INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. 2018/04/07 06:28:38 fuzzer started 2018/04/07 06:28:38 dialing manager at 10.128.0.26:38639 2018/04/07 06:28:45 kcov=true, comps=false 2018/04/07 06:28:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000170ff0)={0x1, 0x0, 0x0, 0x10001}) fcntl$lock(r0, 0x5, &(0x7f000005a000)) 2018/04/07 06:28:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000001000)) r1 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0x100000001, &(0x7f0000001000)) 2018/04/07 06:28:48 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000002180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f00000000c0)={0x24, 0x2d, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x10, 0x0, @u64}]}, 0x24}, 0x1}, 0x0) 2018/04/07 06:28:48 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:28:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000004000)=@sack_info={0x0}, &(0x7f0000004000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x20) 2018/04/07 06:28:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000f94fda)="15000000130047f10701c1b00ef900000700000000", 0x15) 2018/04/07 06:28:48 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"294d8aa73a1cd558390000000800", 0x102}) 2018/04/07 06:28:48 executing program 6: r0 = socket(0x11, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"696662300000000000000000d9a2fb18", 0x14013}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) syzkaller login: [ 43.106395] ip (3829) used greatest stack depth: 54312 bytes left [ 44.099263] ip (3925) used greatest stack depth: 54296 bytes left [ 44.142437] ip (3926) used greatest stack depth: 53656 bytes left [ 45.920405] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.929278] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.033297] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.175763] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.205813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.234638] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.268955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.287610] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.781177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.979142] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.003924] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.024465] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.053587] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.066751] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.075872] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.085138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.553890] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.560138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.571424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.700565] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.706814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.720323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.759685] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.767750] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.774075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.803370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.828715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.845852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.863486] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.869667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.877513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.897265] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.912576] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.922007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.928393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.936572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.982398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.006732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.041593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.054597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 06:29:04 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a2effc), &(0x7f00007c4000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) getpriority(0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) wait4(r2, 0x0, 0x80000000, &(0x7f000005af70)) 2018/04/07 06:29:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x1) 2018/04/07 06:29:05 executing program 