INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. 2018/04/29 18:57:03 fuzzer started 2018/04/29 18:57:04 dialing manager at 10.128.0.26:34153 syzkaller login: [ 51.121703] can: request_module (can-proto-0) failed. [ 51.132751] can: request_module (can-proto-0) failed. 2018/04/29 18:57:12 kcov=true, comps=false 2018/04/29 18:57:15 executing program 0: 2018/04/29 18:57:15 executing program 1: 2018/04/29 18:57:15 executing program 7: 2018/04/29 18:57:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = dup(r0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fec000/0x11000)=nil, 0x11000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) 2018/04/29 18:57:15 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {0x0, 0x7ff}, @queue={0x0, {0x100000001, 0x1000}}}], 0xfffffec3) 2018/04/29 18:57:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/198, 0xdb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[]}}], 0x1, 0x0) shutdown(r0, 0x0) 2018/04/29 18:57:15 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000180)=0x600214) readv(r0, &(0x7f0000001740)=[{&(0x7f0000001700)=""/57, 0x39}], 0x1) write$binfmt_elf32(r0, &(0x7f00000007c0)=ANY=[], 0x0) 2018/04/29 18:57:15 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12013, r0, 0x0) [ 56.167403] IPVS: ftp: loaded support on port[0] = 21 [ 56.313215] IPVS: ftp: loaded support on port[0] = 21 [ 56.365460] IPVS: ftp: loaded support on port[0] = 21 [ 56.419847] IPVS: ftp: loaded support on port[0] = 21 [ 56.515282] IPVS: ftp: loaded support on port[0] = 21 [ 56.635881] IPVS: ftp: loaded support on port[0] = 21 [ 56.792289] IPVS: ftp: loaded support on port[0] = 21 [ 56.933904] IPVS: ftp: loaded support on port[0] = 21 [ 58.751468] ip (4711) used greatest stack depth: 54168 bytes left [ 59.343099] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.349628] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.377853] device bridge_slave_0 entered promiscuous mode [ 59.501516] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.508074] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.540376] device bridge_slave_0 entered promiscuous mode [ 59.581463] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.587979] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.625868] device bridge_slave_1 entered promiscuous mode [ 59.714683] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.721157] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.746381] device bridge_slave_0 entered promiscuous mode [ 59.772593] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.779127] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.808406] device bridge_slave_1 entered promiscuous mode [ 59.879874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.938848] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.945416] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.990808] device bridge_slave_0 entered promiscuous mode [ 60.013452] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.020120] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.061578] device bridge_slave_1 entered promiscuous mode [ 60.074291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.106172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.134861] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.141381] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.176146] device bridge_slave_0 entered promiscuous mode [ 60.205928] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.212459] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.269094] device bridge_slave_1 entered promiscuous mode [ 60.295105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.319722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.327859] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.334357] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.370978] device bridge_slave_0 entered promiscuous mode [ 60.422625] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.429129] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.465136] device bridge_slave_1 entered promiscuous mode [ 60.489884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.498785] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.505262] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.540162] device bridge_slave_0 entered promiscuous mode [ 60.580852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.588617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.597167] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.603619] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.632271] device bridge_slave_1 entered promiscuous mode [ 60.697236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.732711] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.739211] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.791352] device bridge_slave_1 entered promiscuous mode [ 60.837488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.845744] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.858193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.864703] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.904830] device bridge_slave_0 entered promiscuous mode [ 60.970620] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.043253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.072407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.130699] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.137200] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.175884] device bridge_slave_1 entered promiscuous mode [ 61.189532] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.208364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.221643] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.286612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.411178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.421742] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.431522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.438478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.467564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.503763] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.526128] ip (4902) used greatest stack depth: 53656 bytes left [ 