INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2018/04/25 18:55:43 fuzzer started 2018/04/25 18:55:44 dialing manager at 10.128.0.26:38541 syzkaller login: [ 48.467859] can: request_module (can-proto-0) failed. [ 48.478909] can: request_module (can-proto-0) failed. 2018/04/25 18:55:52 kcov=true, comps=false 2018/04/25 18:55:55 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x2, 0x10) 2018/04/25 18:55:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/25 18:55:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/25 18:55:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'QKg', 0x10, 0x32, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @remote={0xfe, 0x80, [], 0xbb}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1d888f", 0x0, 'Zc@'}}}}}}}, &(0x7f0000000080)) 2018/04/25 18:55:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000080)={0x2b8, &(0x7f0000000040)}) 2018/04/25 18:55:55 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x750926e9) 2018/04/25 18:55:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x401, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/25 18:55:55 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000001300)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)) [ 53.145777] IPVS: ftp: loaded support on port[0] = 21 [ 53.267467] IPVS: ftp: loaded support on port[0] = 21 [ 53.326370] IPVS: ftp: loaded support on port[0] = 21 [ 53.399740] IPVS: ftp: loaded support on port[0] = 21 [ 53.503082] IPVS: ftp: loaded support on port[0] = 21 [ 53.605704] IPVS: ftp: loaded support on port[0] = 21 [ 53.748703] IPVS: ftp: loaded support on port[0] = 21 [ 53.886305] IPVS: ftp: loaded support on port[0] = 21 [ 54.730953] ip (4673) used greatest stack depth: 54312 bytes left [ 55.673497] ip (4748) used greatest stack depth: 54200 bytes left [ 56.247141] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.253625] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.290177] device bridge_slave_0 entered promiscuous mode [ 56.344182] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.350696] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.392366] device bridge_slave_0 entered promiscuous mode [ 56.436332] ip (4802) used greatest stack depth: 53656 bytes left [ 56.493483] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.500002] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.529579] device bridge_slave_1 entered promiscuous mode [ 56.599582] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.606176] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.646179] device bridge_slave_1 entered promiscuous mode [ 56.674246] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.680730] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.700879] device bridge_slave_0 entered promiscuous mode [ 56.757588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.856475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.896731] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.903225] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.940120] device bridge_slave_1 entered promiscuous mode [ 56.962617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.005105] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.011625] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.033865] device bridge_slave_0 entered promiscuous mode [ 57.075738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.085353] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.091806] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.127247] device bridge_slave_0 entered promiscuous mode [ 57.153796] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.160324] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.176740] device bridge_slave_0 entered promiscuous mode [ 57.193091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.238799] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.245309] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.274135] device bridge_slave_1 entered promiscuous mode [ 57.310428] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.317470] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.377286] device bridge_slave_1 entered promiscuous mode [ 57.403756] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.410301] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.431236] device bridge_slave_1 entered promiscuous mode [ 57.457160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.472826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.516449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.524847] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.531370] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.588222] device bridge_slave_0 entered promiscuous mode [ 57.639878] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.649565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.674379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.703703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.728436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.749483] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.756009] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.811523] device bridge_slave_0 entered promiscuous mode [ 57.847076] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.853599] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.888700] device bridge_slave_1 entered promiscuous mode [ 57.912453] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.926678] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.933224] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.941772] device bridge_slave_1 entered promiscuous mode [ 57.984979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.993863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.107218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.115020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.232273] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.333632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.359160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.366223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.389562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.397899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.411599] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.425663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.432730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.489425] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.650241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.663442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.684134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.710697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.717731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.909501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.919175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.934647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.941855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.966901] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.999945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.007668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.032235] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.041540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.058806] team0: Port device team_slave_0 added [ 59.093920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.132880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.144724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.176608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.183657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.195630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.202658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.270131] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.287402] team0: Port device team_slave_0 added [ 