INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. 2018/04/14 12:11:55 fuzzer started 2018/04/14 12:11:55 dialing manager at 10.128.0.26:36243 2018/04/14 12:12:01 kcov=true, comps=false 2018/04/14 12:12:04 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/04/14 12:12:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000003100)={'IDLETIMER\x00'}, &(0x7f0000003140)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x400000000005, 0x4) sendto$inet(r0, &(0x7f0000de1fff), 0x4e, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000000c00)=""/43, 0x2b}, {&(0x7f0000000c40)=""/137, 0x89}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/216, 0xd8}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/57, 0x39}, {&(0x7f0000002e40)=""/255, 0xff}], 0x7, &(0x7f0000002fc0)=""/205, 0xcd, 0x7f}, 0x100) socketpair(0x0, 0x0, 0x81, &(0x7f0000003200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000003240)="0141a354807c367b1cdd0e2ccd53123ef371f71fc51b9d49493d3f2bbce3c88d9cfea4c9aec7c7d0025dcb45f31620b8bf41679657ba32b7d6f38979790e5d3beabb130f24e83b1cc6b07f539ee68a3cbc3c4013780f3d4f7841109bb57157b48f3ef435ce049fdd57dfbc4d428b5101b7279fc15709e7ef23045428f93b17419a6af9fdbd8b8619b452874d1083ea44339d0e5e612fa9540c39b5924b2347fe154bcc", 0xa3) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000003880)=""/4096) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000003800)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003840), 0x14) socket(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000b40)={&(0x7f00000008c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/139, 0x8b}], 0x1, &(0x7f0000000a40)=""/242, 0xf2}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)}, 0x0) ioctl$void(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000800), 0x4) 2018/04/14 12:12:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/250, 0xfa}], 0x1, 0x0) 2018/04/14 12:12:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000027c0), 0x0, &(0x7f0000002800)=""/139, 0x8b}}], 0x1, 0x0, &(0x7f0000002980)) write(r0, &(0x7f000037c000)="170000001a001bed0000132100f404fffffffffffffff7", 0x17) 2018/04/14 12:12:04 executing program 5: mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r0, &(0x7f0000000100)) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000240), &(0x7f0000000380), 0x0) 2018/04/14 12:12:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0004000000000000070007000000040000000000000000000000000000000000000007080000000000000000000000002bd4f82978e05304934571a9b4789285a27a2675a959d778c7310d92913485491b5a0a38b4baa5a04bb14c8d4b43a3325c1d55d2967e29d3387bcbf5de424fd9721103a00514d5735ac551537690049311deec2ee9cc8b8f85199b96f7"], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=@fragment, 0x8) 2018/04/14 12:12:04 executing program 1: 2018/04/14 12:12:04 executing program 6: r0 = socket$inet(0x2, 0x801, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000004000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000febff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) syzkaller login: [ 41.952446] ip (3753) used greatest stack depth: 54688 bytes left [ 42.702086] ip (3824) used greatest stack depth: 54312 bytes left [ 43.552341] ip (3906) used greatest stack depth: 54296 bytes left [ 43.567585] ip (3908) used greatest stack depth: 54200 bytes left [ 43.789936] ip (3923) used greatest stack depth: 53640 bytes left [ 43.884992] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.891497] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.908432] device bridge_slave_0 entered promiscuous mode [ 43.949617] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.956131] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.978217] device bridge_slave_0 entered promiscuous mode [ 43.995419] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.001874] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.024971] device bridge_slave_0 entered promiscuous mode [ 44.083092] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.089568] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.132249] device bridge_slave_0 entered promiscuous mode [ 44.157922] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.164440] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.185721] device bridge_slave_1 entered promiscuous mode [ 44.192871] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.199342] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.212299] device bridge_slave_1 entered promiscuous mode [ 44.228915] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.235364] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.245201] device bridge_slave_0 entered promiscuous mode [ 44.255778] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.262244] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.288420] device bridge_slave_0 entered promiscuous mode [ 44.304138] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.310606] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.333683] device bridge_slave_0 entered promiscuous mode [ 44.342802] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.349307] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.357635] device bridge_slave_0 entered promiscuous mode [ 44.367952] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.374435] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.394957] device bridge_slave_1 entered promiscuous mode [ 44.408700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.416659] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.423116] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.436406] device bridge_slave_1 entered promiscuous mode [ 44.445712] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.452162] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.478283] device bridge_slave_1 entered promiscuous mode [ 44.498895] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.505355] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.534261] device bridge_slave_1 entered promiscuous mode [ 44.541213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.550363] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.556857] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.573869] device bridge_slave_1 entered promiscuous mode [ 44.589691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.597007] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.603565] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.630173] device bridge_slave_1 