61.540974] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.617469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.653686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.660685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.684135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.696430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.708119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.728189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.754924] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.766119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.773115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.872505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.879569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.960310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.967514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.983706] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.996292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.003781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.022454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.029822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.073552] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.108963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.125185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.209769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.231509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.281060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.288130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.357950] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.370008] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.397553] team0: Port device team_slave_0 added [ 62.448145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.455743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.486914] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.549945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.556985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.666571] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.694357] team0: Port device team_slave_0 added [ 62.719926] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.735982] team0: Port device team_slave_1 added [ 62.743589] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.752469] team0: Port device team_slave_0 added [ 62.773075] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.802142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.809308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.858326] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.897649] team0: Port device team_slave_0 added [ 62.934447] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.956274] team0: Port device team_slave_1 added [ 62.974623] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.993342] team0: Port device team_slave_1 added [ 63.031272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.040495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.052506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.077243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.086833] team0: Port device team_slave_0 added [ 63.103576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.118081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.125706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.142092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.180111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.222559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.238015] team0: Port device team_slave_1 added [ 63.250921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.258487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.266701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.277348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.295170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.326381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.344337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.352795] team0: Port device team_slave_0 added [ 63.362384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.390567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.411891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.427258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.436282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.444335] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.459456] team0: Port device team_slave_1 added [ 63.491476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.516439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.542098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.559355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.574873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.590932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.612634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.630173] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.648459] team0: Port device team_slave_1 added [ 63.658598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.668136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.675701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.683819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.698420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.734451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.773720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.796572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.806904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.814820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.823654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.832515] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.839910] team0: Port device team_slave_0 added [ 63.865492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.876655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.883805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.898658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.941715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.962167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.977254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.000279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.013325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.022433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.038332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.048437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.080119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.106402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.137694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.147077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.156100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.164590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.181614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.188962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.204258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.226156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.237623] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.252091] team0: Port device team_slave_1 added [ 64.266198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.278629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.294428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.305768] team0: Port device team_slave_0 added [ 64.318811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.327127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.341642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.362574] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.379713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.388942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.409087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.435311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.462583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.510701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.519480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.528462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.552789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.577759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.594253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.619786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.628281] team0: Port device team_slave_1 added [ 64.650715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.668550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.681472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.712718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.719992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.746601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.793309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.800367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.823270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.946173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.954159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.967708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.048680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.055633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.070860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.195565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 65.203095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.219663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.264809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 65.274391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.293603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.553201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 65.560618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.576082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.399508] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.406082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.412924] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.419372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.465149] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.505197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.837954] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.844485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.851337] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.857788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.912218] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.958342] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.964868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.971741] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.978184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.095178] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.135637] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.142131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.148969] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.155436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.207888] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.214914] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.221391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.228269] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.234725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.273548] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.296389] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.302840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.309644] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.316090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.326332] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.553284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.570836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.592958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.618713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.644815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.730495] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.736995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.743918] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.750372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.823214] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.287507] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.294001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.300893] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.307352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.321445] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.577080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.594208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.774976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.096717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.296925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.322496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.358701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.377426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.627161] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.883312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.906420] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.150773] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.194612] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.201924] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.212310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.279981] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.487760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.494202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.508985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.743393] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.757112] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.763367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.773422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.004447] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.012812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.024269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.034880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.062922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.095334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.131662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 78.141385] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.147623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.156393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.197381] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.203650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.217150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.443488] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.610846] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.617301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.628950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.700454] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.881335] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.927850] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.964650] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.996244] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 79.002579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.016117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.098946] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.576746] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.859397] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/29 18:57:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/198, 0xdb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[]}}], 0x1, 0x0) shutdown(r0, 0x0) 2018/04/29 18:57:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000180)=0x600214) readv(r0, &(0x7f0000001740)=[{&(0x7f0000001700)=""/57, 0x39}], 0x1) write$binfmt_elf32(r0, &(0x7f00000007c0)=ANY=[], 0x0) 2018/04/29 18:57:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002dc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002d80)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000002e00)=@resolve_ip={0x3, 0x0, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1}}, 0x367) 2018/04/29 18:57:45 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {0x0, 0x7ff}, @queue={0x0, {0x100000001, 0x1000}}}], 0xfffffec3) 2018/04/29 18:57:45 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4840, 0x0) 2018/04/29 18:57:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e24, 0x7ff, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x2}}, 0x0, 0x5, 0xfffffffffffffffe, 0x7}, &(0x7f00000000c0)=0x98) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) ioprio_get$uid(0x3, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000480)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/04/29 18:57:45 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = dup2(r0, r0) ioctl$sock_netrom_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2018/04/29 18:57:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/198, 0xdb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[]}}], 0x1, 0x0) shutdown(r0, 0x0) [ 85.407386] print_req_error: I/O error, dev loop0, sector 0 [ 85.413421] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 85.421201] print_req_error: I/O error, dev loop0, sector 8 [ 85.426978] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 85.434718] print_req_error: I/O error, dev loop0, sector 16 [ 85.440579] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 85.448307] print_req_error: I/O error, dev loop0, sector 24 2018/04/29 18:57:45 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000180)=0x600214) readv(r0, &(0x7f0000001740)=[{&(0x7f0000001700)=""/57, 0x39}], 0x1) write$binfmt_elf32(r0, &(0x7f00000007c0)=ANY=[], 0x0) 2018/04/29 18:57:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0000070000000000ce000000000005001a000000000000000000000000000000000000000000000000000400000000000000000000c30000000000"], 0x3d}, 0x1}, 0x0) 2018/04/29 18:57:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002dc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002d80)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000002e00)=@resolve_ip={0x3, 0x0, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1}}, 0x367) [ 85.454184] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 85.461914] print_req_error: I/O error, dev loop0, sector 32 [ 85.467799] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 85.476102] print_req_error: I/O error, dev loop0, sector 40 [ 85.481968] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 85.489702] print_req_error: I/O error, dev loop0, sector 48 [ 85.495552] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 85.503299] print_req_error: I/O error, dev loop0, sector 56 [ 85.509166] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 85.516923] print_req_error: I/O error, dev loop0, sector 64 [ 85.523919] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 85.531664] print_req_error: I/O error, dev loop0, sector 72 [ 85.537524] Buffer I/O error on dev loop0, logical block 9, lost async page write 2018/04/29 18:57:45 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40142, 0x0) 2018/04/29 18:57:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0000070000000000ce000000000005001a000000000000000000000000000000000000000000000000000400000000000000000000c30000000000"], 0x3d}, 0x1}, 0x0) 2018/04/29 18:57:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/96, 0x60}], 0x1) 2018/04/29 18:57:45 