59.298098] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.316502] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.341589] team0: Port device team_slave_1 added [ 59.383385] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.392819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.407704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.515929] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.540547] team0: Port device team_slave_1 added [ 59.570469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.585651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.593161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.608405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.636542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.687413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.702784] team0: Port device team_slave_0 added [ 59.730014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.737434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.767334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.776870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.807499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.816086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.834587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.860808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.870805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.888780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.928653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.943280] team0: Port device team_slave_0 added [ 59.964404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.971812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.983897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.011316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.024437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.052187] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.068867] team0: Port device team_slave_1 added [ 60.081808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.091838] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.111025] team0: Port device team_slave_0 added [ 60.133943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.154301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.190959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.207347] ip (5045) used greatest stack depth: 53640 bytes left [ 60.240557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.257531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.279722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.287492] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.309293] team0: Port device team_slave_1 added [ 60.320761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.338907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.369015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.377175] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.385218] team0: Port device team_slave_0 added [ 60.405518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.422396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.446139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.464721] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.478791] team0: Port device team_slave_1 added [ 60.489770] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.497651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.513529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.541120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.567164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.609767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.621451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.632429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.649606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.679993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.699980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.724224] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.739709] team0: Port device team_slave_1 added [ 60.761896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.769570] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.778217] team0: Port device team_slave_0 added [ 60.789698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.797713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.837323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.862891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.886336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.899441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.918498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.936657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.946747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.990243] team0: Port device team_slave_0 added [ 61.011692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.027894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.049110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.071269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.088765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.097788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.111569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.120390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.130664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.157518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.165130] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.186645] team0: Port device team_slave_1 added [ 61.193599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.209280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.235348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.252540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.259924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.296755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.326300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.351396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.381884] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.390526] team0: Port device team_slave_1 added [ 61.401927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.434017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.441863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.458715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.481692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.506440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.553709] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.562175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.576782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.609783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.619294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.633152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.660347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.672660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.696356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.726690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.749725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.769191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.809762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.826252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.847309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.899374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.906534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.922592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.039635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.047329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.063569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.162181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.169572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.178209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.343591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.351