entered promiscuous mode [ 44.653478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.661123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.671519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.735725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.762958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.776480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.792568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.813944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.855848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.871580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.947727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.966652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.079292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.647943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.734148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.808299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.819064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.841498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.851934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.924414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.942531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.970493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.052299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.067907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.088769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.098943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.124961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.172773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.233750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.803997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.913580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.003826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.014746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.094258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.128828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.141696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.151271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.161803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.209611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.227359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.248649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.257591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.276128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.325831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.341120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.349952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.382317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.407577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.421090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.430825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.438756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.455738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.476879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.485249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.496378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.503544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.521219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.555417] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.562513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.575273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.621061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.634159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.651756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.678308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.685736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.693255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.725944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.748821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.762732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.774928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.786376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.799181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.823685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.848846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.868808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.878587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.887111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.894450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.906713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.914752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.923386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.942637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.950077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.967740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.001598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.011124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.029751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.051960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.060358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.095708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.127175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.147188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.174501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.933829] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.940319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.947170] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.953761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.003994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.011132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.029747] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.036227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.043069] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.049524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.099922] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.123244] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.129732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.136601] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.143089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.201556] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.217710] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.224184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.231058] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.237518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.288911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.301505] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.307943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.314799] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.321245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.336908] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.355284] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.361738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.368569] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.375013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.448098] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.466544] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.473020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.479915] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.486367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.502291] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.555901] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.562395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.569299] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.575759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.653817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.040202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.050570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.071721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.086236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.105730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.113204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.121206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.321573] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.332298] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.422961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.438455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.477782] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.562870] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.950381] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.026521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.032968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.049643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.089515] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.103184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.111655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.152137] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.164639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.195608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.236971] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.252928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.261012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.273418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.366761] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.373008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.380943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.476521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.482773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.499626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.841794] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.851110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.862822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.030356] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.036632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.047616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/14 12:12:30 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100000000000000000000000000", @ANYBLOB="000000ffffe27f000000004008000000"], 0x2}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @in={0x2, 0x4e22}]}, &(0x7f00000002c0)=0x10) 2018/04/14 12:12:31 executing program 0: msgsnd(0x0, &(0x7f00000001c0), 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000), 0x8, 0x0, 0x0) 2018/04/14 12:12:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000000), 0x200000000000022b, 0x10000003) 2018/04/14 12:12:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 12:12:31 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x806], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x543, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/14 12:12:31 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21, @rand_addr=0x9}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/14 12:12:31 executing program 5: semtimedop(0x0, &(0x7f0000033816)=[{}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)) 2018/04/14 12:12:31 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="24000000100007031dfffd946fa2830020200a0009000100400202000000a3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/04/14 12:12:31 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) 2018/04/14 12:12:32 executing program 0: [ 66.978825] netlink: 'syz-executor2': attribute type 1 has an invalid length. 2018/04/14 12:12:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(twofish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000280)="791f7dfde0815c48c13197fc2e324deacd", 0x11) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0xffffff2a}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/14 12:12:32 executing program 6: 2018/04/14 12:12:32 executing program 4: 2018/04/14 12:12:32 executing program 7: 2018/04/14 12:12:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000018000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7}}, 0x80, &(0x7f0000001340), 0x0, &(0x7f00000004c0)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) r2 = dup(r1) epoll_wait(r2, &(0x7f0000000780)=[{}, {}, {}], 0x3, 0xf5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000004c0)='security.capability\x00', 0xfffffffffffffffe) 2018/04/14 12:12:32 executing program 5: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000292000)) msgget(0x0, 0x414) 2018/04/14 12:12:32 