INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. 2018/04/20 13:18:03 fuzzer started 2018/04/20 13:18:04 dialing manager at 10.128.0.26:40315 2018/04/20 13:18:10 kcov=true, comps=false 2018/04/20 13:18:13 executing program 0: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)) 2018/04/20 13:18:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/20 13:18:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) 2018/04/20 13:18:13 executing program 7: r0 = socket(0x18, 0x0, 0x80000000000003) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/04/20 13:18:13 executing program 4: r0 = socket(0x10, 0x4000000000000802, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001200010000000000fcdbdf250000000074000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 2018/04/20 13:18:13 executing program 3: request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x0) 2018/04/20 13:18:13 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/mcfilter6\x00') 2018/04/20 13:18:13 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x2000080c, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) syzkaller login: [ 42.445870] ip (3754) used greatest stack depth: 54688 bytes left [ 42.804702] ip (3784) used greatest stack depth: 54672 bytes left [ 43.705825] ip (3879) used greatest stack depth: 54544 bytes left [ 43.877584] ip (3893) used greatest stack depth: 54200 bytes left [ 44.309191] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.315720] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.349103] device bridge_slave_0 entered promiscuous mode [ 44.357395] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.363858] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.392243] device bridge_slave_0 entered promiscuous mode [ 44.416946] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.423430] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.438911] device bridge_slave_0 entered promiscuous mode [ 44.448919] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.455353] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.473323] device bridge_slave_0 entered promiscuous mode [ 44.503125] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.509554] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.520258] device bridge_slave_0 entered promiscuous mode [ 44.538958] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.545412] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.562190] device bridge_slave_0 entered promiscuous mode [ 44.579271] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.585714] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.602724] device bridge_slave_0 entered promiscuous mode [ 44.613549] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.620105] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.648765] device bridge_slave_1 entered promiscuous mode [ 44.655529] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.662080] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.672539] device bridge_slave_1 entered promiscuous mode [ 44.679220] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.685672] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.698463] device bridge_slave_0 entered promiscuous mode [ 44.718441] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.724905] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.742184] device bridge_slave_1 entered promiscuous mode [ 44.749609] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.756112] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.771369] device bridge_slave_1 entered promiscuous mode [ 44.777632] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.784141] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.803133] device bridge_slave_1 entered promiscuous mode [ 44.813149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.820527] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.827009] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.853976] device bridge_slave_1 entered promiscuous mode [ 44.862200] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.868637] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.885932] device bridge_slave_1 entered promiscuous mode [ 44.897783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.906392] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.912853] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.938492] device bridge_slave_1 entered promiscuous mode [ 44.947252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.955342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.964332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.990216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.079559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.087113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.101629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.140084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.147531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.160412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.180436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.288136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.298799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.395771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.007092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.037841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.071999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.152434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.179958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.198982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.244573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.295086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.308841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.324278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.345983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.356671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.383807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.521001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.530673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.542779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.155960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.218649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.309158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.349789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.374956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.391275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.412499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.441506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.482482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.526978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.589333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.610632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