196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.364262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.226328] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.232814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.239671] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.246154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.280815] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.310152] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.316646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.323475] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.329902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.377700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.408239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.427709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.604098] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.610604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.617466] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.623969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.656079] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.976511] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.983154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.989993] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.996469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.044165] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.083199] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.089686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.096521] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.102975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.165226] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.192265] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.198759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.205642] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.212137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.260196] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.416386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.435362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.460924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.478727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.515478] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.521971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.528810] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.535255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.602018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.882951] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.889442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.896333] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.902790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.969217] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.442178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.454760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.252336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.404445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.671682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.911580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.030922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.096166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.253354] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.391219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.437592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.517932] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.726911] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.788126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.840974] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.847286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.856387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.932801] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.105591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.111904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.130850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.217274] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.290723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.395284] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.401650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.410509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.565498] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.584939] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.591557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.600960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.658331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.876831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.885175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.897269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.997248] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.053563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.059867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.072953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.133733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.140128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.152329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.409392] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.445859] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.495679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.504095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.518330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.766450] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.942672] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.003284] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.375679] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/25 18:56:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x401, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/25 18:56:23 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{}, {}, {}], 0x8b, &(0x7f0000034000)={0x0, 0x989680}) 2018/04/25 18:56:23 executing program 0: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) 2018/04/25 18:56:23 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{}, {}, {}], 0x8b, &(0x7f0000034000)={0x0, 0x989680}) 2018/04/25 18:56:23 executing program 7: setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, &(0x7f00000002c0)=0x98) add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0xfffffffffffffff9) r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) io_setup(0x20, &(0x7f0000c6b000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00001b0000)='l', 0x1}]) io_destroy(r1) shutdown(r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}, &(0x7f00000001c0)) 2018/04/25 18:56:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='/dev/loop#\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='.request_key_auth\x00', 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x8000, 0x820c, 0x81, 0x9, 0x1, 0x1a, 0x4, r3}, &(0x7f0000000380)=0x20) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 2018/04/25 18:56:23 executing program 6: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/25 18:56:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015d000)='9p\x00', 0x0, &(0x7f0000000040)) 2018/04/25 18:56:23 executing program 3: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)="b3", 0x1, 0xfffffffffffffffb) 2018/04/25 18:56:23 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000001300)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x83}) 2018/04/25 18:56:24 executing program 0: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) [ 81.052466] 9pnet_virtio: no channels available for device ./file0 2018/04/25 18:56:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000a40000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x90) close(r0) 