[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.716163] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.406595] random: sshd: uninitialized urandom read (32 bytes read) [ 31.698346] random: sshd: uninitialized urandom read (32 bytes read) [ 33.087179] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. [ 38.594205] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/12 09:58:59 fuzzer started 2018/05/12 09:59:00 dialing manager at 10.128.0.26:41643 [ 60.577840] can: request_module (can-proto-0) failed. [ 60.588854] can: request_module (can-proto-0) failed. 2018/05/12 09:59:23 kcov=true, comps=false 2018/05/12 09:59:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, &(0x7f00000002c0)) 2018/05/12 09:59:27 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) close(r0) 2018/05/12 09:59:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000586ff8)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0xfffffcc4) 2018/05/12 09:59:27 executing program 2: r0 = socket$inet(0xa, 0x803, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x0, 0x200000cbe}) 2018/05/12 09:59:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc000, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bridge0\x00') sendto$inet(r0, &(0x7f0000000140), 0xff93, 0x0, &(0x7f0000001140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/12 09:59:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 2018/05/12 09:59:27 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/05/12 09:59:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="6e65742f617270000218b57c55f0dc75b486018124f7c440c0eecbb02e40edff42c6e458f75306878cc9f36f948e1d36842196b8812187f40ad7dbca2739fd0088739cb4d40bb42d2835a0ee773405b1f57648a57d9306b876b0807bd6f33729b30545fa74f29a50f436bf600d6529dcf8466d6fef347840a42474aabdbc1a63e660667b8db5e191565739329cc409eef836385018178c") pread64(r0, &(0x7f0000000100)=""/8, 0x8, 0x3ffe) [ 66.966721] IPVS: ftp: loaded support on port[0] = 21 [ 66.986218] IPVS: ftp: loaded support on port[0] = 21 [ 67.030810] IPVS: ftp: loaded support on port[0] = 21 [ 67.036409] IPVS: ftp: loaded support on port[0] = 21 [ 67.045230] IPVS: ftp: loaded support on port[0] = 21 [ 67.048831] IPVS: ftp: loaded support on port[0] = 21 [ 67.050600] IPVS: ftp: loaded support on port[0] = 21 [ 67.095591] IPVS: ftp: loaded support on port[0] = 21 [ 69.002720] ip (4683) used greatest stack depth: 54456 bytes left [ 69.543068] ip (4723) used greatest stack depth: 54088 bytes left [ 70.453352] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.459823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.487381] device bridge_slave_0 entered promiscuous mode [ 70.535781] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.542267] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.561186] device bridge_slave_0 entered promiscuous mode [ 70.604406] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.610906] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.641800] device bridge_slave_0 entered promiscuous mode [ 70.655827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.662276] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.691184] device bridge_slave_0 entered promiscuous mode [ 70.709788] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.716686] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.741824] device bridge_slave_0 entered promiscuous mode [ 70.753656] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.760126] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.769820] device bridge_slave_1 entered promiscuous mode [ 70.779127] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.785620] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.794975] device bridge_slave_0 entered promiscuous mode [ 70.806338] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.812786] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.841104] device bridge_slave_1 entered promiscuous mode [ 70.856458] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.862876] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.888188] device bridge_slave_0 entered promiscuous mode [ 70.901073] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.907513] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.919612] device bridge_slave_0 entered promiscuous mode [ 70.937589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.945826] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.952288] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.986634] device bridge_slave_1 entered promiscuous mode [ 71.001549] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.008012] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.020150] device bridge_slave_1 entered promiscuous mode [ 71.027703] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.034155] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.047735] device bridge_slave_1 entered promiscuous mode [ 71.056379] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.062868] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.087108] device bridge_slave_1 entered promiscuous mode [ 71.111889] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.118331] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.144730] device bridge_slave_1 entered promiscuous mode [ 71.151798] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.158236] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.168434] device bridge_slave_1 entered promiscuous mode [ 71.175428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.182927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.199190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.207398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.215928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.224610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.337166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.410474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.422184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.433693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.441810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.449635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.480239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.508756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.678404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.781018] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.982214] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.043810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.077684] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.130719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.152286] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.164608] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.190584] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.201616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.216446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.276883] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.300695] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.321921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.377213] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.401315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.414097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.429019] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.521879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.528834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.539589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.546506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.573177] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.622738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.629709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.653790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.683561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.715658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.723216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.732284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.755872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.785555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.793656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.802515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.809545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.843454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.868963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.900957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.908309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.932555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.939501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.955779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.964834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.996918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.017906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.082647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.089610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.189667] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.211960] team0: Port device team_slave_0 added [ 73.339433] ip (4988) used greatest stack depth: 53800 bytes left [ 73.398783] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.432666] team0: Port device team_slave_0 added [ 73.459195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.474181] team0: Port device team_slave_1 added [ 73.511965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.520560] team0: Port device team_slave_0 added [ 73.555277] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.588145] team0: Port device team_slave_0 added [ 73.614304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.621252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.639554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.677092] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.687803] team0: Port device team_slave_0 added [ 73.704698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.713815] team0: Port device team_slave_1 added [ 73.730607] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.760280] team0: Port device team_slave_0 added [ 73.765771] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.775091] team0: Port device team_slave_0 added [ 73.798904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.807659] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.824797] team0: Port device team_slave_1 added [ 73.853667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.868147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.892356] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.909180] team0: Port device team_slave_1 added [ 73.916321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.928991] team0: Port device team_slave_0 added [ 73.945122] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.954160] team0: Port device team_slave_1 added [ 73.961203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.969552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.985241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.032904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.047775] team0: Port device team_slave_1 added [ 74.067215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.075238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.083237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.102629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.122735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.138228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.161786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.170181] team0: Port device team_slave_1 added [ 74.181845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.190761] team0: Port device team_slave_1 added [ 74.200424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.218513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.228389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.245925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.254855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.269019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.295293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.302460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.314567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.325682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.334419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.341907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.349613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.362124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.379555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.410002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.439367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.458684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.481232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.489759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.497852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.511491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.518745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.540532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.548675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.564020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.580797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.600478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.618391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