.619571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.638865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.661914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.673171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.682892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.699286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.706742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.716176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.736409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.783548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.795352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.804066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.840766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.873596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.892283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.907173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.919786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.936379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.944435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.962965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.984547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.998710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.015155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.023229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.033966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.044634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.056780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.067549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.084476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.091922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.099684] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.111942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.119648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.145921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.171696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.193798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.222586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.240775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.261543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.270396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.280783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.320667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.328678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.335946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.351201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.392509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.423776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.455516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.463624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.487744] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.513846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.524951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.377380] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.383878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.390768] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.397201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.422642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.429856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.451874] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.458326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.465192] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.471632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.484609] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.495119] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.501562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.508404] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.514863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.524738] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.544487] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.550917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.557733] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.564165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.595883] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.603008] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.609504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.616363] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.622808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.650189] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.656923] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.663382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.670269] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.676694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.684952] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.709847] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.716297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.723158] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.729601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.807996] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.867264] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.873752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.880554] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.887010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.929817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.488204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.501973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.519866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.534144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.542576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.551441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.560083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.703117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.847338] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.860909] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.886773] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.977822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.053559] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.188324] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.284216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.447724] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.453976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.461966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.652899] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.659158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.672594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.712392] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.723903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.731787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.754500] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.766825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.793583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.817282] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.824277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.858137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.975811] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.982137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.998629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.052152] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.058403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.069585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.203908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.210188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.221655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 13:18:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') 2018/04/20 13:18:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffc00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 2018/04/20 13:18:39 executing program 4: socketpair$inet(0x2, 0xa, 0x0, &(0x7f0000000000)) 2018/04/20 13:18:39 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) [ 66.539001] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/20 13:18:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[], 0x0) 2018/04/20 13:18:39 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1\x00', {0x2, 0x4e21}}) 2018/04/20 13:18:39 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)) 2018/04/20 13:18:39 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@sb={'sb', 0x3d, [0x31, 0x35, 0x78, 0x30, 0x34, 0x3d, 0x3d, 0x37]}, 0x2c}]}) 2018/04/20 13:18:39 executing program 7: creat(&(0x7f0000003200)='./file0\x00', 0x0) stat(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)) 2018/04/20 13:18:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000000)=':', 0x1, 0x0, 0x0, 0x0) 2018/04/20 13:18:39 executing program 3: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000100)='f', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) 2018/04/20 13:18:39 executing program 6: readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) 2018/04/20 13:18:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) r0 = open$dir(&(0x7f0000002400)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000010) fcntl$setown(r0, 0x8, 0x0) renameat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 2018/04/20 13:18:40 executing program 1: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0xcaa) 2018/04/20 13:18:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x0, 0x1}}, &(0x7f00000001c0)=0x20) 2018/04/20 13:18:40 executing program 6: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='W', 0x1, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) 2018/04/20 13:18:40 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000000080)) 2018/04/20 13:18:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x4, 0x4) 2018/04/20 13:18:40 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffc00, 0x0) 2018/04/20 13:18:40 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@sb={'sb', 0x3d, [0x31, 0x35, 0x78, 0x30, 0x34, 0x3d, 0x3d, 0x37]}, 0x2c}]}) 2018/04/20 13:18:41 executing program 6: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='W', 0x1, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) 2018/04/20 13:18:41 executing program 2: r0 = socket(0x18, 0x0, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @rand_addr}, &(0x7f0000000080)=0x8) 2018/04/20 13:18:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 2018/04/20 13:18:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) r0 = open$dir(&(0x7f0000002400)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000010) fcntl$setown(r0, 0x8, 0x0) renameat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 2018/04/20 13:18:41 executing program 3: mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000000, &(0x7f0000000140)) 2018/04/20 13:18:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f"], 0x1) getsockopt$inet_tcp_int(r0, 0x6, 0xb, &(0x7f0000000040), &(0x7f0000000200)) 2018/04/20 13:18:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x0, {{0xa}}}, 0x8c) 2018/04/20 13:18:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), 0x3) 2018/04/20 13:18:41 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047dd8c2692556b875835a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000076"], 0x218) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/20 13:18:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0xdc) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000200)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000140)=[{0x90, 0x0, 0x0, "50d1ee525eeebb3f483512bcf167a6453db045746d058bb44bd4e5e00b3bff4c816621612793622882618895bbb69f3673a78af7c024fc2e81e077ea75c426c9776d66a6bac5987bb514836db021f87fdddbf332df30f8064473aca42f3c65ec07676a967b4ac312fe8894e8c34a96796c62780b014603d091125a3776"}], 0x90}}], 0x2, 0x0) 2018/04/20 13:18:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="7461736b00e9152df763de16a49e1334e0c4b65087ee2387e3e302c72ed48069de69353b096e924b7a47705e7746813a030d8a4d347f737f29cca4a25445278cffab52e60795acf875d2febd4fd430ce1e4ef7af2c0356b279824a7f3116cba856fba4b4b111c30dd474c4251b78ee996041794b27382a29ec7ad6fba71e0ba9194228be8f88c89ca4b2e472e3353d8f9982ca9d373f332da4d5a4f52ffd48d5ac55ad4309ba742d9fe52362e8fee73f3daae77d7d6ccc9f2461ca4423dacdce2ee1725c21cd3406ca4bf1d71ac5ec083cca0de7964b90b2b786ccfc71f5331fbf66cf87e055de8c7ae74259e3543c0bc8e399f863") fstat(r0, &(0x7f0000001d40)) 2018/04/20 13:18:41 executing program 4: r0 = socket$inet(0x2, 0x1000000000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00003b9ffc)=0x40000000000800, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000011ffd)={0x2}, 0x10) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000), 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x0) 2018/04/20 13:18:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f00007f2000)=[{&(0x7f0000001f40)="b6", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)="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", 0x201}], 0x1) 2018/04/20 13:18:41 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fe4)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b800000018001f2400000000000000000a00000000000008000000001400090009000000", @ANYBLOB="0700000000000000fa5bc548e28e14bd2048fb3fdf49dc316e7e0360580162e6e497dd51b0aa00000000000000000e226840e222735229dc0112ad90727add8e148f90bbfc2782bbd26c7bf4ad1b8ddfcb2e54b909b8d911ac98dd30003262ac5ecff88f133f44273303a7d75aabe2917a259a34ae8fa7a295a01de3a87f1de16e73a4b7f6082cc757d997ad1a3558bb76832032f3114d8012663a8e52a14c146296ccef8d1cf1241e4ef5a21f6579feb9d1ed86d63b903e3350087cce0d5890c19a31579352db61b3a82f2d9dd258", @ANYBLOB="880008008200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad000000"], 