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x108) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000100), 0x2d9, 0x10400003) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='\x00', 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000180), 0x10) keyctl$unlink(0x9, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') 2018/04/29 18:57:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/29 18:57:46 executing program 0: semop(0x0, &(0x7f0000000080)=[{0x3}], 0x1) 2018/04/29 18:57:46 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000aeb000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@timestamp={0x44, 0x4}]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000000100)) 2018/04/29 18:57:46 executing program 2: semget$private(0x0, 0x5, 0x0) 2018/04/29 18:57:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/29 18:57:46 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/04/29 18:57:46 executing program 5: semget(0x1, 0x0, 0x700) 2018/04/29 18:57:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/198, 0xdb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[]}}], 0x1, 0x0) shutdown(r0, 0x0) 2018/04/29 18:57:46 executing program 4: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000a100)={0x7, 0x3, &(0x7f0000009fc0)=@framed={{0x18}, [], {0x95}}, &(0x7f000000a000)='GPL\x00', 0x3, 0xb2, &(0x7f000000a040)=""/178}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 2018/04/29 18:57:47 executing program 6: mq_open(&(0x7f0000000040)='-$\x00', 0x0, 0x0, &(0x7f0000000080)) 2018/04/29 18:57:47 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, &(0x7f0000000180), 0x127) 2018/04/29 18:57:47 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000180), 0x127) 2018/04/29 18:57:47 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/04/29 18:57:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=ANY=[@ANYBLOB="4c0000001200db4d0000000000000000000000000000000000000000000000000000000021000000240008001d0008000000150069cc8910cf7a5164ef891111a0edabf37c1fd93a0d000000"], 0x1}, 0x1}, 0x0) 2018/04/29 18:57:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000047c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x3, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001780)}}], 0x1, 0x0) 2018/04/29 18:57:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/ip_mr_vif\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x0) 2018/04/29 18:57:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f00000000c0)=@l2={0x1f, 0x0, {0x6}}, 0x80) 2018/04/29 18:57:47 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001340), 0x26b, 0xfffffffffffffffe) 2018/04/29 18:57:47 executing program 2: rt_sigaction(0x400000000000007, &(0x7f0000000200)={0x422470, {0xffffffbfffbff274}}, &(0x7f0000000240), 0x8, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000080)='comm\x00') 2018/04/29 18:57:47 executing program 6: mq_open(&(0x7f0000000040)='-$\x00', 0x0, 0x0, &(0x7f0000000080)) 2018/04/29 18:57:47 executing program 4: r0 = timerfd_create(0x0, 0x800) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/248, 0xf8}], 0x1) 2018/04/29 18:57:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) 2018/04/29 18:57:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) 2018/04/29 18:57:47 executing program 3: request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x2e, 0x1}, &(0x7f00000001c0)='cgroup#nodev&\x00', 0xfffffffffffffffe) 2018/04/29 18:57:47 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='mountstats\x00') 2018/04/29 18:57:47 executing program 2: rt_sigaction(0x400000000000007, &(0x7f0000000200)={0x422470, {0xffffffbfffbff274}}, &(0x7f0000000240), 0x8, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000080)='comm\x00') 2018/04/29 18:57:47 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000001fc0)='threaded\x00', 0x9) 2018/04/29 18:57:47 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="ffffff000a000200aaaaaaaaaaaa0000adcffd10fba0632122dadd3183834a1419cc84948779d7344e45db2308e9a5dfc159bbac1d7445ac2ca3451fcaabe43b9f0db8308a929f934fb710e40fc06cd8adb66b9f74e6d734f3c74d0b4f816fbf347bf292eed84d"], 0x2}, 0x1}, 0x0) 2018/04/29 18:57:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2400000002031f001cfffd946fa2830020200a000900020002e1b301010000000000007e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000380)=0x10) 2018/04/29 18:57:47 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2}, 0x10) 2018/04/29 18:57:47 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x4, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20400000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/29 18:57:47 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) faccessat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xc, r1, 0x0, &(0x7f0000000200)=""/171) 2018/04/29 18:57:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2018/04/29 18:57:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000cec000/0x200000)=nil, 0x200000, 0x0, 0x12, r0, 0x0) [ 87.660802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 87.740502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 87.776885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 87.813464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/29 18:57:47 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5421, &(0x7f0000000080)) 2018/04/29 18:57:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x85, 0x0, &(0x7f00000001c0), &(0x7f0000000040), 0x2) 2018/04/29 18:57:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x3, 0x4) 2018/04/29 18:57:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/29 18:57:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="040100000309c14609005375c52c876d886b6621d8d207cc", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x800, 0x9, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/29 18:57:47 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)='cgroup\x00', 0x3441, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000005f80)={0x0, 0x3, &(0x7f0000000400)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000480)=""/33}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={0xffffffffffffffff, &(0x7f0000003140), &(0x7f0000000640)}, 0x20) gettid() 2018/04/29 18:57:47 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000080)=@un=@abs, 0x1b, &(0x7f0000000000), 0x0, &(0x7f0000000200)}, 0x0) recvmsg$kcm(r0, &(0x7f0000004140)={&(0x7f0000001a40)=@rc, 0x80, &(0x7f00000040c0), 0x0, &(0x7f0000004100)=""/32, 0x20}, 0x40010142) 2018/04/29 18:57:47 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000240)) 