INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. 2018/04/29 20:03:29 fuzzer started 2018/04/29 20:03:29 dialing manager at 10.128.0.26:34153 syzkaller login: [ 47.541383] can: request_module (can-proto-0) failed. [ 47.553015] can: request_module (can-proto-0) failed. 2018/04/29 20:03:37 kcov=true, comps=false 2018/04/29 20:03:40 executing program 0: setresgid(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2, r1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ecaffc)=0x0) get_robust_list(r2, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0xffffffffffffffa6) 2018/04/29 20:03:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, "07dd8aa88df543f4e8844a1d2dde93fca76c9439cf05a87d9f0d610bc6036cf5409918395b3e884a674b150031b8a6fe71b0813a5c3417e15539bd31b48884d5", "81d5544ff77ddd1ab96cb15c973cc51708890ab412736ecbd95a95953cd957110522bed52db1e2da0800a8bc29006d61018f79bffc89ee3a2e9a4ae67fe9198c", "fe3f7b07120d64de9d947ed16020a9327433f12036fc4a9c3f50e1eb5fa6f631"}) sendfile(r0, r0, &(0x7f0000000080)=0xbe00, 0x102000004) 2018/04/29 20:03:40 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000700000083030402dd000000"], 0x18}}], 0x2, 0x0) 2018/04/29 20:03:40 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000600)={{0x2, 0x0, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, 'team_slave_0\x00'}) 2018/04/29 20:03:40 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) getgroups(0x1, &(0x7f00000002c0)=[0x0]) fchownat(r0, &(0x7f0000000180)='./control\x00', r1, 0x0, 0x1800) mkdir(&(0x7f0000000280)='./control\x00', 0x0) r2 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000443ff6)='./control\x00', r2, &(0x7f000034aff8)='./file0\x00') renameat(r2, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000009000)='./control\x00') name_to_handle_at(r2, &(0x7f0000000040)='./control\x00', &(0x7f0000fbb000)={0xc, 0x0, "507a7e93"}, &(0x7f000091bffc), 0x0) 2018/04/29 20:03:40 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000ed6fd9)="260000002200470153ff070089ffe8ff02006d2000001f00c0e9ffff497d62e5d813da5db0bd", 0x26) 2018/04/29 20:03:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) lstat(&(0x7f0000fd5000)='./file0\x00', &(0x7f0000059000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/29 20:03:40 executing program 6: [ 52.556485] IPVS: ftp: loaded support on port[0] = 21 [ 52.739008] IPVS: ftp: loaded support on port[0] = 21 [ 52.800308] IPVS: ftp: loaded support on port[0] = 21 [ 52.853935] IPVS: ftp: loaded support on port[0] = 21 [ 52.926541] IPVS: ftp: loaded support on port[0] = 21 [ 53.045738] IPVS: ftp: loaded support on port[0] = 21 [ 53.184945] IPVS: ftp: loaded support on port[0] = 21 [ 53.378693] IPVS: ftp: loaded support on port[0] = 21 [ 54.588858] ip (4692) used greatest stack depth: 54312 bytes left [ 55.046919] ip (4725) used greatest stack depth: 53752 bytes left [ 55.871449] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.878229] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.902163] device bridge_slave_0 entered promiscuous mode [ 56.007084] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.013580] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.028484] device bridge_slave_0 entered promiscuous mode [ 56.091802] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.098319] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.138288] device bridge_slave_1 entered promiscuous mode [ 56.154325] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.160839] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.170992] device bridge_slave_0 entered promiscuous mode [ 56.269253] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.275754] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.292940] ip (4814) used greatest stack depth: 53656 bytes left [ 56.311294] device bridge_slave_1 entered promiscuous mode [ 56.348072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.357066] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.363513] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.406121] device bridge_slave_1 entered promiscuous mode [ 56.456831] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.463383] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.486136] device bridge_slave_0 entered promiscuous mode [ 56.515804] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.522348] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.532546] device bridge_slave_0 entered promiscuous mode [ 56.555802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.563739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.579683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.695709] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.702266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.737294] device bridge_slave_1 entered promiscuous mode [ 56.785192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.796142] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.802705] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.835209] device bridge_slave_1 entered promiscuous mode [ 56.877933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.910999] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.917564] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.976332] device bridge_slave_0 entered promiscuous mode [ 57.001871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.010866] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.017323] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.036984] device bridge_slave_0 entered promiscuous mode [ 57.054921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.076475] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.082995] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.136356] device bridge_slave_0 entered promiscuous mode [ 57.202774] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.209291] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.231882] device bridge_slave_1 entered promiscuous mode [ 57.260578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.268978] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.275475] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.291844] device bridge_slave_1 entered promiscuous mode [ 57.316262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.346570] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.353104] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.390142] device bridge_slave_1 entered promiscuous mode [ 57.437121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.454202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.478831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.551030] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.621939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.632730] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.691949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.706920] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.716994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.803536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.855249] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.865959] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.899565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.975408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.984557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.996581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.017579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.036216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.069748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.076905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.117971] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.220125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.228828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.278492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.292824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.299967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.341881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.348966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.366419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.376180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.466671] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.486482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.495148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.539647] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.553829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.563451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.580612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.715738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.722908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.768348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.814307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.827693] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.982191] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.007186] team0: Port device team_slave_0 added [ 59.027111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.037297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.061265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.070892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.098197] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.116468] team0: Port device team_slave_0 added [ 59.136880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.145967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.194066] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.209487] team0: Port device