0x3}, 0x1}, 0x0) 2018/04/20 13:18:41 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/20 13:18:41 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047dd8c2692556b875835a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000076"], 0x218) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/20 13:18:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @random="e92235361891"}, 0x3, {0x2}, 'syz_tun\x00'}) 2018/04/20 13:18:41 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000e, &(0x7f0000000040)=""/24, &(0x7f0000aed000)=0x18) 2018/04/20 13:18:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f0000001d40)) 2018/04/20 13:18:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x11) 2018/04/20 13:18:41 executing program 7: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@timestamp={0xffffff83, 0x4, 0x7}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/04/20 13:18:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) read(r0, &(0x7f0000000000)=""/188, 0xbc) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000e78a42), 0xd, 0x8084, &(0x7f00004d4000)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="fbf327899de7fe7e0c02fe5cbb35491715b7af550749e32dbeda8d7e3749bb6ac7383d2bfac27aa9c48c5d847fdc41ddc4b7c3add1701f2c", 0x38, 0x0, &(0x7f0000a6d000)={0x2, 0x0, @rand_addr}, 0x10) 2018/04/20 13:18:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_dump={0x3f}}) 2018/04/20 13:18:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f00007f2000)=[{&(0x7f0000001f40)="b6", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)="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", 0x201}], 0x1) 2018/04/20 13:18:41 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047dd8c2692556b875835a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000076"], 0x218) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/20 13:18:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @rand_addr}, 'ipddp0\x00'}) 2018/04/20 13:18:41 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="3361c3ce26e7", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x204e}}}}}}}, &(0x7f00000002c0)) 2018/04/20 13:18:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000180)='[*\x00', 0x3, 0x0) [ 69.703861] ================================================================== [ 69.711265] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 69.718517] CPU: 0 PID: 5914 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 69.725334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.734669] Call Trace: [ 69.737237] dump_stack+0x185/0x1d0 [ 69.740847] ? csum_partial_copy_to_user+0x450/0x500 [ 69.745931] kmsan_report+0x142/0x240 [ 69.749711] __msan_warning_32+0x6c/0xb0 [ 69.753752] csum_partial_copy_to_user+0x450/0x500 [ 69.758663] csum_and_copy_to_iter+0x3dc/0x2140 [ 69.763315] ? kmsan_set_origin_inline+0x6b/0x120 [ 69.768229] ? __msan_poison_alloca+0x15c/0x1d0 [ 69.772885] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 69.777977] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 69.783324] udp_recvmsg+0x99c/0x1d90 [ 69.787110] ? udp_skb_dtor_locked+0x770/0x770 [ 69.791670] inet_recvmsg+0x4c2/0x5f0 [ 69.795453] ? inet_sendpage+0x8c0/0x8c0 [ 69.799507] sock_read_iter+0x405/0x480 [ 69.803477] ? kernel_sock_ip_overhead+0x350/0x350 [ 69.808393] __vfs_read+0x6fb/0x8e0 [ 69.812021] vfs_read+0x36c/0x6c0 [ 69.815472] SYSC_read+0x172/0x360 [ 69.818992] SyS_read+0x55/0x80 [ 69.822266] do_syscall_64+0x309/0x430 [ 69.826135] ? vfs_write+0x8d0/0x8d0 [ 69.829829] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.834993] RIP: 0033:0x455379 [ 69.838165] RSP: 002b:00007f5174e4cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.845850] RAX: ffffffffffffffda RBX: 00007f5174e4d6d4 RCX: 0000000000455379 [ 69.853106] RDX: 00000000000000bc RSI: 0000000020000000 RDI: 0000000000000013 [ 69.860360] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.867609] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 69.874859] R13: 0000000000000490 R14: 00000000006f9e20 R15: 0000000000000000 [ 69.882107] [ 69.883709] Uninit was created at: [ 69.887231] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 69.892222] kmsan_alloc_page+0x82/0xe0 [ 69.896176] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 69.900911] alloc_pages_current+0x6b5/0x970 [ 69.905308] skb_page_frag_refill+0x3ba/0x5e0 [ 69.909793] sk_page_frag_refill+0xa4/0x340 [ 69.914101] __ip_append_data+0x107e/0x3d10 [ 69.918410] ip_append_data+0x2fb/0x440 [ 69.922363] udp_sendmsg+0x746/0x3180 [ 69.926142] inet_sendmsg+0x48d/0x740 [ 69.929919] SYSC_sendto+0x6c3/0x7e0 [ 69.933609] SyS_sendto+0x8a/0xb0 [ 69.937046] do_syscall_64+0x309/0x430 [ 69.940914] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.946079] ================================================================== [ 69.953409] Disabling lock debugging due to kernel taint [ 69.958830] Kernel panic - not syncing: panic_on_warn set ... [ 69.958830] [ 69.966175] CPU: 0 PID: 5914 Comm: syz-executor2 Tainted: G B 4.16.0+ #84 [ 69.974290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.983620] Call Trace: [ 69.986190] dump_stack+0x185/0x1d0 [ 69.989796] panic+0x39d/0x940 [ 69.992977] ? csum_partial_copy_to_user+0x450/0x500 [ 69.998066] kmsan_report+0x238/0x240 [ 70.001856] __msan_warning_32+0x6c/0xb0 [ 70.005898] csum_partial_copy_to_user+0x450/0x500 [ 70.010815] csum_and_copy_to_iter+0x3dc/0x2140 [ 70.015473] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.020292] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.024944] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 70.030045] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 70.035399] udp_recvmsg+0x99c/0x1d90 [ 70.039184] ? udp_skb_dtor_locked+0x770/0x770 [ 70.043743] inet_recvmsg+0x4c2/0x5f0 [ 70.047535] ? inet_sendpage+0x8c0/0x8c0 [ 70.051582] sock_read_iter+0x405/0x480 [ 70.055540] ? kernel_sock_ip_overhead+0x350/0x350 [ 70.060464] __vfs_read+0x6fb/0x8e0 [ 70.064090] vfs_read+0x36c/0x6c0 [ 70.067537] SYSC_read+0x172/0x360 [ 70.071071] SyS_read+0x55/0x80 [ 70.074328] do_syscall_64+0x309/0x430 [ 70.078195] ? vfs_write+0x8d0/0x8d0 [ 70.081888] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.087056] RIP: 0033:0x455379 [ 70.090228] RSP: 002b:00007f5174e4cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.097912] RAX: ffffffffffffffda RBX: 00007f5174e4d6d4 RCX: 0000000000455379 [ 70.105159] RDX: 00000000000000bc RSI: 0000000020000000 RDI: 0000000000000013 [ 70.112403] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.119648] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.126892] R13: 0000000000000490 R14: 00000000006f9e20 R15: 0000000000000000 [ 70.134673] Dumping ftrace buffer: [ 70.138200] (ftrace buffer empty) [ 70.141886] Kernel Offset: disabled [ 70.145487] Rebooting in 86400 seconds..