5: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000056000d6dfcffff05bc0203030701ff2104173f8100000002000039", 0x1f) recvmsg$netrom(r0, &(0x7f0000000400)={&(0x7f000029eff0)=@ax25={0x3, {"091c7b55e8647a"}}, 0x10, &(0x7f0000bcc000), 0x0, &(0x7f0000000040)}, 0x0) 2018/04/07 06:29:05 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client0\x00', 0x0, "90ca826689143859", "7483bc48378d5aec99ec82084ac2fccb1c56329648f19a24a47a254d6cfcb6d7"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/07 06:29:05 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)='/dev/vcs#\x00') 2018/04/07 06:29:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/07 06:29:06 executing program 3: r0 = socket$inet(0x10, 0x802, 0xc) sendto$inet(r0, &(0x7f0000004fa5)="320000001000250f07000093000914040301c2fe203cba9553a640fe319a00000a002e0000cd244fe56714eea4eb3456d711", 0x32, 0x0, 0x0, 0x0) 2018/04/07 06:29:06 executing program 5: r0 = socket$inet6(0xa, 0x4810000000000003, 0x80) connect$inet6(r0, &(0x7f0000024000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000023000), 0x0, &(0x7f0000023000)}, 0x8000) sendmsg(r0, &(0x7f000000afc8)={0x0, 0x0, &(0x7f000000bfc0)=[{&(0x7f0000015000)='_', 0x1}], 0x1, &(0x7f0000006e48)}, 0x0) 2018/04/07 06:29:06 executing program 6: mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, &(0x7f0000000200)) 2018/04/07 06:29:06 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x24c) 2018/04/07 06:29:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x40}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/04/07 06:29:06 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000b81000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@multicast1=0xe0000001]}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000231000)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/04/07 06:29:06 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:06 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000e76000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c12ae701b74daf6c7e9ec726930f1893953fc43d7c63050e359e8ada93a455fa265b578a5f92b7fc5698f55d554653f0ced1f85c3735bd21bca77d7d9ba3458472926ed49515628bd9c3b940a33cc1bc77ea3a584afc89539a", 0x88, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000009940)=[{{&(0x7f0000002580)=@nfc_llcp, 0x80, &(0x7f0000002940)=[{&(0x7f0000002600)=""/87, 0x57}, {&(0x7f00000028c0)=""/114, 0x72}], 0x2, &(0x7f00000029c0)=""/8, 0x8}}], 0x1, 0x0, &(0x7f0000009bc0)) [ 58.321161] netlink: 30 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/07 06:29:06 executing program 1: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x0, 0x32, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./control\x00', &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) 2018/04/07 06:29:06 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:06 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x2, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYRES16]}, 0x7a) 2018/04/07 06:29:06 executing program 5: mkdir(&(0x7f0000b32000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00002d7000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/07 06:29:06 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:06 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x2d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, &(0x7f0000000000), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x42, 0x817, 'syz_tun\x00', 'bpq0\x00', 'syzkaller1\x00', 'ip_vti0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff], 0x70, 0xa0, 0xe8}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"d141dd468ee374fd56ca801fea6f175c186a5c8902c1a23752b4e6ff69e6"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x0, 0x0, 'nr0\x00', 'irlan0\x00', "73797a80616c6cf58400", 'eql\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x108, 0x158}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x4, 0x9}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x348) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'teql0\x00', &(0x7f0000000040)=@ethtool_gfeatures={0x3a, 0x9, [{0xaca, 0x8, 0x80, 0x7}, {0x1, 0x5, 0x9, 0x400}, {0x9e91, 0xffffffffffffff7f, 0x81, 0xffffffff}, {0x400, 0x5, 0xfffffffffffffff9, 0x2}, {0x9, 0xfff, 0xfff, 0xfffffffffffff800}, {0x3, 0x1, 0xe5b, 0x8}, {0x7, 0xffff, 0x5, 0xe202}, {0x1, 0x2, 0xe26, 0x4}, {0x3f, 0x9, 0x3ff}]}}) 2018/04/07 06:29:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f00000011c0)={0x2ffffffff000, 0x7}) 2018/04/07 06:29:06 executing program 6: getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0), &(0x7f000005c000)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x1) ioctl$int_out(r0, 0x1, &(0x7f000005bff8)) 2018/04/07 06:29:06 executing program 0: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000180), 0x1b2) 2018/04/07 06:29:06 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:06 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x8800) ioctl(r0, 0x440000000000127a, &(0x7f0000000040)) 2018/04/07 06:29:06 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1}, 0x0) 2018/04/07 06:29:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x4, 0x474, [0x200003c0, 0x0, 0x0, 0x200005e0, 0x20000610], 0x0, &(0x7f00000001c0), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x5, 0x0, 0x0, 'bpq0\x00', 'syzkaller0\x00', 'bond0\x00', 'dummy0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xd0, 0x100}, [@arpreply={'arpreply\x00', 0xc}, @arpreply={'arpreply\x00', 0xc, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @snat={'snat\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0xf, 0x0, 0x0, 'lo\x00', 'lo\x00', 'vcan0\x00', 'teql0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x98, 0xc8, 0xf0, [@pkttype={'pkttype\x00', 0x4}]}, [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0x0, 0x2, [{{{0x9, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', 'bpq0\x00', 'ifb0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @random="b665956b6d0a", [], 0xac, 0xac, 0xf4, [@time={'time\x00', 0x18}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x0, 'syz0\x00'}}}}, {{{0x0, 0x0, 0x0, 'teql0\x00', 'bcsh0\x00', 'bcsf0\x00', 'bpq0\x00', @random="c8fbc596a5e5", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0xa0, 0xd0}, [@arpreply={'arpreply\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0xc, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}]}]}, 0x538) 2018/04/07 06:29:06 executing program 2: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002080)="20f84ebc46445837106f036fd6f85dbfd1ab4c76357c406bb60d0d69fde6f0986f9f39b32529e896185f12d9bd2bff195a4c0393b98aa1b81ee520bd5aff9917fca8eb66c5ff390228f9149359e2", 0x4e) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/07 06:29:06 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:06 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)) 2018/04/07 06:29:07 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x244, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000001480), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'lo\x00', 'ip6gretap0\x00', 'bcsh0\x00', "7369743039f000", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x70, 0x98, 0xc0}, [@common=@AUDIT={'AUDIT\x00', 0x4}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'sit0\x00', "658b85a9a9160d9b2fc6acb15e00", 'bond0\x00', 'vlan0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xa0, 0xcc, 0xf4, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x2}}}]}, [@common=@mark={'mark\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2f0) 2018/04/07 06:29:07 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:07 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f0000fd5ff8)=@abs, &(0x7f00007bdffc)=0x8, 0x0) 2018/04/07 06:29:07 executing program 2: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000471ff8)={0x0, 0x0}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f000001dff7)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000080), 0x1000000000fe) 2018/04/07 06:29:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/04/07 06:29:07 executing program 5: mkdir(&(0x7f0000b32000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00002d7000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/07 06:29:07 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:07 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000140)="29000000140003b7ff000000040860eb0100100006a4eb2fbe869b0eeafff00fd57f25ffffff010000", 0x29) 2018/04/07 06:29:07 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/07 06:29:07 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:07 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x10007ffe}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"d202b999cf85000000000098f3080010", 0x107}) 2018/04/07 06:29:07 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x8, 0x4) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/07 06:29:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/07 06:29:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000002000)=[{&(0x7f0000011000)='`', 