[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.103262] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.101364] random: sshd: uninitialized urandom read (32 bytes read) [ 33.549858] random: sshd: uninitialized urandom read (32 bytes read) [ 34.817926] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. [ 40.296383] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/13 11:24:36 fuzzer started 2018/05/13 11:24:36 dialing manager at 10.128.0.26:32873 [ 63.873777] can: request_module (can-proto-0) failed. [ 63.885467] can: request_module (can-proto-0) failed. 2018/05/13 11:25:01 kcov=true, comps=false 2018/05/13 11:25:06 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)="274c016f00fc000500090000000000400002", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') sendfile(r0, r1, &(0x7f00006dbff8), 0xffffffc2) 2018/05/13 11:25:06 executing program 1: semget$private(0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) semop(0x0, &(0x7f000001a000)=[{}], 0x1) 2018/05/13 11:25:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x4000000002, 0x300) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)="f3", 0x1}], 0x1) 2018/05/13 11:25:06 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30bbed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec45d37fa27c8daa19030d03139d0aea040009d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") flistxattr(r1, &(0x7f0000000000)=""/20, 0xae) 2018/05/13 11:25:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x1) 2018/05/13 11:25:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x200000000000f, &(0x7f0000000040)=0x8, 0x58) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x300, 0x4) sendto$inet6(r0, &(0x7f0000000340)="0401000000e3cde82c46", 0xa, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/05/13 11:25:06 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000000c0)) 2018/05/13 11:25:06 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@setlink={0x2c, 0x13, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1}]}, 0x2c}, 0x1}, 0x0) [ 71.385976] IPVS: ftp: loaded support on port[0] = 21 [ 71.446385] IPVS: ftp: loaded support on port[0] = 21 [ 71.449797] IPVS: ftp: loaded support on port[0] = 21 [ 71.510666] IPVS: ftp: loaded support on port[0] = 21 [ 71.518141] IPVS: ftp: loaded support on port[0] = 21 [ 71.523856] IPVS: ftp: loaded support on port[0] = 21 [ 71.547810] IPVS: ftp: loaded support on port[0] = 21 [ 71.552341] IPVS: ftp: loaded support on port[0] = 21 [ 73.485527] ip (4699) used greatest stack depth: 54072 bytes left [ 74.564185] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.570711] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.610110] device bridge_slave_0 entered promiscuous mode [ 74.848755] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.855218] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.896547] device bridge_slave_1 entered promiscuous mode [ 74.905195] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.911726] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.934907] device bridge_slave_0 entered promiscuous mode [ 74.951856] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.958328] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.978236] device bridge_slave_0 entered promiscuous mode [ 74.998983] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.005448] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.024207] device bridge_slave_0 entered promiscuous mode [ 75.035084] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.041526] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.051789] device bridge_slave_0 entered promiscuous mode [ 75.065412] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.071867] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.087350] device bridge_slave_0 entered promiscuous mode [ 75.099793] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.106266] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.129781] device bridge_slave_0 entered promiscuous mode [ 75.150192] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.156628] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.172295] device bridge_slave_0 entered promiscuous mode [ 75.185563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.194020] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.200484] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.233567] device bridge_slave_1 entered promiscuous mode [ 75.246717] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.253156] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.281339] device bridge_slave_1 entered promiscuous mode [ 75.298652] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.305130] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.318993] device bridge_slave_1 entered promiscuous mode [ 75.329979] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.336521] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.344557] device bridge_slave_1 entered promiscuous mode [ 75.357658] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.364124] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.378277] device bridge_slave_1 entered promiscuous mode [ 75.393686] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.400141] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.417721] device bridge_slave_1 entered promiscuous mode [ 75.437710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.446308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.453727] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.460184] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.477711] device bridge_slave_1 entered promiscuous mode [ 