team_slave_0 added [ 59.244814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.258470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.269855] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.283304] team0: Port device team_slave_1 added [ 59.322822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.330856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.347567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.367176] team0: Port device team_slave_1 added [ 59.384486] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.398950] team0: Port device team_slave_0 added [ 59.422610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.429663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.446842] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.478813] team0: Port device team_slave_0 added [ 59.495290] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.512505] team0: Port device team_slave_1 added [ 59.539834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.569402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.578910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.616704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.648560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.650754] ip (5032) used greatest stack depth: 53640 bytes left [ 59.673204] team0: Port device team_slave_1 added [ 59.694950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.714021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.745492] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.762315] team0: Port device team_slave_1 added [ 59.781130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.799193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.816354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.841207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.864188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.873723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.894413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.904891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.922660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.930287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.954189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.995253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.028517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.062968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.084515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.099428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.118205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.125672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.135967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.143846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.152930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.171798] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.186426] team0: Port device team_slave_0 added [ 60.195439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.202662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.216981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.242998] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.253544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.260993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.272770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.296962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.312806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.329891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.338824] team0: Port device team_slave_0 added [ 60.348683] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.369365] team0: Port device team_slave_0 added [ 60.393715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.407227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.421384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.452314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.459497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.491197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.513467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.522246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.541197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.559662] team0: Port device team_slave_1 added [ 60.574195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.593230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.607431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.623144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.644314] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.652127] team0: Port device team_slave_1 added [ 60.659321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.666957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.679882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.697354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.705391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.717386] team0: Port device team_slave_1 added [ 60.743502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.756154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.780754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.798749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.816444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.855661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.891276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.920157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.953143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.962526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.971602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.999763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.018417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.042102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.077870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.104345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.118309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.139878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.165815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.179393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.196563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.220250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.257871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.283464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.308373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.331351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.357996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.365376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.378656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.434727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.442365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.455142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.483857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.494482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.531429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.569380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.580253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.615284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.737583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.745345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.761289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.805484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.814216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.838296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.077270] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.083789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.090658] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.097320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.138197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.155151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.398619] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.405121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.412010] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.418504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.438623] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.459945] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.466434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.473494] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.479945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.490761] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.497950] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.504417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.511451] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.517897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.546834] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.791759] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.798271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.805166] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.811631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.875793] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.159648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.174971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.203799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.226911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.299974] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.306508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.313373] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