0x1}], 0x1) 2018/04/07 06:29:08 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:08 executing program 5: mkdir(&(0x7f0000b32000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00002d7000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/07 06:29:08 executing program 1: r0 = socket$inet6(0xa, 0x8000000000003, 0x6) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) write(r0, &(0x7f0000000100)="d3dbb78714f112ffcfa070a4ddaaa300717fa83904000a09c0e1f1ad1bea444cb90662913149b8847295f684edc610169fc7e7df", 0x34) 2018/04/07 06:29:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00001aa000)=[{&(0x7f00006aaf01)=""/255, 0xff}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x400}) 2018/04/07 06:29:08 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:08 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f000000a000), 0x0, &(0x7f0000000000)}, 0x0) seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x1, &(0x7f0000012000)=[{0x6, 0x0, 0x0, 0xfffffffffffffff7}]}) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000ff8)) 2018/04/07 06:29:08 executing program 6: perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) 2018/04/07 06:29:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000c04000)={0x0, 0x0, 0x0, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400, r3}}) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0xffffffffffffffff) [ 60.451810] audit: type=1326 audit(1523082548.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5260 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0xffff0000 2018/04/07 06:29:08 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:08 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:08 executing program 1: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="240000002100030f07fffd946fa283bc8000000000000000271d856808001800d188738e", 0x24}], 0x1}, 0x0) 2018/04/07 06:29:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000c04000)={0x0, 0x0, 0x0, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400, r3}}) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0xffffffffffffffff) 2018/04/07 06:29:08 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000c04000)={0x0, 0x0, 0x0, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400, r3}}) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0xffffffffffffffff) 2018/04/07 06:29:08 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) [ 61.220955] audit: type=1326 audit(1523082549.219:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5260 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0xffff0000 2018/04/07 06:29:09 executing program 7: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:09 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000340)="1f0000000104fffffd06000000000000000501000b000100030423ca0000cf", 0x1f) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)) 2018/04/07 06:29:09 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x0, 0x0, 0x0, 0x20}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)) 2018/04/07 06:29:09 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000c04000)={0x0, 0x0, 0x0, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400, r3}}) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0xffffffffffffffff) 2018/04/07 06:29:09 executing program 4: msgsnd(0x0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:09 executing program 5: mkdir(&(0x7f0000b32000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00002d7000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/07 06:29:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00001aa000)=[{&(0x7f00006aaf01)=""/255, 0xff}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x400}) 2018/04/07 06:29:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0x1b2, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x10, 0x201}, 0x14}, 0x1}, 0x0) 2018/04/07 06:29:09 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="ecf3e8e31d98acd3ef6f26f860970ac37950df7ee4e02ecb86c98d710936bac90583b150640c4723", 0x28}], 0x1, &(0x7f0000001340)=[{0xc}], 0xc}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002580)="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", 0x5dd}], 0x1, &(0x7f0000003580)}}], 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000007f80)='./file0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007fc0)={@multicast1, @broadcast}, &(0x7f0000008000)=0xc) 2018/04/07 06:29:09 executing program 0: add_key(&(0x7f00000002c0)="6173796d6d65747269630000be3a8a3a9e389d6de516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a4af0a703d63e19620fd165b5d862e2635059c401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf69038c96c9d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bb566c069babaa64e30af6d878c", &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000000)="3080", 0x2, 0xfffffffffffffffd) 2018/04/07 06:29:09 executing program 7: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:09 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:09 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000c04000)={0x0, 0x0, 0x0, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400, r3}}) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0xffffffffffffffff) 2018/04/07 06:29:09 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000200)=@ethtool_cmd={0x24}}) 2018/04/07 06:29:09 executing program 3: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000480)) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000051ff0)={0x0, 0x989680}, 0x0) seccomp(0x1, 0x0, &(0x7f0000044ff0)={0x1, &(0x7f0000c00ff8)=[{0x6, 0x4, 0x0, 0xfffffffffffffffd}]}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/193) pwrite64(0xffffffffffffffff, &(0x7f0000002000)="2adf25f7f5b61d887b937817665af702", 0x10, 0x0) stat(&(0x7f00000000c0)='./control\x00', &(0x7f0000000140)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x143082, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000580)='./control\x00', &(0x7f0000000400)='./control\x00') ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000640)={0x89, 0x7, 0x0, 0x7, 0x6, 0x6, 0x7a55c3ce, 0x400000000000a40d, 0x0, 0xfffffffffffff2ba}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000002c0)=""/83) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000005c0)={0x3, 0x6b197e24, 0x4}) mkdir(&(0x7f000000e000)='./control\x00', 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000540), &(0x7f0000000500)=0x5) r1 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000008ff6)='./control\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001000)) unlinkat(r1, &(0x7f0000000040)='./control\x00', 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000006c0)=""/93) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000340)=0x8001, &(0x7f0000000380)=0x4) rt_sigpending(&(0x7f0000000680), 0x8) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000740)=0x6, 0x4) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000440)={0x6, 0x8}) seccomp(0x1, 0x1, &(0x7f00001a2ff0)={0x1, &(0x7f0000022000)=[{0x16}]}) [ 62.207825] audit: type=1326 audit(1523082550.206:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5355 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0xffff0000 2018/04/07 06:29:10 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:10 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @time}], 0x30) 2018/04/07 06:29:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) 2018/04/07 06:29:10 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000c04000)={0x0, 0x0, 0x0, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400, r3}}) 2018/04/07 06:29:10 executing program 5: mkdir(&(0x7f0000b32000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00002d7000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/07 06:29:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)) 2018/04/07 06:29:10 executing program 2: socket(0x11, 0x4000000000080003, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) [ 62.692467] audit: type=1326 audit(1523082550.691:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5355 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0x0 [ 62.717392] audit: type=1326 audit(1523082550.716:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5355 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45807a code=0x0 [ 62.790279] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) 2018/04/07 06:29:10 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x54) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fde49f)=0x19) 2018/04/07 06:29:10 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:10 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400}}) 2018/04/07 06:29:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={"627269646765300001002a8900", 0x8202}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bridge0\x00', 0x1}) 2018/04/07 06:29:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) 2018/04/07 06:29:11 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0xfffffffffffffffd, 