75.488468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.499655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.510820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.521640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.629695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.645487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.698805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.708516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.724529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.739753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.748174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.871788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.903822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.060839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.245706] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.293316] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.303364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.358958] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.395909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.406774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.483443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.504994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.534536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.556251] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.575546] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.600682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.634347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.729403] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.741407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.751181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.771416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.778524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.795886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.817170] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.826527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.846543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.858837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.866447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.893157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.932216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.939242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.964250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.971313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.991758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.998873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.046901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.053917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.073559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.080908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.130180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.137251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.156488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.168195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.175504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.195572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.216868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.237812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.358171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.365314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.472874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.506145] team0: Port device team_slave_0 added [ 77.653517] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.686481] team0: Port device team_slave_0 added [ 77.714935] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.735519] team0: Port device team_slave_1 added [ 77.760688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.771367] team0: Port device team_slave_0 added [ 77.784709] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.797910] team0: Port device team_slave_0 added [ 77.821518] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.840259] team0: Port device team_slave_1 added [ 77.848706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.875414] team0: Port device team_slave_0 added [ 77.886939] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.904897] team0: Port device team_slave_0 added [ 77.947011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 77.954609] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.978554] team0: Port device team_slave_1 added [ 77.992902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.020324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.040426] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.057882] team0: Port device team_slave_0 added [ 78.074754] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.085398] team0: Port device team_slave_1 added [ 78.098729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.107751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.125669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.151534] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.165363] team0: Port device team_slave_1 added [ 78.173625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.181275] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.203261] team0: Port device team_slave_0 added [ 78.222013] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.235969] team0: Port device team_slave_1 added [ 78.256486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.273692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.299004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.306972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.323799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.338232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.346195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.355363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.364812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.372447] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.385171] team0: Port device team_slave_1 added [ 78.401700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.415229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.432213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.457692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.471356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.493510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.503922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.511584] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.523859] team0: Port device team_slave_1 added [ 78.551137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.559577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.576523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.608421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.623645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.633441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.643907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.663258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.671835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.680262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.693440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.702938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.712101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.724241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.731495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.742741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.752743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.762155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.779840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.805804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.835866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.851714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.862604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.870895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.880134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.890914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.899650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.920239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.940067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.953636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.970767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.994550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.004275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.012513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.022494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.030774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.038184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.048617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.056518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.065638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.074526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.101432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.111543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.120968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.133558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.181434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.210525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.240666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.250638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.261412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.286662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.295638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.310536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.320409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.333812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.343573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.372187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.407680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.433802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.457455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.475116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.490364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.503362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.512692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.542126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.549739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.567381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.585763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.599255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.624696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.741476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.748953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.766927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.299136] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.305618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.312486] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.318941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.356728] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.364443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.396671] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.403149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.409939] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.416389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.450831] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.666352] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.672820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.679613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.687106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.714767] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.727981] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.734607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.741387] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.747828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.761467] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.769407] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.775838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.782650] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.789107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.798686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.809203] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.815671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.822484] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.828939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.876961] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.050926] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.058450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.065294] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.071756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.102756] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.343746] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.350216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.357068] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.363614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.425889] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.435280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.452442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.470462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.486291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.493859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.503154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.511084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.826334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.853336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.000414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.130729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.267087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.345361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.459545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.609341] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.679702] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.797782] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.866340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.906374] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.993901] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.181501] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.312968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.421813] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.440747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.449314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.482478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.502615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.514733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.633183] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.639468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.647732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.676441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.718416] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.724912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.740122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.776986] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.784427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.817548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.051419] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.057755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.070237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.167229] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.173553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.185793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.305711] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.406209] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.438173] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.446249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.456865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.495222] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.539265] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.642897] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.930320] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.086492] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.255613] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.557147] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 2018/05/13 11:25:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="cd390b081bf2ffffffffffff86dd6002290f00383a0000000000000000000000ffff00000000ff020000000000000000000000000001000090780000000060d5cae2000000000004c500000000e465986a6dd349ff00000000000000000000ff020000000000000000000000000001f601929f106531"], 0x0) 2018/05/13 11:25:33 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) 2018/05/13 11:25:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) 2018/05/13 11:25:33 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x14}}}, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 2018/05/13 11:25:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000380)={{}, {0x0, r0/1000+10000}}, 0x0) 2018/05/13 11:25:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f00007f2000)=[{&(0x7f0000001f40)="b6b23ebe2094b6c296b7f43c2ff9cec9a414ac8ab00820fbde9a0f4a1bd2773a23ca881cb2b8f6f7676ec3e23411c9a7b90c0d98413505ae48a6f9680b3b1c7d9d2083981adb57cc49d7c44eb888269d5ddad8a8ece4937a8c1bd5f6d54eb2fee4344a60a71f21a02b71241caa5bfb30ef20735987815557dd0712275e1cab0562f6e71d00f07d832fff291844ad8c73a6b27652f46020e42eebd5fd185751187d8455017d6e42c6492f282d3fcea50ef7e26862684165a175a262d5fdb1562a9dd53028ed11564d449b40c3dc6e1500aff5eb7c7ac29b27bcac0249c746425160e164ce64e5180f5b19b180bfa5a14ff6d6bac621a1723ffe9dbd05f91bed6ffd9ba2ca0ea7f3eca738786c6cf9be08976ab48f5ce579d5053ef537ba15f9ca286ef7299567bf2b50512cba39ca22e4eafa46593dfb19b29e524a5e0b527f06c3fd666357e9b397f2e720146853c8a4e590b620fd4f0c83a6a0d626fbc2d018596b5bd8b2b9496d3a83f8760b1fb0a6ec9de29b146334717e8cab34996e8474bbde59447f2cc876096f80b10134ed5d69027a9cdd109de0d161003880d10536725ab38afdff82208b82a05f7661bc482b841d815c35660d7f7b036d0426f3cbfcd1448782af41483936f20b09e239d53be9df805d1a4dced5167eb9b8c8c681451329adcea047a3a00461916692c523647ed