.631535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.641910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.651762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.660205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.672356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.681797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.699308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.718089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.741164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.754668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.773183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.789675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.797891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.818480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.831004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.838979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.846296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.870968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.884846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.903624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.919938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.934828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.956321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.964690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.976733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.991765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.000366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.012764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.036572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.047584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.055767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.068188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.092214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.120854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.145249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.159479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.168503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.179219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.197103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.214170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.229246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.236853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.255729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.294011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.327157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.346382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.368948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.386838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.394854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.452833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.460965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.477974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.958546] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.965103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.971889] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.978326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.006796] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.015989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.517568] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.524126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.530983] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.537446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.593797] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.611709] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.618197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.625057] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.631521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.639637] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.658682] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.665152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.671994] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.678439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.689948] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.701466] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.707928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.714757] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.721210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.730405] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.737296] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.743719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.750548] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.756981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.780743] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.787558] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.794016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.800889] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.807358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.815314] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.980522] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.987020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.993882] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.000322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.035910] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.048544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.056786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.065667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.074671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.082889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.091755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.100779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.075765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.216739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.243150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.359435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.516930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.565813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.588569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.736514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.844898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.039763] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.049387] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.166850] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.302877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.366503] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.388124] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.561502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.667754] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.677340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.693352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.824405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.830697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.846418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.942392] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.948663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.960410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.994201] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.003929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.015270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.093132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.101813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.118072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.255106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.261399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.269172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.288588] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.297255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.339614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.424555] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.434177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.462635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.575408] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.709961] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.875018] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.918669] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.993106] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.131551] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.162545] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.215525] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 09:59:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, &(0x7f00000002c0)) 2018/05/12 09:59:55 executing program 5: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000080)="164690", 0x3) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000280)) 2018/05/12 09:59:55 executing program 6: 2018/05/12 09:59:55 executing program 4: 2018/05/12 09:59:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 2018/05/12 09:59:55 executing program 2: 2018/05/12 09:59:55 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) close(r0) 2018/05/12 09:59:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000586ff8)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0xfffffcc4) 2018/05/12 09:59:56 executing program 6: 2018/05/12 09:59:56 executing program 2: 2018/05/12 09:59:56 executing program 4: 2018/05/12 09:59:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 09:59:56 executing program 0: 2018/05/12 09:59:56 executing program 7: 2018/05/12 09:59:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000008000, 0x0, 0x0, 0x0, 0x0, 0x0) write$fuse(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000040000000000000000000000000000000000000000000000000000000000000000000800"], 0x28) 2018/05/12 09:59:56 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x7) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/132) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) 2018/05/12 09:59:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)) 2018/05/12 09:59:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 09:59:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 09:59:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001180)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492, 0x0) close(r0) 2018/05/12 09:59:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="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") getuid() setsockopt$inet_dccp_buf(r0, 0x21, 0x10, &(0x7f0000000140)="f45efd5b73aeb9387a41e745fa2064df44c9bd9da13412537d829927dbb9fa9ff55862cc312a21d9bb6b9f2f11f20b3646bb4dd6874311ab17dace18102d07f3bc583d881e8c7b55222b781e6440ff99b15140fc72f5a3b2343eccb0cededb5aa9016ff29ebe7bec67c0a53f0e4ab4b97ff2721107ba3eea0bb698c88e9541dec959cb13affdfa34ae43c902721a429cb9f1624ce194ea99248dbd1a0d069c5bb6bec117960cd9bb5e562b58640db0b0a1e9b6ca1bddfadbc42865444ba1e53c2d9218494d0bef9ca0f2b0465d353cb3b3aa1845b046dd60115d22265a0900000000000000066e83", 0xe8) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000ed9000)=""/202, 0xca}], 0x1000000000000178, 0x800800000062) 2018/05/12 09:59:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/05/12 09:59:57 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000140)=0x80, 0x0) sendto$inet(r1, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000b76fc8)={&(0x7f0000715000)={0x10}, 0xc, &(0x7f000066f000)={&(0x7f0000896000)=ANY=[]}, 0x1}, 0x0) sendmmsg(r2, &(0x7f000000b880)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) 2018/05/12 09:59:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 09:59:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 09:59:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)=@updpolicy={0xb8, 0x19, 0x303, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}}, 0xb8}, 0x1}, 0x0) 2018/05/12 09:59:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 09:59:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) close(r0) 2018/05/12 09:59:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 09:59:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 09:59:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000ec6fb0)={{0x8}}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000300)={0x0, 0x0, 0x0, "7175657565310000000000000000000000000000000000c5800000000000000000000000000000000000000400000000007f000000a30ad96c00"}) 2018/05/12 09:59:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0xffffffffffffffd2, 0x4) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002290f00383a0000000000000000000000ffff00000000ff020000000000000000000000000001010090780000000060d5cae20000000000ff020000000000000000000000000001f601929f106531aa"], 0x0) 2018/05/12 09:59:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) 2018/05/12 09:59:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 09:59:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001180)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492, 0x0) close(r0) 2018/05/12 09:59:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001380), &(0x7f00000013c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0xe6e, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001580)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x2, r1}) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) waitid(0x1, r2, &(0x7f0000000040), 