2018/04/25 18:56:24 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)="34919a6e0958d9f4f0bb13ff2f91c19d2f4c53ae361526654c4abb9e504b4ea05edba753c6d50b2bba0e0c523c55588cfd5c79cc", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x0) 2018/04/25 18:56:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000340)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda40000af000000000700", 0xbfffffffffffffff, 0x2}) read(r0, &(0x7f0000000ec0)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/25 18:56:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYPTR]) r1 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) write$vnet(r1, &(0x7f0000000680)={0x1, {&(0x7f0000000c80)=""/4096, 0x1000, &(0x7f0000000580)=""/248}}, 0x68) 2018/04/25 18:56:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) restart_syscall() 2018/04/25 18:56:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x20000000001260, &(0x7f0000000000)) 2018/04/25 18:56:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x11d, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x2}, 0x52) close(r0) 2018/04/25 18:56:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='/dev/loop#\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='.request_key_auth\x00', 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x8000, 0x820c, 0x81, 0x9, 0x1, 0x1a, 0x4, r3}, &(0x7f0000000380)=0x20) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 2018/04/25 18:56:25 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)="34919a6e0958d9f4f0bb13ff2f91c19d2f4c53ae361526654c4abb9e504b4ea05edba753c6d50b2bba0e0c523c55588cfd5c79cc", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x0) 2018/04/25 18:56:25 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYPTR]) r1 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) write$vnet(r1, &(0x7f0000000680)={0x1, {&(0x7f0000000c80)=""/4096, 0x1000, &(0x7f0000000580)=""/248}}, 0x68) 2018/04/25 18:56:25 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x80041, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') 2018/04/25 18:56:25 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='/dev/loop#\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='.request_key_auth\x00', 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x8000, 0x820c, 0x81, 0x9, 0x1, 0x1a, 0x4, r3}, &(0x7f0000000380)=0x20) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) [ 82.251584] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 2018/04/25 18:56:25 executing program 0: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000100)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r0) 2018/04/25 18:56:25 executing program 2: r0 = socket(0x1e, 0x2, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0800000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/04/25 18:56:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/25 18:56:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000019c0)={@dev={0xfe, 0x80}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="1a1ec96a2de6", [], {@ipv6={0x86dd, {0x0, 0x6, "6dd695", 0x30, 0x3b, 0x0, @dev={0xfe, 0x80}, @empty, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '&\f+', 0x0, 0x0, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, &(0x7f00000000c0)) 2018/04/25 18:56:25 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='/dev/loop#\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='.request_key_auth\x00', 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x8000, 0x820c, 0x81, 0x9, 0x1, 0x1a, 0x4, r3}, &(0x7f0000000380)=0x20) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 2018/04/25 18:56:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/4096) 2018/04/25 18:56:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x11d, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x2}, 0x52) close(r0) [ 82.509888] ================================================================== [ 82.517326] BUG: KMSAN: uninit-value in tipc_node_get_mtu+0x200/0x7a0 [ 82.523916] CPU: 0 PID: 6726 Comm: syz-executor2 Not tainted 4.16.0+ #87 [ 82.530756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.540111] Call Trace: [ 82.542712] dump_stack+0x185/0x1d0 [ 82.546351] ? tipc_node_get_mtu+0x200/0x7a0 [ 82.550765] kmsan_report+0x142/0x240 [ 82.554580] __msan_warning_32+0x6c/0xb0 [ 82.558644] tipc_node_get_mtu+0x200/0x7a0 [ 82.562885] __tipc_sendmsg+0x1b32/0x41c0 [ 82.567042] ? kmsan_set_origin_inline+0x6b/0x120 [ 82.571891] ? __msan_poison_alloca+0x15c/0x1d0 [ 82.576571] ? local_bh_enable+0x36/0x40 [ 82.580647] tipc_sendmsg+0xeb/0x140 [ 82.584367] ? tipc_recvmsg+0x1c30/0x1c30 [ 82.588520] ___sys_sendmsg+0xec0/0x1310 [ 82.592600] ? __fdget+0x4e/0x60 [ 82.595983] SYSC_sendmsg+0x2a3/0x3d0 [ 82.599795] SyS_sendmsg+0x54/0x80 [ 82.603346] do_syscall_64+0x309/0x430 [ 82.607243] ? ___sys_sendmsg+0x1310/0x1310 [ 82.611579] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 82.616768] RIP: 0033:0x455389 [ 82.619949] RSP: 002b:00007f6cb4d61c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.627662] RAX: ffffffffffffffda RBX: 00007f6cb4d626d4 RCX: 0000000000455389 [ 82.634933] RDX: 0000000000000000 RSI: 0000000020030000 RDI: 0000000000000013 [ 82.638990] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 82.642196] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 82.642205] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 82.642211] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000000 [ 82.642221] [ 82.642227] Local variable description: ----dnode@__tipc_sendmsg [ 82.642229] Variable was created at: [ 82.642248] __tipc_sendmsg+0x20c/0x41c0 [ 82.642262] tipc_sendmsg+0xeb/0x140 [ 82.642266] ================================================================== [ 82.642270] Disabling lock debugging due to kernel taint [ 82.642276] Kernel panic - not syncing: panic_on_warn set ... [ 82.642276] [ 82.642290] CPU: 0 PID: 6726 Comm: syz-executor2 Tainted: G B 4.16.0+ #87 [ 82.642296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.642300] Call Trace: [ 82.642314] dump_stack+0x185/0x1d0 [ 82.642332] panic+0x39d/0x940 [ 82.642366] ? tipc_node_get_mtu+0x200/0x7a0 [ 82.642376] kmsan_report+0x238/0x240 [ 82.642402] __msan_warning_32+0x6c/0xb0 [ 82.752493] tipc_node_get_mtu+0x200/0x7a0 [ 82.756740] __tipc_sendmsg+0x1b32/0x41c0 2018/04/25 18:56:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400110100000000000000000a000000", @ANYBLOB="14000600000000f7ffffff0000010000000000021400010000000000000000000000000000000001"], 0x2}, 0x1}, 0x0) 2018/04/25 18:56:25 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='/dev/loop#\x00', 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='.request_key_auth\x00', 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x8000, 0x820c, 0x81, 0x9, 0x1, 0x1a, 0x4, r3}, &(0x7f0000000380)=0x20) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) [ 82.760893] ? kmsan_set_origin_inline+0x6b/0x120 [ 82.765745] ? __msan_poison_alloca+0x15c/0x1d0 [ 82.770416] ? local_bh_enable+0x36/0x40 [ 82.774492] tipc_sendmsg+0xeb/0x140 [ 82.778212] ? tipc_recvmsg+0x1c30/0x1c30 [ 82.782364] ___sys_sendmsg+0xec0/0x1310 [ 82.786439] ? __fdget+0x4e/0x60 [ 82.789822] SYSC_sendmsg+0x2a3/0x3d0 [ 82.793633] SyS_sendmsg+0x54/0x80 [ 82.797178] do_syscall_64+0x309/0x430 [ 82.801067] ? ___sys_sendmsg+0x1310/0x1310 [ 82.805392] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 82.810580] RIP: 0033:0x455389 [ 82.813761] RSP: 002b:00007f6cb4d61c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.821470] RAX: ffffffffffffffda RBX: 00007f6cb4d626d4 RCX: 0000000000455389 [ 82.828738] RDX: 0000000000000000 RSI: 0000000020030000 RDI: 0000000000000013 [ 82.836011] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 82.843280] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 82.850547] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000000 [ 82.858289] Dumping ftrace buffer: [ 82.861815] (ftrace buffer empty) [ 82.865498] Kernel Offset: disabled [ 82.869097] Rebooting in 86400 seconds..