0x0) 2018/04/07 06:29:11 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00007f2000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)) 2018/04/07 06:29:11 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:11 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400}}) 2018/04/07 06:29:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000021c0)={0x24, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, @u32}, @nested={0x8, 0xd, [@generic="d5"]}]}, 0x24}, 0x1}, 0x0) 2018/04/07 06:29:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000180)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00006ba000)={0x2, &(0x7f00006b1ff0)=[{0x20, 0x0, 0x0, 0xffff7ffffffff028}, {0x6}]}, 0x10) 2018/04/07 06:29:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00006ba000)={0x2, &(0x7f00006b1ff0)=[{0x20, 0x0, 0x0, 0xffff7ffffffff028}, {0x6}]}, 0x10) 2018/04/07 06:29:11 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:11 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000f06f74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400}}) 2018/04/07 06:29:11 executing program 5: mkdir(&(0x7f0000b32000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00002d7000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/07 06:29:11 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0x0, 0x0) 2018/04/07 06:29:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000021c0)={0x24, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, @u32}, @nested={0x8, 0xd, [@generic, @generic, @generic="d5"]}]}, 0x24}, 0x1}, 0x0) 2018/04/07 06:29:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd, 0x20011, r1, 0x0) pwrite64(r0, &(0x7f0000000280)='-', 0x1, 0x0) 2018/04/07 06:29:12 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400}}) 2018/04/07 06:29:12 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x9) 2018/04/07 06:29:12 executing program 2: symlink(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./control\x00') lremovexattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 2018/04/07 06:29:12 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:12 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0x0, 0x0) 2018/04/07 06:29:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vcan0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x28}}) 2018/04/07 06:29:12 executing program 2: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000040)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="1f0000000203193b000007000000068100023b050900020000000000feff58", 0x1f}], 0x1) 2018/04/07 06:29:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f00000000c0)=@ethtool_cmd={0x34}}) 2018/04/07 06:29:12 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/42}, 0xffffffad, 0x0, 0x0) 2018/04/07 06:29:12 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400}}) 2018/04/07 06:29:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000001c0)="120000003200e700046a0000000000008414", 0x12, 0x0, 0x0, 0x0) 2018/04/07 06:29:12 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:12 executing program 1: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000080)=[{0x87}, {0x6}]}, 0x10) 2018/04/07 06:29:12 executing program 3: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x0, {0x0, 0x2a}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x90) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x52}) 2018/04/07 06:29:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f00000cdff0)=[{&(0x7f00003e9000)="290000001c0055fcffffffffffffff0002000400000000000000010009000100000e010091645aff27", 0x29}], 0x1) 2018/04/07 06:29:12 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b", 0x2}], 0x1) 2018/04/07 06:29:12 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00 ', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000483000)={0x0, 0x1000000000004, 0x8000, {0x77359400}}) 2018/04/07 06:29:12 executing program 5: mkdir(&(0x7f0000b32000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f00002d7000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000003ff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/04/07 06:29:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xef) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x13d) 2018/04/07 06:29:12 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xeee, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, &(0x7f0000000380)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0/file0\x00'}, 0x10) 