0x8, &(0x7f0000000200)) 2018/05/12 09:59:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/05/12 09:59:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x104, 0x0, 0x0, {0x6}}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000001040)=""/4096, 0x12bb}, {&(0x7f0000000040)=""/107, 0x6b}], 0x2) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000800)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/05/12 09:59:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 09:59:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 09:59:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 09:59:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001380), &(0x7f00000013c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0xe6e, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001580)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x2, r1}) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) waitid(0x1, r2, &(0x7f0000000040), 0x8, &(0x7f0000000200)) 2018/05/12 09:59:58 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0xffffff1f}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/12 09:59:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 09:59:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 09:59:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 09:59:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 09:59:59 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f0000000200)='trustedsecuritywlan1@\x00', 0x16, 0x0) 2018/05/12 09:59:59 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0xffffff1f}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/12 09:59:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x11, @loopback=0x7f000001, 0x4e20, 0x0, 'lblcr\x00'}, 0x2c) 2018/05/12 09:59:59 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3c5, 0x0) 2018/05/12 09:59:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 09:59:59 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0xffffff1f}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/12 09:59:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 09:59:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x11, 0x0, 0x0, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x1c}, 0x1}, 0x0) 2018/05/12 09:59:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 09:59:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) [ 98.760308] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/05/12 09:59:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) [ 98.838655] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/05/12 10:00:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef43742c5633aaaaaaaaaa0086dd6050b79c00081100fe8000000000000000fc0000000000bbfe8000000000000900000000000000aa00004e200a089078"], &(0x7f0000000040)) 2018/05/12 10:00:00 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 10:00:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 10:00:00 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3c5, 0x0) 2018/05/12 10:00:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 10:00:00 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0xffffff1f}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/05/12 10:00:00 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1, 'client0\x00', 0x0, "72ba0c55d0074ddd", "56af6cabec47f2addf66e6481a7b1ec63d1703f0d3a6304849e5015aba079013"}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 10:00:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x2) fallocate(r1, 0x3, 0x0, 0x8004) 2018/05/12 10:00:00 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 10:00:00 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}) 2018/05/12 10:00:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:00 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 10:00:00 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@random="cdbf0e000084", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}, [], "800000e77f000400"}}}}}}}, 0x0) 2018/05/12 10:00:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 10:00:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/05/12 10:00:01 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x5, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000280)=0x9, &(0x7f00000002c0)=0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) bind(r1, &(0x7f0000000140)=@ax25={0x3, {"93346347018acc"}, 0x5}, 0x80) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) 2018/05/12 10:00:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 10:00:01 executing program 6: syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 10:00:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x22d) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendto$inet(r0, &(0x7f0000000dc0)='\x00\x00', 0x2, 0x20020003, &(0x7f00000001c0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) 2018/05/12 10:00:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="000000f46472656e00") r1 = openat$cgroup_ro(r0, &(0x7f0000000540)="6d656d0000008400090000e501e986", 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/169, 0x400000a9, 0x6f3000) 2018/05/12 10:00:01 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:01 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1, 'client0\x00', 0x0, "72ba0c55d0074ddd", "56af6cabec47f2addf66e6481a7b1ec63d1703f0d3a6304849e5015aba079013"}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 10:00:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000d1d000)=""/203, 0xcb}], 0x1) [ 100.582191] ================================================================== [ 100.589613] BUG: KMSAN: uninit-value in pointer+0x11e5/0x1410 [ 100.595501] CPU: 1 PID: 6891 Comm: syz-executor7 Not tainted 4.17.0-rc3+ #88 [ 100.602679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.612030] Call Trace: [ 100.614620] dump_stack+0x185/0x1d0 [ 100.618248] ? pointer+0x11e5/0x1410 [ 100.621964] kmsan_report+0x142/0x240 [ 100.625763] __msan_warning_32+0x6c/0xb0 [ 100.629822] ? futex_wait_queue_me+0x391/0x710 [ 100.634402] pointer+0x11e5/0x1410 [ 100.637943] ? futex_wait_queue_me+0x470/0x710 [ 100.642521] vsnprintf+0xa2d/0x33c0 [ 100.646153] seq_printf+0x29f/0x420 [ 100.649796] ? save_stack_trace_tsk+0x26a/0x2f0 [ 100.654471] ? futex_wait_queue_me+0x470/0x710 [ 100.659054] ? futex_wait_queue_me+0x470/0x710 [ 100.663640] ? futex_wait_queue_me+0x470/0x710 [ 100.668228] proc_pid_stack+0x326/0x470 [ 100.672210] proc_single_show+0x1af/0x300 [ 100.676359] ? proc_pid_wchan+0x200/0x200 [ 100.680509] ? proc_single_open+0x90/0x90 [ 100.684657] seq_read+0xc7d/0x2260 [ 100.688211] do_iter_read+0x880/0xd70 [ 100.692021] ? seq_open+0x380/0x380 [ 100.695654] do_readv+0x295/0x5f0 [ 100.699127] __x64_sys_readv+0xe1/0x120 [ 100.703107] do_syscall_64+0x154/0x220 [ 100.707007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.712198] RIP: 0033:0x455979 [ 100.715846] RSP: 002b:00007f2663ca3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 100.723558] RAX: ffffffffffffffda RBX: 00007f2663ca46d4 RCX: 0000000000455979 [ 100.730827] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000013 [ 100.738095] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.745357] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 100.752619] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000000 [ 100.759889] [ 100.761503] Uninit was stored to memory at: [ 100.765827] kmsan_internal_chain_origin+0x12b/0x210 [ 100.770928] __msan_chain_origin+0x69/0xc0 [ 100.775161] __save_stack_trace+0x829/0xb00 [ 100.779476] save_stack_trace_tsk+0x258/0x2f0 [ 100.783967] proc_pid_stack+0x26a/0x470 [ 100.787949] proc_single_show+0x1af/0x300 [ 100.792097] seq_read+0xc7d/0x2260 [ 100.795641] do_iter_read+0x880/0xd70 [ 100.799441] do_readv+0x295/0x5f0 [ 100.802903] __x64_sys_readv+0xe1/0x120 [ 100.806874] do_syscall_64+0x154/0x220 [ 100.810764] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.815939] Uninit was stored to memory at: [ 100.820265] kmsan_internal_chain_origin+0x12b/0x210 [ 100.825367] __msan_chain_origin+0x69/0xc0 [ 100.829604] update_stack_state+0x959/0xa40 [ 100.833929] unwind_next_frame+0x618/0xe50 [ 100.838164] __save_stack_trace+0x734/0xb00 [ 100.842486] save_stack_trace_tsk+0x258/0x2f0 [ 100.846982] proc_pid_stack+0x26a/0x470 [ 100.850957] proc_single_show+0x1af/0x300 [ 100.855103] seq_read+0xc7d/0x2260 [ 100.858641] do_iter_read+0x880/0xd70 [ 100.862438] do_readv+0x295/0x5f0 [ 100.865889] __x64_sys_readv+0xe1/0x120 [ 100.869855] do_syscall_64+0x154/0x220 [ 100.873737] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.878913] Local variable description: ----ug.i@mem_cgroup_uncharge_list [ 100.885824] Variable was created at: [ 100.889536] mem_cgroup_uncharge_list+0x42/0x1e0 [ 100.894290] release_pages+0x1647/0x1670 [ 100.898342] ================================================================== [ 100.905685] Disabling lock debugging due to kernel taint [ 100.911130] Kernel panic - not syncing: panic_on_warn set ... [ 100.911130] [ 100.918491] CPU: 1 PID: 6891 Comm: syz-executor7 Tainted: G B 4.17.0-rc3+ #88 2018/05/12 10:00:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 10:00:01 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:01 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="b1df225a2992d0122468ade90136e1207bf7b9d507aa31c3107260f965eb841f00158a6ad29145fd82fb9cb14fc6fd174b6107af99f667551991f9290f92eea0", 0x40}], 0x1, &(0x7f0000001c80)=[{0x60, 0x111, 0x2, "736c622d74abab5ba191796224d2d6da2305ffd38bf3867b11258d12de41a6d2c331a9b714af8fb62e990183d215da7a459f7133c03732a97c5e2eaaedb46a017e711a87dc1325e47a502298"}, {0x68, 0x116, 0xf0d6, "405c59b9345ae9a85dfd722349f5296f575700b778fe6fa8d23405411a35eadf4669a24cd1840494ecb88dae91bdbd864bd2e7d491d7a802fea1abbd15359898e334e28e25b052616fd888c29453e53a43282fa0a714"}, {0x108, 0x108, 0x80000000, "a53f08bebe53582b6eb29e4fd8552d235b9ecb1f4ec5fbcee95ba922ffc401d71ba274e0d8eaa7a530fcc5fe98a2d1e50f466cc7774f0321313a292bbf08161d2edfee78a770523ed9df4b9e918b228ff6a5ca0b7e49144bdaa5bd035d48aebe10167feb060fb4297da602f52520599ab1221f944efe82055cf5be99430eb47254c23bd191c52ccc853bdf38c6d948a0bcdddf3aed85effb2ad0e99bb4a0ef21cf8f92ac1c51d24fc986f30000000000000000000000000000e6cd84318c43efe4f6385addb8e4478d5b10b13c7520ecbebb24412a5841720d75c958c8f3375ff1ca80a639170cb7b1d6047f77f221d5a575e8cae71b4a"}], 0x1d0, 0x20000000}, 0x6}], 0x1, 0x20004011) 2018/05/12 10:00:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {}, 0x8, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/05/12 10:00:01 executing program 5: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/137, 0x89}], 0x2, 0x0) 2018/05/12 10:00:01 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="b1df225a2992d0122468ade90136e1207bf7b9d507aa31c3107260f965eb841f00158a6ad29145fd82fb9cb14fc6fd174b6107af99f667551991f9290f92eea0", 0x40}], 0x1, &(0x7f0000001c80)=[{0x60, 0x111, 0x2, "736c622d74abab5ba191796224d2d6da2305ffd38bf3867b11258d12de41a6d2c331a9b714af8fb62e990183d215da7a459f7133c03732a97c5e2eaaedb46a017e711a87dc1325e47a502298"}, {0x68, 0x116, 0xf0d6, "405c59b9345ae9a85dfd722349f5296f575700b778fe6fa8d23405411a35eadf4669a24cd1840494ecb88dae91bdbd864bd2e7d491d7a802fea1abbd15359898e334e28e25b052616fd888c29453e53a43282fa0a714"}, {0x108, 0x108, 0x80000000, "a53f08bebe53582b6eb29e4fd8552d235b9ecb1f4ec5fbcee95ba922ffc401d71ba274e0d8eaa7a530fcc5fe98a2d1e50f466cc7774f0321313a292bbf08161d2edfee78a770523ed9df4b9e918b228ff6a5ca0b7e49144bdaa5bd035d48aebe10167feb060fb4297da602f52520599ab1221f944efe82055cf5be99430eb47254c23bd191c52ccc853bdf38c6d948a0bcdddf3aed85effb2ad0e99bb4a0ef21cf8f92ac1c51d24fc986f30000000000000000000000000000e6cd84318c43efe4f6385addb8e4478d5b10b13c7520ecbebb24412a5841720d75c958c8f3375ff1ca80a639170cb7b1d6047f77f221d5a575e8cae71b4a"}], 0x1d0, 0x20000000}, 0x6}], 0x1, 0x20004011) [ 100.927057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.936407] Call Trace: [ 100.938998] dump_stack+0x185/0x1d0 [ 100.942633] panic+0x39d/0x940 [ 100.945851] ? pointer+0x11e5/0x1410 [ 100.949573] kmsan_report+0x238/0x240 [ 100.953377] __msan_warning_32+0x6c/0xb0 [ 100.957440] ? futex_wait_queue_me+0x391/0x710 [ 100.962019] pointer+0x11e5/0x1410 [ 100.965567] ? futex_wait_queue_me+0x470/0x710 [ 100.970159] vsnprintf+0xa2d/0x33c0 [ 100.973796] seq_printf+0x29f/0x420 [ 100.977442] ? save_stack_trace_tsk+0x26a/0x2f0 [ 100.982115] ? futex_wait_queue_me+0x470/0x710 [ 100.986693] ? futex_wait_queue_me+0x470/0x710 [ 100.991275] ? futex_wait_queue_me+0x470/0x710 [ 100.995856] proc_pid_stack+0x326/0x470 [ 100.999832] proc_single_show+0x1af/0x300 [ 101.003973] ? proc_pid_wchan+0x200/0x200 [ 101.008120] ? proc_single_open+0x90/0x90 [ 101.012268] seq_read+0xc7d/0x2260 [ 101.015816] do_iter_read+0x880/0xd70 [ 101.019619] ? seq_open+0x380/0x380 [ 101.023248] do_readv+0x295/0x5f0 [ 101.026713] __x64_sys_readv+0xe1/0x120 [ 101.030693] do_syscall_64+0x154/0x220 [ 101.034583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.039767] RIP: 0033:0x455979 [ 101.042953] RSP: 002b:00007f2663ca3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 101.050658] RAX: ffffffffffffffda RBX: 00007f2663ca46d4 RCX: 0000000000455979 [ 101.057924] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000013 [ 101.065187] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 101.072454] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 101.079717] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000000 [ 101.087451] Dumping ftrace buffer: [ 101.090975] (ftrace buffer empty) [ 101.094657] Kernel Offset: disabled [ 101.098259] Rebooting in 86400 seconds..