2b81b1f880417072cf26db77335331fd9d49b1bea2ba448e3e7822109d5a115c5da661c65193ae60923e37b8751d7f6eb2511fc9b55963fca553c0c6d065240b94c889af1781a8671ce4ec91744820d8c3905b2eafb38d909b45175801885e1a1059a9b3db85a95f2172947697e56244fd7b4b412a33b9adc061fca8c742d05f50ce0d2b4280749ce13488259d37074ba94540a5b9cdf426fdf4563163e81c9769b7a84db101c03d88cec1eb18b7ded9b957734dde7b896b0b9c1a76e63104a02a06e917a0e3b608276ad2860a17c76e5c5a07dd6917fa497adc8ff56e2ec6f2bcc09d8061f504c5d5128b4e89bcb2207df70db9d7cceff2fc266443b6d34bb651d0def84768f750279e8b8ab42a8ba7f4f265e0051333f346bc113c56b179b81421601bd60cd071ee198d84ca6abd13eb3ecbc6aaab47aaae592f97c3747c37266e8ad2358029989919b7f5dcee8b60e1d32a0a94d91cc073174ef180d1b3cd4aedb77f1e898f6df02cf3fe57db328abb0ac8d88e5f0d3015f10e74f00e90ab3acbd2e8917e130d2961b1895b5e3252e8a74a0fe0579330407de6a6644cdb7cef78f6ebdf9ef2aa07b32c587d93be72cce852d1ccdf83d1740e0b5c2971b340d98e584b883878ebcac7c91c0c7ce6c23b459b8feb49133d78e965ece4c3f5e11f929d5ef541e2ad8311c4c7412c045b4abf9d14e0f8fd1fd5f851511519e45bee4f00ebb6fddcf38b0936c7aaec7e846631d8f0f0f032fd578dba501d6c7c63bdc858c6c80cc37ac3992b4dec23d5c2304f15849f696bf1327c3d2ad87908a529bcd398b40c1323462ae597ac24b707041063050c35c6337f02461a3c14cbb6f2a573aa4c154bebe75e8e8254c2df4106fcac6a295317cde6123d9148693790211cc12a7c3cbfaf7e5da983827f7d430c4a858842057ac860fa3891fe7f59c71b7256618198ceb0253d0f6afe9515af1d3a97a69f5d3f8def2f0b2dd0cbaddedc76ac3e57763ea544187493419bb6b0cc14df727f31e6395db760806edcdc37804870ee006fe60471f10f0313fc1f9f365038472cf978d091e94338af5dc37e12e30d4e16b13675eea7d36a18f3e39db3619cdf573058e89f95702cf8bf8ca88b4f4989e4a7086a682a13b477d4cac8bdb595c1eeb2463e57538e896ca3168292cdcf7779a43f4113bdbab6d78aa986ac2766bb55a40f0f59aa7eac6af7db18e7e308ba6df385fdd13a8cfa4", 0x55f}], 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000b40)="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", 0x200}], 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000300)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000003f80)=""/4096, 0x1000}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='\b', 0x1, 0xfffffffffffffffc, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/92, 0x5c}, 0x0) 2018/05/13 11:25:33 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000780)="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") fchown(r1, 0x0, 0x0) 2018/05/13 11:25:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="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") io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)}]) [ 97.838266] ================================================================== [ 97.845685] BUG: KMSAN: uninit-value in __sctp_v6_cmp_addr+0x49a/0x850 [ 97.852455] CPU: 1 PID: 6616 Comm: syz-executor7 Not tainted 4.17.0-rc3+ #90 [ 97.859644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.868993] Call Trace: [ 97.871568] [ 97.874323] dump_stack+0x185/0x1d0 [ 97.877952] ? __sctp_v6_cmp_addr+0x49a/0x850 [ 97.882454] kmsan_report+0x142/0x240 2018/05/13 11:25:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x2000000000008912, &(0x7f0000000040)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x100000000000002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_getlink={0x20, 0x12, 0xf07, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/05/13 11:25:33 executing program 2: 2018/05/13 11:25:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="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") io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)}]) [ 97.886252] __msan_warning_32+0x6c/0xb0 [ 97.890313] __sctp_v6_cmp_addr+0x49a/0x850 [ 97.894642] sctp_inet6_cmp_addr+0x3dc/0x400 [ 97.899055] ? sctp_inet6_af_supported+0xf0/0xf0 [ 97.903817] sctp_bind_addr_match+0x18b/0x2f0 [ 97.908321] sctp_addrs_lookup_transport+0x904/0xa20 [ 97.913433] sctp_rcv+0x15e6/0x4d30 [ 97.917066] ? raw_local_deliver+0x63/0x1660 [ 97.921474] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 97.926851] ? raw_local_deliver+0xe2/0x1660 [ 97.931271] ? iptable_nat_ipv4_fn+0xb0/0xb0 [ 97.935694] ? kmsan_set_origin_inline+0x6b/0x120 [ 97.940543] ? sctp_v4_cmp_addr+0x250/0x250 [ 97.944873] ? sctp_csum_combine+0xa0/0xa0 [ 97.949115] ip_local_deliver_finish+0x874/0xec0 [ 97.953884] ip_local_deliver+0x43c/0x4e0 [ 97.958039] ? ip_local_deliver+0x4e0/0x4e0 [ 97.962372] ? ip_call_ra_chain+0x7c0/0x7c0 [ 97.966791] ip_rcv_finish+0xa36/0x1d00 [ 97.970774] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 97.976143] ? nf_hook_slow+0x36f/0x3d0 [ 97.980130] ip_rcv+0x118f/0x16d0 [ 97.983586] ? ip_rcv+0x16d0/0x16d0 2018/05/13 11:25:34 executing program 2: 2018/05/13 11:25:34 executing program 1: [ 97.987223] __netif_receive_skb_core+0x47df/0x4a90 [ 97.992244] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 97.998136] ? ip_local_deliver_finish+0xec0/0xec0 [ 98.003067] process_backlog+0x62d/0xe20 [ 98.007133] ? rps_trigger_softirq+0x2f0/0x2f0 [ 98.011715] net_rx_action+0x7c1/0x1a70 [ 98.015698] ? net_tx_action+0xab0/0xab0 [ 98.019767] __do_softirq+0x56d/0x93d [ 98.023593] do_softirq_own_stack+0x2a/0x40 [ 98.027917] [ 98.030162] __local_bh_enable_ip+0x114/0x140 [ 98.034663] local_bh_enable+0x36/0x40 [ 98.038555] ip_finish_output2+0x135a/0x1470 [ 98.042973] ip_finish_output+0xcb2/0xff0 [ 98.047126] ip_output+0x505/0x5d0 [ 98.050666] ? ip_mc_finish_output+0x3b0/0x3b0 [ 98.055261] ? ip_finish_output+0xff0/0xff0 [ 98.059586] ip_queue_xmit+0x1a1e/0x1d10 [ 98.063644] ? __msan_poison_alloca+0x15c/0x1d0 [ 98.068314] ? sctp_chunk_put+0x29d/0x460 [ 98.072471] sctp_v4_xmit+0x188/0x210 [ 98.076275] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 98.081730] ? sctp_addr_wq_timeout_handler+0x840/0x840 2018/05/13 11:25:34 executing program 2: 2018/05/13 11:25:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000200)=""/194) [ 98.087093] sctp_packet_transmit+0x3eaa/0x4350 [ 98.091766] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 98.097397] sctp_outq_flush+0x1a7a/0x6320 [ 98.101640] ? kmsan_set_origin+0x9e/0x160 [ 98.105883] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 98.111514] ? slab_attr_store+0xc0/0x490 [ 