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004000)}}, {{&(0x7f0000004240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback=0x7f000001}}}, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000112269fa5600000020970100"], 0x10}}], 0x2, 0x0) 2018/04/14 12:12:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) write$binfmt_aout(r0, &(0x7f0000000800), 0x20) [ 67.209468] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 2018/04/14 12:12:32 executing program 7: 2018/04/14 12:12:32 executing program 4: 2018/04/14 12:12:32 executing program 6: 2018/04/14 12:12:32 executing program 1: 2018/04/14 12:12:32 executing program 5: 2018/04/14 12:12:32 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004000)}}, {{&(0x7f0000004240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback=0x7f000001}}}, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000112269fa5600000020970100"], 0x10}}], 0x2, 0x0) 2018/04/14 12:12:32 executing program 0: 2018/04/14 12:12:32 executing program 4: 2018/04/14 12:12:32 executing program 3: 2018/04/14 12:12:32 executing program 7: 2018/04/14 12:12:32 executing program 6: 2018/04/14 12:12:32 executing program 1: 2018/04/14 12:12:32 executing program 5: 2018/04/14 12:12:32 executing program 4: 2018/04/14 12:12:32 executing program 6: 2018/04/14 12:12:32 executing program 0: 2018/04/14 12:12:32 executing program 7: 2018/04/14 12:12:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x15}}, 0x14) 2018/04/14 12:12:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x1c, 0x18, 0x501, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1}, 0x0) 2018/04/14 12:12:32 executing program 4: 2018/04/14 12:12:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xfe2f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010880a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xbb}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/14 12:12:32 executing program 6: 2018/04/14 12:12:32 executing program 1: 2018/04/14 12:12:33 executing program 7: 2018/04/14 12:12:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xf8d7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc0105303, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) 2018/04/14 12:12:33 executing program 6: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 2018/04/14 12:12:34 executing program 1: 2018/04/14 12:12:34 executing program 4: syz_open_dev$sg(&(0x7f00000007c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r0, &(0x7f0000000100), 0x2d9, 0x10400003) 2018/04/14 12:12:34 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) semget(0x3, 0x0, 0x93) 2018/04/14 12:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000001600)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x5}, [@typed={0x8, 0x11, @u32=0x7b2c8dfc}]}, 0x1c}, 0x1}, 0x0) 2018/04/14 12:12:34 executing program 7: clock_nanosleep(0x9, 0x400, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000080)) 2018/04/14 12:12:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xfe2f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010880a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xbb}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/14 12:12:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) 2018/04/14 12:12:34 executing program 6: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000800)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000505000)="0000000201000000000000010400000000000000", 0x14, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000651b13f8f9495d9bf41248204dc8af503b3ba8679dd6092f74ffff3a8e207c2976d065c5d701235d0100010000000000a9b2c4ae6d13d67ec55af995fb10c0e89c679764cddb2f21c9718b94703e87bf1451170291f4f005c4566d1313ad328396949b97dfb2d91bb40134df09ed3b7dbc13d4ba5ea9c2933448e86b0211c13a33834f2c784cbecf744225b4f773caaa540c2bbd1a1d70790b6dac1d6db6f2eb672913562bea63d0acfc0b72f990e72776b7b0cded8b6b667d6126375e5c93168d2bb0aa418d2f5dad2555dd1f9a5cb0935454b87a0dc44ada9d6367a6e7f5f1119746599fc7fae7e2e8621d3f30635ac16b7f4d2d1c10607368ff82be8495d71be12ef25d32924e9eaa3a5583400a1bbb2dfa43fd00a42c7ddade47ae8ccd01b9b974472660dfe1a7efe3c273a89dfa6d5b61fa27c4b019e4e104fcfa14fc53a9c9f5da7423ddb55c2c5045dc4f67a91c4eba94a9a2cc9fdb609490c7887dda0ca8f9"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x1f, 0x20}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000600)={r6, 0x34, "9e97353b13b119b928b4f48219c66eb3e682cfab5b85564c0ebbe00c876955763ca65432084f84e847bbe5b1c86dc1ca71ec0eec"}, &(0x7f0000000640)=0x3c) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000680)={r7, &(0x7f0000000280)=""/97}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1, 0x7ff}, 0x90) sendfile(r0, 0xffffffffffffff9c, &(0x7f0000000180), 0x4) r8 = accept(r0, &(0x7f0000000840)=@alg, &(0x7f00000003c0)=0x80) sendto$ipx(r8, &(0x7f0000000bc0)="662df4a093cdd7b35ff6ae42bc7d13930c1fea26aee3a47d99eb39c72fb76601dc87206d4eb86e00240f2194fa63c4e57a634a03fbc5a09ef3dcfb35ce84046ec80043aad86ba46f2e3bf4f8838948f37ed11512a1b49e92bb", 0x59, 0x20000040, 0x0, 0x0) socketpair(0xa, 0x7, 0x100000001, &(0x7f00000006c0)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f289b21e0", 0x6e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x39d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001680)=ANY=[@ANYBLOB="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"]}, 0x415) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000140)={'teql0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}) bind$inet(r9, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) setsockopt$inet_dccp_int(r2, 0x21, 0x800000000000004, &(0x7f0000000100)=0x1ff, 0x2db) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f00000001c0)="3ec2e6f6b72e29f50e000000000000232014e9", 0x13) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) 2018/04/14 12:12:34 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 2018/04/14 12:12:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) 2018/04/14 12:12:34 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x800000000009f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6000000000000000291300000003000000e10984fa3279d7a9e03a22b117adb09d2a8074affb69d736c06ab11a96f7d25adf9166e34ba01ef80187324065bcda06ab9013268169230973698dc95dde627650790df783841dcbb38ed04f54d537"], 0x60}}], 0x1, 0x0) 2018/04/14 12:12:34 executing program 2: syz_emit_ethernet(0x36, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "b09b6d5c2a91e414699d955c"}}}}}, &(0x7f0000000000)) 2018/04/14 12:12:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f000047ffd8)={0xfffd, 