2018/04/07 06:29:13 executing program 3: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x20000000003, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000600)=[{0x10, 0x0, 0x7}], 0x10}}], 0x2, 0x0) 2018/04/07 06:29:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000000280)={0x1c, 0x4, 0x800006, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x200000001, @u32}]}, 0x1c}, 0x1}, 0x0) 2018/04/07 06:29:13 executing program 3: sendto$inet(0xffffffffffffffff, &(0x7f0000e9bf14), 0x0, 0x0, &(0x7f0000deaff0)={0x2}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x33c, &(0x7f0000000040)=@framed={{0x18}, [], {0x95}}, &(0x7f000039cff6)="7379e66b616c6c657200", 0x0, 0x1000, &(0x7f000039c000)=""/4096}, 0x15) 2018/04/07 06:29:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00006cdfa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) io_setup(0x401, &(0x7f000014b000)=0x0) io_submit(r2, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000391000)="83", 0x1}]) [ 65.430573] ================================================================== [ 65.437968] BUG: KMSAN: uninit-value in dccp_invalid_packet+0x3b8/0xf50 [ 65.444705] CPU: 1 PID: 5540 Comm: syz-executor1 Not tainted 4.16.0+ #81 [ 65.451523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.460858] Call Trace: [ 65.463423] [ 65.465561] dump_stack+0x185/0x1d0 [ 65.469174] ? dccp_invalid_packet+0x3b8/0xf50 [ 65.473741] kmsan_report+0x142/0x240 [ 65.477531] __msan_warning_32+0x6c/0xb0 [ 65.481579] dccp_invalid_packet+0x3b8/0xf50 [ 65.485973] ? ip_local_deliver_finish+0x6ed/0xd40 [ 65.490889] ? ip_local_deliver_finish+0x6ed/0xd40 [ 65.495804] dccp_v4_rcv+0xf7/0x2630 [ 65.499506] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 65.504858] ? raw_local_deliver+0x1462/0x1470 [ 65.509430] ? ip_local_deliver_finish+0x4a5/0xd40 [ 65.514342] ? local_bh_enable+0x40/0x40 [ 65.518387] ? local_bh_enable+0x40/0x40 [ 65.522435] ip_local_deliver_finish+0x6ed/0xd40 [ 65.527183] ip_local_deliver+0x43c/0x4e0 [ 65.531319] ? ip_local_deliver+0x4e0/0x4e0 [ 65.535628] ? ip_call_ra_chain+0x7b0/0x7b0 [ 65.539934] ip_rcv_finish+0x1253/0x16d0 [ 65.543984] ip_rcv+0x119d/0x16f0 [ 65.547421] ? ip_rcv+0x16f0/0x16f0 [ 65.551044] __netif_receive_skb_core+0x47cf/0x4a80 [ 65.556046] ? lapic_next_event+0x6a/0xa0 [ 65.560181] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 65.565966] ? ip_local_deliver_finish+0xd40/0xd40 [ 65.570881] process_backlog+0x62d/0xe20 [ 65.574934] ? rps_trigger_softirq+0x2f0/0x2f0 [ 65.579498] net_rx_action+0x7c1/0x1a70 [ 65.583461] ? net_tx_action+0xab0/0xab0 [ 65.587511] __do_softirq+0x56d/0x93d [ 65.591300] do_softirq_own_stack+0x2a/0x40 [ 65.595600] [ 65.597822] __local_bh_enable_ip+0x114/0x140 [ 65.602306] local_bh_enable+0x36/0x40 [ 65.606178] ip_finish_output2+0x124e/0x1380 [ 65.610577] ip_finish_output+0xcb0/0xff0 [ 65.614714] ip_output+0x502/0x5c0 [ 65.618243] ? ip_mc_finish_output+0x3b0/0x3b0 [ 65.622813] ? ip_finish_output+0xff0/0xff0 [ 65.627117] ip_send_skb+0x5f3/0x820 [ 65.630818] ? __ip_local_out+0x5b0/0x5b0 [ 65.634970] ip_push_pending_frames+0x105/0x170 [ 65.639626] raw_sendmsg+0x2960/0x3ed0 [ 65.643521] ? compat_raw_ioctl+0x100/0x100 [ 65.647828] inet_sendmsg+0x48d/0x740 [ 65.651617] ? security_socket_sendmsg+0x9e/0x210 [ 65.656450] ? inet_getname+0x500/0x500 [ 65.660413] SYSC_sendto+0x6c3/0x7e0 [ 65.664114] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 65.669552] ? prepare_exit_to_usermode+0x149/0x3a0 [ 65.674564] SyS_sendto+0x8a/0xb0 [ 65.678002] do_syscall_64+0x309/0x430 [ 65.681878] ? SYSC_getpeername+0x560/0x560 [ 65.686189] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 65.691359] RIP: 0033:0x455259 [ 65.694532] RSP: 002b:00007ffbd29fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 65.702227] RAX: ffffffffffffffda RBX: 00007ffbd29fb6d4 RCX: 0000000000455259 [ 65.709479] RDX: 0000000000000030 RSI: 0000000020000100 RDI: 0000000000000013 [ 65.716731] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000010 [ 65.723985] R10: 0000000000000800 R11: 0000000000000246 R12: 00000000ffffffff [ 65.731240] R13: 00000000000004f7 R14: 00000000006fa7c8 R15: 0000000000000000 [ 65.738492] [ 65.740097] Uninit was stored to memory at: [ 65.744404] kmsan_internal_chain_origin+0x12b/0x210 [ 65.749496] kmsan_memcpy_origins+0x11d/0x170 [ 65.753972] __msan_memcpy+0x19f/0x1f0 [ 65.757846] skb_copy_bits+0x63a/0xdb0 [ 65.761718] __pskb_pull_tail+0x483/0x22e0 [ 65.765934] dccp_invalid_packet+0x352/0xf50 [ 