 00000000000004c9 R14: 00000000006fa378 R15: 0000000000000000 [ 61.909737] 2018/04/10 12:20:59 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002bbf975e2c0e4fe90000000043c7049b5c7047ed618db6303a5a24345de10a11712f31815354b23e2829d2e780a398430b119fb96aa47f2774fdb60b4aa3fa765db0e888e7d896a8b0180fecc60a3658b16cf26db90ad6e669ac8293885b336efe2aa555f5160b3210f6ae3ab45b9fc8f4124e86c932008251694cf7d9e80a77c34e9479105238daafde38d2d7ddefa8b0430764b3612ae0fe0150d4bad0329619e3fb7eaddaa99cadc2c9c4afbbbdd1171a7ca2cf54de59e30cce7e048840cb11db52f392c3206bbe6ea7cece47f8514f17480b30e2c0b46503ce783654840c88c8"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 61.909745] Local variable description: ----address@___sys_sendmsg [ 61.909748] Variable was created at: [ 61.909769] ___sys_sendmsg+0xd3/0x1310 [ 61.909782] __sys_sendmmsg+0x42d/0x800 [ 61.909785] ================================================================== [ 61.909790] Disabling lock debugging due to kernel taint [ 61.909796] Kernel panic - not syncing: panic_on_warn set ... [ 61.909796] [ 61.909810] CPU: 0 PID: 5330 Comm: syz-executor4 Tainted: G B 4.16.0+ #83 [ 61.909816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.909820] Call Trace: [ 61.909838] dump_stack+0x185/0x1d0 [ 61.909887] panic+0x39d/0x940 [ 62.011471] ? sctp_sendmsg+0x1ced/0x6020 [ 62.015610] kmsan_report+0x238/0x240 [ 62.019392] __msan_warning_32+0x6c/0xb0 [ 62.023437] sctp_sendmsg+0x1ced/0x6020 [ 62.027395] ? __local_bh_enable_ip+0x3b/0x140 [ 62.031969] ? local_bh_enable+0x36/0x40 [ 62.036025] ? kmsan_set_origin_inline+0x6b/0x120 [ 62.040864] ? sctp_getsockopt+0x145b0/0x145b0 [ 62.045433] inet_sendmsg+0x48d/0x740 [ 62.049219] ? inet_getname+0x500/0x500 [ 62.053194] ___sys_sendmsg+0xec0/0x1310 [ 62.057250] ? __fget_light+0x56/0x710 [ 62.061115] ? __fdget+0x4e/0x60 [ 62.064463] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 62.069804] ? __fget_light+0x6b9/0x710 [ 62.073761] __sys_sendmmsg+0x42d/0x800 [ 62.077725] ? __msan_poison_alloca+0x15c/0x1d0 [ 62.082417] ? syscall_return_slowpath+0xe9/0x700 [ 62.087274] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 62.092206] SYSC_sendmmsg+0xc4/0x110 [ 62.095996] SyS_sendmmsg+0x63/0x90 [ 62.099613] do_syscall_64+0x309/0x430 [ 62.103492] ? __sys_sendmmsg+0x800/0x800 [ 62.107632] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 62.112809] RIP: 0033:0x455259 [ 62.115990] RSP: 002b:00007f0335415c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.123694] RAX: ffffffffffffffda RBX: 00007f03354166d4 RCX: 0000000000455259 [ 62.130942] RDX: 0000000000000002 RSI: 000000002093eee8 RDI: 0000000000000013 [ 62.138194] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 62.145464] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 62.152716] R13: 00000000000004c9 R14: 00000000006fa378 R15: 0000000000000000 [ 62.160431] Dumping ftrace buffer: [ 62.163950] (ftrace buffer empty) [ 62.167634] Kernel Offset: disabled [ 62.171247] Rebooting in 86400 seconds..