0x0, 0x0, 0x0, "050098d6530827e957225586db1028debd000117545281946a94771f398f405e"}) 2018/04/14 12:12:34 executing program 3: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x1, &(0x7f0000000300)="d589016a", 0x4) 2018/04/14 12:12:34 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) [ 69.597400] ================================================================== [ 69.604818] BUG: KMSAN: uninit-value in crypto_inc+0x2ab/0x2f0 [ 69.610796] CPU: 1 PID: 5946 Comm: syz-executor4 Not tainted 4.16.0+ #83 [ 69.617630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.626989] Call Trace: [ 69.629590] dump_stack+0x185/0x1d0 [ 69.633227] ? crypto_inc+0x2ab/0x2f0 [ 69.637030] kmsan_report+0x142/0x240 [ 69.640835] __msan_warning_32+0x6c/0xb0 [ 69.644900] crypto_inc+0x2ab/0x2f0 [ 69.648536] drbg_ctr_update+0x3a04/0x3d10 [ 69.652791] ? drbg_hash_df+0xc70/0xc70 [ 69.656770] drbg_seed+0xcba/0xe90 [ 69.660319] ? add_random_ready_callback+0x4c/0x3c0 [ 69.665335] ? __kmalloc+0x23c/0x350 [ 69.669048] ? _cond_resched+0x3c/0xd0 [ 69.672943] ? drbg_kcapi_seed+0x129f/0x2270 [ 69.677362] drbg_kcapi_seed+0x1c97/0x2270 [ 69.681615] ? drbg_kcapi_random+0xc20/0xc20 [ 69.686058] crypto_rng_reset+0x262/0x310 [ 69.690216] rng_setkey+0x8b/0xa0 [ 69.693678] alg_setsockopt+0x6c5/0x740 [ 69.697654] ? rng_release+0x50/0x50 [ 69.701377] ? alg_accept+0xd0/0xd0 [ 69.705006] SYSC_setsockopt+0x4b8/0x570 [ 69.709078] SyS_setsockopt+0x76/0xa0 [ 69.712879] do_syscall_64+0x309/0x430 [ 69.716770] ? SYSC_recv+0xe0/0xe0 [ 69.720319] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.725503] RIP: 0033:0x455319 [ 69.728684] RSP: 002b:00007f2bc117bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.736392] RAX: ffffffffffffffda RBX: 00007f2bc117c6d4 RCX: 0000000000455319 [ 69.744177] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000014 [ 69.751461] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.758734] R10: 00000000203bcfd0 R11: 0000000000000246 R12: 00000000ffffffff [ 69.766003] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 69.773274] [ 69.774897] Uninit was stored to memory at: [ 69.779225] kmsan_internal_chain_origin+0x12b/0x210 [ 69.784332] kmsan_memcpy_origins+0x11d/0x170 [ 69.788830] __msan_memcpy+0x19f/0x1f0 [ 69.792716] drbg_ctr_update+0x393a/0x3d10 [ 69.796950] drbg_seed+0xcba/0xe90 [ 69.800485] drbg_kcapi_seed+0x1c97/0x2270 [ 69.804718] crypto_rng_reset+0x262/0x310 [ 69.808863] rng_setkey+0x8b/0xa0 [ 69.812315] alg_setsockopt+0x6c5/0x740 [ 69.816286] SYSC_setsockopt+0x4b8/0x570 [ 69.820344] SyS_setsockopt+0x76/0xa0 [ 69.824141] do_syscall_64+0x309/0x430 [ 69.828031] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.833208] Uninit was stored to memory at: [ 69.837531] kmsan_internal_chain_origin+0x12b/0x210 [ 69.842630] kmsan_memcpy_origins+0x11d/0x170 2018/04/14 12:12:34 executing program 2: 2018/04/14 12:12:34 executing program 2: 2018/04/14 12:12:34 executing program 1: 2018/04/14 12:12:34 executing program 2: 2018/04/14 12:12:34 executing program 1: 2018/04/14 12:12:34 executing program 2: [ 69.847121] __msan_memcpy+0x19f/0x1f0 [ 69.851000] drbg_kcapi_sym_ctr+0x6e8/0x840 [ 69.855316] drbg_ctr_update+0x349a/0x3d10 [ 69.859546] drbg_seed+0xcba/0xe90 [ 69.863086] drbg_kcapi_seed+0x1c97/0x2270 [ 69.867323] crypto_rng_reset+0x262/0x310 [ 69.871468] rng_setkey+0x8b/0xa0 [ 69.874921] alg_setsockopt+0x6c5/0x740 [ 69.878896] SYSC_setsockopt+0x4b8/0x570 [ 69.882965] SyS_setsockopt+0x76/0xa0 [ 69.886768] do_syscall_64+0x309/0x430 [ 69.890663] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.895841] Uninit was stored to memory at: [ 69.900167] kmsan_internal_chain_origin+0x12b/0x210 [ 69.905275] __msan_chain_origin+0x69/0xc0 [ 69.909517] __crypto_xor+0x23c/0x16b0 [ 69.913414] ctr_crypt+0x432/0x4f0 [ 69.916964] simd_skcipher_encrypt+0x221/0x320 [ 69.921554] drbg_kcapi_sym_ctr+0x463/0x840 [ 69.925890] drbg_ctr_update+0x349a/0x3d10 [ 69.930141] drbg_seed+0xcba/0xe90 [ 69.933692] drbg_kcapi_seed+0x1c97/0x2270 [ 69.937936] crypto_rng_reset+0x262/0x310 [ 69.942096] rng_setkey+0x8b/0xa0 [ 69.945555] alg_setsockopt+0x6c5/0x740 [ 69.949530] SYSC_setsockopt+0x4b8/0x570 [ 69.953586] SyS_setsockopt+0x76/0xa0 [ 69.957389] do_syscall_64+0x309/0x430 [ 69.961265] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.966432] Local variable description: ----keystream.i@ctr_crypt [ 69.972642] Variable was created at: [ 69.976350] ctr_crypt+0x4a/0x4f0 [ 69.979785] simd_skcipher_encrypt+0x221/0x320 [ 69.984338] ================================================================== [ 69.991676] Disabling lock debugging due to kernel taint [ 69.997108] Kernel panic - not syncing: panic_on_warn set ... [ 69.997108] [ 70.004454] CPU: 1 PID: 5946 Comm: syz-executor4 Tainted: G B 4.16.0+ #83 [ 70.012583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.021916] Call Trace: [ 70.024506] dump_stack+0x185/0x1d0 [ 70.028129] panic+0x39d/0x940 [ 70.031337] ? crypto_inc+0x2ab/0x2f0 [ 70.035133] kmsan_report+0x238/0x240 [ 70.038919] __msan_warning_32+0x6c/0xb0 [ 70.042965] crypto_inc+0x2ab/0x2f0 [ 70.046584] drbg_ctr_update+0x3a04/0x3d10 [ 70.050814] ? drbg_hash_df+0xc70/0xc70 [ 70.054791] drbg_seed+0xcba/0xe90 [ 70.058347] ? add_random_ready_callback+0x4c/0x3c0 [ 70.063358] ? __kmalloc+0x23c/0x350 [ 70.067064] ? _cond_resched+0x3c/0xd0 [ 70.070943] ? drbg_kcapi_seed+0x129f/0x2270 [ 70.075346] drbg_kcapi_seed+0x1c97/0x2270 [ 70.079580] ? drbg_kcapi_random+0xc20/0xc20 [ 70.083999] crypto_rng_reset+0x262/0x310 [ 70.088151] rng_setkey+0x8b/0xa0 [ 70.091600] alg_setsockopt+0x6c5/0x740 [ 70.095578] ? rng_release+0x50/0x50 [ 70.099284] ? alg_accept+0xd0/0xd0 [ 70.102906] SYSC_setsockopt+0x4b8/0x570 [ 70.106960] SyS_setsockopt+0x76/0xa0 [ 70.110762] do_syscall_64+0x309/0x430 [ 70.114631] ? SYSC_recv+0xe0/0xe0 [ 70.118151] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.123329] RIP: 0033:0x455319 [ 70.126497] RSP: 002b:00007f2bc117bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.134193] RAX: ffffffffffffffda RBX: 00007f2bc117c6d4 RCX: 0000000000455319 [ 70.141446] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000014 [ 70.148697] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.156216] R10: 00000000203bcfd0 R11: 0000000000000246 R12: 00000000ffffffff [ 70.163487] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 70.171199] Dumping ftrace buffer: [ 70.174725] (ftrace buffer empty) [ 70.178406] Kernel Offset: disabled [ 70.182007] Rebooting in 86400 seconds..