65.770322] dccp_v4_rcv+0xf7/0x2630 [ 65.774021] ip_local_deliver_finish+0x6ed/0xd40 [ 65.778762] ip_local_deliver+0x43c/0x4e0 [ 65.782894] ip_rcv_finish+0x1253/0x16d0 [ 65.787324] ip_rcv+0x119d/0x16f0 [ 65.790765] __netif_receive_skb_core+0x47cf/0x4a80 [ 65.795788] process_backlog+0x62d/0xe20 [ 65.799834] net_rx_action+0x7c1/0x1a70 [ 65.803792] __do_softirq+0x56d/0x93d [ 65.807569] Uninit was created at: [ 65.811093] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 65.816091] kmsan_alloc_page+0x82/0xe0 [ 65.820049] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 65.824787] alloc_pages_current+0x6b5/0x970 [ 65.829178] skb_page_frag_refill+0x3ba/0x5e0 [ 65.833656] sk_page_frag_refill+0xa4/0x340 [ 65.837964] __ip_append_data+0x107e/0x3d10 [ 65.842267] ip_append_data+0x2fb/0x440 [ 65.846230] raw_sendmsg+0x287b/0x3ed0 [ 65.850101] inet_sendmsg+0x48d/0x740 [ 65.853887] SYSC_sendto+0x6c3/0x7e0 [ 65.857584] SyS_sendto+0x8a/0xb0 [ 65.861017] do_syscall_64+0x309/0x430 [ 65.864891] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 65.870058] ================================================================== [ 65.877396] Disabling lock debugging due to kernel taint [ 65.882823] Kernel panic - not syncing: panic_on_warn set ... [ 65.882823] [ 65.890172] CPU: 1 PID: 5540 Comm: syz-executor1 Tainted: G B 4.16.0+ #81 [ 65.898292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.907626] Call Trace: [ 65.910188] [ 65.912323] dump_stack+0x185/0x1d0 [ 65.915934] panic+0x39d/0x940 [ 65.919128] ? dccp_invalid_packet+0x3b8/0xf50 [ 65.923694] kmsan_report+0x238/0x240 [ 65.927480] __msan_warning_32+0x6c/0xb0 [ 65.931526] dccp_invalid_packet+0x3b8/0xf50 [ 65.935920] ? ip_local_deliver_finish+0x6ed/0xd40 [ 65.940835] ? ip_local_deliver_finish+0x6ed/0xd40 [ 65.945750] dccp_v4_rcv+0xf7/0x2630 [ 65.949447] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 65.954794] ? raw_local_deliver+0x1462/0x1470 [ 65.959370] ? ip_local_deliver_finish+0x4a5/0xd40 [ 65.964280] ? local_bh_enable+0x40/0x40 [ 65.968323] ? local_bh_enable+0x40/0x40 [ 65.972368] ip_local_deliver_finish+0x6ed/0xd40 [ 65.977110] ip_local_deliver+0x43c/0x4e0 [ 65.981247] ? ip_local_deliver+0x4e0/0x4e0 [ 65.985553] ? ip_call_ra_chain+0x7b0/0x7b0 [ 65.989861] ip_rcv_finish+0x1253/0x16d0 [ 65.993913] ip_rcv+0x119d/0x16f0 [ 65.997351] ? ip_rcv+0x16f0/0x16f0 [ 66.000974] __netif_receive_skb_core+0x47cf/0x4a80 [ 66.005975] ? lapic_next_event+0x6a/0xa0 [ 66.010111] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 66.015900] ? ip_local_deliver_finish+0xd40/0xd40 [ 66.020814] process_backlog+0x62d/0xe20 [ 66.024868] ? rps_trigger_softirq+0x2f0/0x2f0 [ 66.029436] net_rx_action+0x7c1/0x1a70 [ 66.033404] ? net_tx_action+0xab0/0xab0 [ 66.037451] __do_softirq+0x56d/0x93d [ 66.041247] do_softirq_own_stack+0x2a/0x40 [ 66.045548] [ 66.047779] __local_bh_enable_ip+0x114/0x140 [ 66.052261] local_bh_enable+0x36/0x40 [ 66.056133] ip_finish_output2+0x124e/0x1380 [ 66.060531] ip_finish_output+0xcb0/0xff0 [ 66.064668] ip_output+0x502/0x5c0 [ 66.068193] ? ip_mc_finish_output+0x3b0/0x3b0 [ 66.072761] ? ip_finish_output+0xff0/0xff0 [ 66.077065] ip_send_skb+0x5f3/0x820 [ 66.080764] ? __ip_local_out+0x5b0/0x5b0 [ 66.084903] ip_push_pending_frames+0x105/0x170 [ 66.089562] raw_sendmsg+0x2960/0x3ed0 [ 66.093455] ? compat_raw_ioctl+0x100/0x100 [ 66.097763] inet_sendmsg+0x48d/0x740 [ 66.101552] ? security_socket_sendmsg+0x9e/0x210 [ 66.106385] ? inet_getname+0x500/0x500 [ 66.110345] SYSC_sendto+0x6c3/0x7e0 [ 66.114049] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 66.119481] ? prepare_exit_to_usermode+0x149/0x3a0 [ 66.124491] SyS_sendto+0x8a/0xb0 [ 66.127931] do_syscall_64+0x309/0x430 [ 66.131809] ? SYSC_getpeername+0x560/0x560 [ 66.136120] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.141290] RIP: 0033:0x455259 [ 66.144461] RSP: 002b:00007ffbd29fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 66.152155] RAX: ffffffffffffffda RBX: 00007ffbd29fb6d4 RCX: 0000000000455259 [ 66.159405] RDX: 0000000000000030 RSI: 0000000020000100 RDI: 0000000000000013 [ 66.166656] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000010 [ 66.173911] R10: 0000000000000800 R11: 0000000000000246 R12: 00000000ffffffff [ 66.181165] R13: 00000000000004f7 R14: 00000000006fa7c8 R15: 0000000000000000 [ 67.304258] Shutting down cpus with NMI [ 67.319836] Dumping ftrace buffer: [ 67.323356] (ftrace buffer empty) [ 67.327047] Kernel Offset: disabled [ 67.330655] Rebooting in 86400 seconds..