.319835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.328941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.354703] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.361179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.368086] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.374514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.411738] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.425244] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.431745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.438607] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.445123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.476851] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.184109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.199963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.232366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.287789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.449689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.641686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.716277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.055490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.093830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.390681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.430642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.513351] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.546640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.599321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.788637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.876942] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.002644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.010061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.022062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.280645] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.287145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.300947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.355934] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.363814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.370159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.385950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.429150] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.492654] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.499021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.516465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.700877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.891113] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.935659] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.942175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.958996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.119648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.126098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.136950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.216275] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.249842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.289205] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.295968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.321672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.381268] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.529118] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.541632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.554384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.846787] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.071347] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.198940] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.448178] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/29 20:04:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, "07dd8aa88df543f4e8844a1d2dde93fca76c9439cf05a87d9f0d610bc6036cf5409918395b3e884a674b150031b8a6fe71b0813a5c3417e15539bd31b48884d5", "81d5544ff77ddd1ab96cb15c973cc51708890ab412736ecbd95a95953cd957110522bed52db1e2da0800a8bc29006d61018f79bffc89ee3a2e9a4ae67fe9198c", "fe3f7b07120d64de9d947ed16020a9327433f12036fc4a9c3f50e1eb5fa6f631"}) sendfile(r0, r0, &(0x7f0000000080)=0xbe00, 0x102000004) 2018/04/29 20:04:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, "07dd8aa88df543f4e8844a1d2dde93fca76c9439cf05a87d9f0d610bc6036cf5409918395b3e884a674b150031b8a6fe71b0813a5c3417e15539bd31b48884d5", "81d5544ff77ddd1ab96cb15c973cc51708890ab412736ecbd95a95953cd957110522bed52db1e2da0800a8bc29006d61018f79bffc89ee3a2e9a4ae67fe9198c", "fe3f7b07120d64de9d947ed16020a9327433f12036fc4a9c3f50e1eb5fa6f631"}) sendfile(r0, r0, &(0x7f0000000080)=0xbe00, 0x102000004) 2018/04/29 20:04:09 executing program 4: 2018/04/29 20:04:09 executing program 1: 2018/04/29 20:04:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) lstat(&(0x7f0000fd5000)='./file0\x00', &(0x7f0000059000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/29 20:04:11 executing program 2: 2018/04/29 20:04:11 executing program 4: 2018/04/29 20:04:11 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="5bc23c20f577f2145109091f7ed66700f72af4b7ab3e02e56280d05674fb2310e07b27ef310051aacfde", 0x2a, 0x8010, &(0x7f00000000c0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[], 0xfffffe38) shutdown(r0, 0x1) 2018/04/29 20:04:11 executing program 1: 2018/04/29 20:04:11 executing program 3: 2018/04/29 20:04:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) lstat(&(0x7f0000fd5000)='./file0\x00', &(0x7f0000059000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/29 20:04:11 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0xf1) sendto$inet(r0, &(0x7f0000000040), 0x8e01, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) [ 82.306716] ================================================================== [ 82.314172] BUG: KMSAN: uninit-value in ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 82.321909] CPU: 0 PID: 6650 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 82.328757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.338124] Call Trace: [ 82.340723] dump_stack+0x185/0x1d0 [ 82.344365] ? ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 82.349917] kmsan_report+0x142/0x240 [ 82.353736] __msan_warning_32+0x6c/0xb0 [ 82.357814] ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 82.363202] ip_route_output_flow+0x1eb/0x3c0 [ 82.367716] ? security_sk_classify_flow+0x49/0x190 [ 82.372749] raw_sendmsg+0x196a/0x41f0 [ 82.376667] ? compat_raw_ioctl+0x100/0x100 [ 82.381007] inet_sendmsg+0x48d/0x740 [ 82.384827] ? security_socket_sendmsg+0x9e/0x210 [ 82.389688] ? inet_getname+0x500/0x500 [ 82.393678] SYSC_sendto+0x6c3/0x7e0 [ 82.397565] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 82.403084] ? prepare_exit_to_usermode+0x149/0x3a0 [ 82.408126] SyS_sendto+0x8a/0xb0 [ 82.411589] do_syscall_64+0x309/0x430 [ 82.415489] ? SYSC_getpeername+0x560/0x560 [ 82.419827] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 82.425014] RIP: 0033:0x455979 [ 82.428205] RSP: 002b:00007f18e4034c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.435921] RAX: ffffffffffffffda RBX: 00007f18e40356d4 RCX: 0000000000455979 [ 82.443200] RDX: 0000000000008e01 RSI: 0000000020000040 RDI: 0000000000000014 [ 82.450484] RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000010 [ 82.457762] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 82.465042] R13: 0000000000000545 R14: 00000000006fbf18 R15: 0000000000000000 [ 82.472323] [ 82.473959] Local variable description: ----res.i.i@ip_route_output_flow [ 82.480798] Variable was created at: [ 82.484527] ip_route_output_flow+0x75/0x3c0 [ 82.488941] raw_sendmsg+0x196a/0x41f0 [ 82.492820] ================================================================== [ 82.500177] Disabling lock debugging due to kernel taint [ 82.505652] Kernel panic - not syncing: panic_on_warn set ... [ 82.505652] [ 82.513027] CPU: 0 PID: 6650 Comm: syz-executor7 Tainted: G B 4.16.0+ #87 [ 82.521168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.530519] Call Trace: [ 82.533128] dump_stack+0x185/0x1d0 [ 82.536862] panic+0x39d/0x940 [ 82.540088] ? ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 82.545628] kmsan_report+0x238/0x240 [ 82.549429] __msan_warning_32+0x6c/0xb0 [ 82.553502] ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 82.558857] ip_route_output_flow+0x1eb/0x3c0 [ 82.563543] ? security_sk_classify_flow+0x49/0x190 [ 82.568553] raw_sendmsg+0x196a/0x41f0 [ 82.572461] ? compat_raw_ioctl+0x100/0x100 [ 82.576780] inet_sendmsg+0x48d/0x740 [ 82.580567] ? security_socket_sendmsg+0x9e/0x210 [ 82.585412] ? inet_getname+0x500/0x500 [ 82.589393] SYSC_sendto+0x6c3/0x7e0 [ 82.593107] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 82.598567] ? prepare_exit_to_usermode+0x149/0x3a0 [ 82.603585] SyS_sendto+0x8a/0xb0 [ 82.607035] do_syscall_64+0x309/0x430 [ 82.610921] ? SYSC_getpeername+0x560/0x560 [ 82.615272] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 82.620461] RIP: 0033:0x455979 [ 82.623644] RSP: 002b:00007f18e4034c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.631498] RAX: ffffffffffffffda RBX: 00007f18e40356d4 RCX: 0000000000455979 [ 82.638761] RDX: 0000000000008e01 RSI: 0000000020000040 RDI: 0000000000000014 [ 82.646022] RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000010 [ 82.653298] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 82.660565] R13: 0000000000000545 R14: 00000000006fbf18 R15: 0000000000000000 [ 82.668303] Dumping ftrace buffer: [ 82.671834] (ftrace buffer empty) [ 82.675520] Kernel Offset: disabled [ 82.679123] Rebooting in 86400 seconds..