98.115670] sctp_outq_uncork+0xd2/0xf0 [ 98.119647] sctp_do_sm+0x8707/0x8d20 [ 98.123466] ? kmsan_set_origin_inline+0x6b/0x120 [ 98.128319] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 98.133687] ? update_load_avg+0x21fe/0x2d00 2018/05/13 11:25:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_mtu(r1, 0x0, 0x32, &(0x7f00000000c0), 0x4) [ 98.138119] sctp_primitive_REQUESTHEARTBEAT+0x175/0x1a0 [ 98.143581] sctp_apply_peer_addr_params+0x207/0x1670 [ 98.148789] sctp_setsockopt+0x10e5f/0x11600 [ 98.153207] ? sctp_shutdown+0x270/0x270 [ 98.157284] sock_common_setsockopt+0x136/0x170 [ 98.161984] ? sock_common_recvmsg+0x270/0x270 [ 98.166569] __sys_setsockopt+0x4af/0x560 [ 98.170727] __x64_sys_setsockopt+0x15c/0x1c0 [ 98.175233] do_syscall_64+0x154/0x220 [ 98.179126] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 98.184315] RIP: 0033:0x455979 2018/05/13 11:25:34 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000780)="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") fchown(r1, 0x0, 0x0) 2018/05/13 11:25:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="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") fchown(r0, 0x0, 0x0) [ 98.187503] RSP: 002b:00007f1afddf6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.195216] RAX: ffffffffffffffda RBX: 00007f1afddf76d4 RCX: 0000000000455979 [ 98.202494] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000013 [ 98.209767] RBP: 000000000072bea0 R08: 0000000000000098 R09: 0000000000000000 [ 98.217045] R10: 00000000200002c0 R11: 0000000000000246 R12: 00000000ffffffff [ 98.224317] R13: 0000000000000646 R14: 00000000006fd730 R15: 0000000000000000 [ 98.231613] [ 98.233235] Local variable description: ----dest@sctp_rcv [ 98.238759] Variable was created at: [ 98.242476] sctp_rcv+0x13d/0x4d30 [ 98.246024] ip_local_deliver_finish+0x874/0xec0 [ 98.250770] ================================================================== [ 98.258122] Disabling lock debugging due to kernel taint [ 98.263570] Kernel panic - not syncing: panic_on_warn set ... [ 98.263570] [ 98.270947] CPU: 1 PID: 6616 Comm: syz-executor7 Tainted: G B 4.17.0-rc3+ #90 [ 98.279872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.289226] Call Trace: [ 98.291805] [ 98.293967] dump_stack+0x185/0x1d0 [ 98.297591] panic+0x39d/0x940 [ 98.300809] ? __sctp_v6_cmp_addr+0x49a/0x850 [ 98.305302] kmsan_report+0x238/0x240 [ 98.309101] __msan_warning_32+0x6c/0xb0 [ 98.313164] __sctp_v6_cmp_addr+0x49a/0x850 [ 98.317489] sctp_inet6_cmp_addr+0x3dc/0x400 [ 98.321897] ? sctp_inet6_af_supported+0xf0/0xf0 [ 98.326655] sctp_bind_addr_match+0x18b/0x2f0 [ 98.331176] sctp_addrs_lookup_transport+0x904/0xa20 [ 98.336278] sctp_rcv+0x15e6/0x4d30 [ 98.339914] ? raw_local_deliver+0x63/0x1660 [ 98.344323] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 98.349687] ? raw_local_deliver+0xe2/0x1660 [ 98.354099] ? iptable_nat_ipv4_fn+0xb0/0xb0 [ 98.358516] ? kmsan_set_origin_inline+0x6b/0x120 [ 98.363360] ? sctp_v4_cmp_addr+0x250/0x250 [ 98.367681] ? sctp_csum_combine+0xa0/0xa0 [ 98.371917] ip_local_deliver_finish+0x874/0xec0 [ 98.376681] ip_local_deliver+0x43c/0x4e0 [ 98.380831] ? ip_local_deliver+0x4e0/0x4e0 [ 98.385154] ? ip_call_ra_chain+0x7c0/0x7c0 [ 98.389477] ip_rcv_finish+0xa36/0x1d00 [ 98.393460] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 98.398819] ? nf_hook_slow+0x36f/0x3d0 [ 98.402793] ip_rcv+0x118f/0x16d0 [ 98.406248] ? ip_rcv+0x16d0/0x16d0 [ 98.409886] __netif_receive_skb_core+0x47df/0x4a90 [ 98.414905] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 98.420709] ? ip_local_deliver_finish+0xec0/0xec0 [ 98.425644] process_backlog+0x62d/0xe20 [ 98.429710] ? rps_trigger_softirq+0x2f0/0x2f0 [ 98.434292] net_rx_action+0x7c1/0x1a70 [ 98.438270] ? net_tx_action+0xab0/0xab0 [ 98.442333] __do_softirq+0x56d/0x93d [ 98.446143] do_softirq_own_stack+0x2a/0x40 [ 98.450453] [ 98.452696] __local_bh_enable_ip+0x114/0x140 [ 98.457190] local_bh_enable+0x36/0x40 [ 98.461074] ip_finish_output2+0x135a/0x1470 [ 98.465486] ip_finish_output+0xcb2/0xff0 [ 98.469642] ip_output+0x505/0x5d0 [ 98.473188] ? ip_mc_finish_output+0x3b0/0x3b0 [ 98.477780] ? ip_finish_output+0xff0/0xff0 [ 98.482104] ip_queue_xmit+0x1a1e/0x1d10 [ 98.486178] ? __msan_poison_alloca+0x15c/0x1d0 [ 98.490848] ? sctp_chunk_put+0x29d/0x460 [ 98.495003] sctp_v4_xmit+0x188/0x210 [ 98.498804] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 98.504254] ? sctp_addr_wq_timeout_handler+0x840/0x840 [ 98.509621] sctp_packet_transmit+0x3eaa/0x4350 [ 98.514279] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 98.519732] sctp_outq_flush+0x1a7a/0x6320 [ 98.523959] ? kmsan_set_origin+0x9e/0x160 [ 98.528176] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 98.533518] ? slab_attr_store+0xc0/0x490 [ 98.537650] sctp_outq_uncork+0xd2/0xf0 [ 98.541604] sctp_do_sm+0x8707/0x8d20 [ 98.545383] ? kmsan_set_origin_inline+0x6b/0x120 [ 98.550204] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 98.555556] ? update_load_avg+0x21fe/0x2d00 [ 98.559979] sctp_primitive_REQUESTHEARTBEAT+0x175/0x1a0 [ 98.565419] sctp_apply_peer_addr_params+0x207/0x1670 [ 98.570593] sctp_setsockopt+0x10e5f/0x11600 [ 98.575069] ? sctp_shutdown+0x270/0x270 [ 98.579109] sock_common_setsockopt+0x136/0x170 [ 98.583761] ? sock_common_recvmsg+0x270/0x270 [ 98.588327] __sys_setsockopt+0x4af/0x560 [ 98.592470] __x64_sys_setsockopt+0x15c/0x1c0 [ 98.596977] do_syscall_64+0x154/0x220 [ 98.600850] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 98.606033] RIP: 0033:0x455979 [ 98.609211] RSP: 002b:00007f1afddf6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.616895] RAX: ffffffffffffffda RBX: 00007f1afddf76d4 RCX: 0000000000455979 [ 98.624145] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000013 [ 98.631573] RBP: 000000000072bea0 R08: 0000000000000098 R09: 0000000000000000 [ 98.638832] R10: 00000000200002c0 R11: 0000000000000246 R12: 00000000ffffffff [ 98.646080] R13: 0000000000000646 R14: 00000000006fd730 R15: 0000000000000000 [ 98.653900] Dumping ftrace buffer: [ 98.657430] (ftrace buffer empty) [ 98.661117] Kernel Offset: disabled [ 98.664716] Rebooting in 86400 seconds..