2018/04/29 18:57:48 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="4917bbc1b57e", [], {@ipv6={0x86dd, {0x0, 0x6, "e28186", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000000)) 2018/04/29 18:57:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x3, 0x4) [ 87.995409] ================================================================== [ 88.002852] BUG: KMSAN: uninit-value in __skb_try_recv_from_queue+0x4c6/0xe80 [ 88.010142] CPU: 1 PID: 6794 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 88.016977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.026325] Call Trace: [ 88.028922] dump_stack+0x185/0x1d0 [ 88.032553] ? __skb_try_recv_from_queue+0x4c6/0xe80 [ 88.037661] kmsan_report+0x142/0x240 [ 88.041467] __msan_warning_32+0x6c/0xb0 [ 88.045534] __skb_try_recv_from_queue+0x4c6/0xe80 [ 88.050479] __skb_try_recv_datagram+0x316/0x6f0 [ 88.055245] skb_recv_datagram+0x253/0x450 [ 88.059494] rawv6_recvmsg+0x4e2/0x1440 [ 88.063478] ? __msan_poison_alloca+0x15c/0x1d0 [ 88.068155] ? rawv6_sendmsg+0x4fb0/0x4fb0 [ 88.072387] sock_common_recvmsg+0x16c/0x270 [ 88.076801] sock_recvmsg+0x1d0/0x230 [ 88.080617] ? compat_sock_common_getsockopt+0x1d0/0x1d0 [ 88.086075] ___sys_recvmsg+0x3fb/0x810 [ 88.090072] ? __fget_light+0x56/0x710 2018/04/29 18:57:48 executing program 4: sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="0700000070c9905655707f874cdc09920cc1", @ANYBLOB="000128bd7009218b1ed70e00fbffffffffff"], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x1f8aeba99eb8fd7, 0x8000) [ 88.093998] ? __fdget+0x4e/0x60 [ 88.097381] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 88.102748] ? __fget_light+0x6b9/0x710 [ 88.106735] SYSC_recvmsg+0x298/0x3c0 [ 88.110550] SyS_recvmsg+0x54/0x80 [ 88.114092] do_syscall_64+0x309/0x430 [ 88.117981] ? ___sys_recvmsg+0x810/0x810 [ 88.122131] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 88.127313] RIP: 0033:0x455979 [ 88.130495] RSP: 002b:00007fa1fd09cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 88.138199] RAX: ffffffffffffffda RBX: 00007fa1fd09d6d4 RCX: 0000000000455979 2018/04/29 18:57:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) [ 88.145476] RDX: 0000000040010142 RSI: 0000000020004140 RDI: 0000000000000013 [ 88.152744] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 88.160009] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 88.167279] R13: 00000000000004e5 R14: 00000000006fb618 R15: 0000000000000000 [ 88.174552] [ 88.176173] Uninit was stored to memory at: [ 88.180501] kmsan_internal_chain_origin+0x12b/0x210 [ 88.185614] __msan_chain_origin+0x69/0xc0 [ 88.189849] __skb_clone+0x8a2/0x990 2018/04/29 18:57:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f0000000540)='k', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) recvfrom$inet(r0, &(0x7f0000000100)=""/149, 0xffffffffffffff4c, 0x0, 0x0, 0xfd69) [ 88.193569] skb_clone+0x3e8/0x590 [ 88.197114] raw6_local_deliver+0x1200/0x1fd0 [ 88.201617] ip6_input_finish+0x585/0x2250 [ 88.205852] ip6_input+0x294/0x320 [ 88.209394] ip6_rcv_finish+0x46e/0x6e0 [ 88.213368] ipv6_rcv+0x1e16/0x2340 [ 88.217000] __netif_receive_skb_core+0x47df/0x4a90 [ 88.222031] process_backlog+0x62d/0xe20 [ 88.226108] net_rx_action+0x7c1/0x1a70 [ 88.230086] __do_softirq+0x56d/0x93d [ 88.233876] Uninit was stored to memory at: [ 88.238207] kmsan_internal_chain_origin+0x12b/0x210 [ 88.243332] __msan_chain_origin+0x69/0xc0 [ 88.247592] skb_clone+0x46a/0x590 [ 88.251176] raw6_local_deliver+0x1200/0x1fd0 [ 88.255679] ip6_input_finish+0x585/0x2250 [ 88.259921] ip6_input+0x294/0x320 [ 88.263462] ip6_rcv_finish+0x46e/0x6e0 [ 88.267438] ipv6_rcv+0x1e16/0x2340 [ 88.271070] __netif_receive_skb_core+0x47df/0x4a90 [ 88.276103] process_backlog+0x62d/0xe20 [ 88.280163] net_rx_action+0x7c1/0x1a70 [ 88.284141] __do_softirq+0x56d/0x93d [ 88.287928] Uninit was created at: [ 88.291474] kmsan_internal_poison_shadow+0xb8/0x1b0 2018/04/29 18:57:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) [ 88.296575] kmsan_kmalloc+0x94/0x100 [ 88.300379] kmem_cache_alloc+0xaab/0xb90 [ 88.304528] skb_clone+0x31e/0x590 [ 88.308084] raw6_local_deliver+0x1200/0x1fd0 [ 88.312582] ip6_input_finish+0x585/0x2250 [ 88.316819] ip6_input+0x294/0x320 [ 88.320362] ip6_rcv_finish+0x46e/0x6e0 [ 88.324339] ipv6_rcv+0x1e16/0x2340 [ 88.328016] __netif_receive_skb_core+0x47df/0x4a90 [ 88.333041] process_backlog+0x62d/0xe20 [ 88.337116] net_rx_action+0x7c1/0x1a70 [ 88.341094] __do_softirq+0x56d/0x93d [ 88.344887] ================================================================== [ 88.352283] Disabling lock debugging due to kernel taint [ 88.357724] Kernel panic - not syncing: panic_on_warn set ... [ 88.357724] [ 88.365089] CPU: 1 PID: 6794 Comm: syz-executor5 Tainted: G B 4.16.0+ #87 [ 88.373226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.382575] Call Trace: [ 88.385187] dump_stack+0x185/0x1d0 [ 88.388825] panic+0x39d/0x940 [ 88.392056] ? __skb_try_recv_from_queue+0x4c6/0xe80 [ 88.397165] kmsan_report+0x238/0x240 [ 88.400973] __msan_warning_32+0x6c/0xb0 [ 88.405042] __skb_try_recv_from_queue+0x4c6/0xe80 [ 88.409988] __skb_try_recv_datagram+0x316/0x6f0 [ 88.414760] skb_recv_datagram+0x253/0x450 [ 88.419007] rawv6_recvmsg+0x4e2/0x1440 [ 88.423002] ? __msan_poison_alloca+0x15c/0x1d0 [ 88.428159] ? rawv6_sendmsg+0x4fb0/0x4fb0 [ 88.432398] sock_common_recvmsg+0x16c/0x270 [ 88.436830] sock_recvmsg+0x1d0/0x230 [ 88.440632] ? compat_sock_common_getsockopt+0x1d0/0x1d0 [ 88.446089] ___sys_recvmsg+0x3fb/0x810 [ 88.450072] ? __fget_light+0x56/0x710 [ 88.453954] ? __fdget+0x4e/0x60 [ 88.457326] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 88.462688] ? __fget_light+0x6b9/0x710 [ 88.467713] SYSC_recvmsg+0x298/0x3c0 [ 88.471573] SyS_recvmsg+0x54/0x80 [ 88.475117] do_syscall_64+0x309/0x430 [ 88.479050] ? ___sys_recvmsg+0x810/0x810 [ 88.483217] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 88.488402] RIP: 0033:0x455979 [ 88.491590] RSP: 002b:00007fa1fd09cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 88.499303] RAX: ffffffffffffffda RBX: 00007fa1fd09d6d4 RCX: 0000000000455979 [ 88.506575] RDX: 0000000040010142 RSI: 0000000020004140 RDI: 0000000000000013 [ 88.513844] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 88.521109] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 88.528373] R13: 00000000000004e5 R14: 00000000006fb618 R15: 0000000000000000 [ 88.536148] Dumping ftrace buffer: [ 88.539675] (ftrace buffer empty) [ 88.543361] Kernel Offset: disabled [ 88.547018] Rebooting in 86400 seconds..