INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.11' (ECDSA) to the list of known hosts. 2018/04/20 19:10:04 fuzzer started 2018/04/20 19:10:04 dialing manager at 10.128.0.26:40315 2018/04/20 19:10:10 kcov=true, comps=false 2018/04/20 19:10:13 executing program 0: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'wlc\x00'}, 0x2c) 2018/04/20 19:10:13 executing program 2: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000044ff6)='./control\x00', 0x0) renameat2(r0, &(0x7f0000036ff6)='./control\x00', r0, &(0x7f0000036000)='./file0\x00', 0x4) 2018/04/20 19:10:13 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x11, @broadcast=0xffffffff, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/04/20 19:10:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000880)="8d", 0x1, 0x20000801, &(0x7f0000000800)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/209, 0xd1}], 0x1) 2018/04/20 19:10:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x2, 0x12c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00', 'bridge_slave_1\x00', 'syzkaller1\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1b0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000025c0), 0x200000000000008e}}], 0x285f5ed, 0x0) 2018/04/20 19:10:13 executing program 4: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) 2018/04/20 19:10:13 executing program 5: unshare(0x60000000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0xa3) 2018/04/20 19:10:13 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000880)="8d", 0x1, 0x20000801, &(0x7f0000000800)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="290000002000190000003fffffffda060200000000e80001040000040d000300ea1100008005000000", 0x29}], 0x1) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000bc0)="96", 0x1}], 0x1, &(0x7f0000000100)=ANY=[]}}], 0x1, 0x0) syzkaller login: [ 44.025529] ip (3761) used greatest stack depth: 54672 bytes left [ 44.200351] ip (3775) used greatest stack depth: 54312 bytes left [ 45.361625] ip (3892) used greatest stack depth: 54200 bytes left [ 45.722108] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.728658] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.761309] device bridge_slave_0 entered promiscuous mode [ 45.861638] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.868115] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.909527] device bridge_slave_0 entered promiscuous mode [ 45.936911] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.943445] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.961945] device bridge_slave_1 entered promiscuous mode [ 45.968817] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.975270] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.001924] device bridge_slave_0 entered promiscuous mode [ 46.028829] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.035327] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.062016] device bridge_slave_0 entered promiscuous mode [ 46.072789] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.079233] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.092364] device bridge_slave_0 entered promiscuous mode [ 46.100933] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.107426] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.129562] device bridge_slave_0 entered promiscuous mode [ 46.149983] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.156441] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.173161] device bridge_slave_0 entered promiscuous mode [ 46.184881] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.191347] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.200202] device bridge_slave_0 entered promiscuous mode [ 46.210318] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.216769] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.236980] device bridge_slave_1 entered promiscuous mode [ 46.255989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.263386] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.269824] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.293700] device bridge_slave_1 entered promiscuous mode [ 46.302618] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.309109] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.331555] device bridge_slave_1 entered promiscuous mode [ 46.347824] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.354271] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.368842] device bridge_slave_1 entered promiscuous mode [ 46.379388] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.385828] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.396924] device bridge_slave_1 entered promiscuous mode [ 46.409984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.417295] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.423765] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.455708] device bridge_slave_1 entered promiscuous mode [ 46.474961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.484680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.498415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.507714] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.514186] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.555524] device bridge_slave_1 entered promiscuous mode [ 46.564765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.576605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.665183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.676468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.685573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.745095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.761655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.778574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.800722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.890389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.966438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.151687] ip (4016) used greatest stack depth: 53960 bytes left [ 47.367596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.567450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.652703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.706964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.770003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.793850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.808674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.852958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.891493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.927444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.989160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.996893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.041836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.050532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.097986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.222956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.427654] ip (4115) used greatest stack depth: 53640 bytes left [ 48.573491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.759397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.842183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.941162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.960901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.999677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.007113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.027318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.066245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.077561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.086577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.123286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.152069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.199851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.242964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.250187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.268908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.301084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.308337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.323761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.347812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.363497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.371444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.380463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.396161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.424889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.432157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.441453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.448569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.473889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.532285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.539431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.557716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.595101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.602281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.614962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.641610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.652454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.668500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.684710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.691992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.706487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.717339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.730074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.746258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.771371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.779169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.788120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.804007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.845735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.858581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.890103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.921957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.933340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.946422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.993643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.000823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.009678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.077194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.084362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.097157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.226327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.233493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.250400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.830227] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.836727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.843583] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.850159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.873353] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.879858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.900245] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.906717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.913580] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.920023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.946379] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.970169] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.976624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.983466] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.989917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.053964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.261479] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.267973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.274837] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.281280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.324806] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.342198] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.348660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.355499] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.361938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.382488] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.389840] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.396292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.403164] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.409600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.446829] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.454272] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.460719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.467510] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.473952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.490372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.895154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.905741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.928779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.944374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.965823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.986131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.027001] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.033516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.040385] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.046838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.069109] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.921141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.206392] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.332821] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.449297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.652213] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.774620] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.912272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.979075] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.985359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.998398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.069471] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.075745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.083321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.112794] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.336965] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.343276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.357768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.480172] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.518482] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.524809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.539206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.590361] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.596636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.609696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.704318] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.710581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.720904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.982861] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.989211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.999384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.226551] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.232805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.244421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 19:10:40 executing program 0: r0 = socket$inet(0x2, 0x8000000000003, 0x33) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip_vti0\x00', 0x10) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)}, 0x0) 2018/04/20 19:10:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x223, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/20 19:10:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000880)="8d", 0x1, 0x20000801, &(0x7f0000000800)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/209, 0xd1}], 0x1) 2018/04/20 19:10:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x5}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000440)}}], 0x1, 0x0) 2018/04/20 19:10:40 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) 2018/04/20 19:10:40 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000880)="8d", 0x1, 0x20000801, &(0x7f0000000800)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="290000002000190000003fffffffda060200000000e80001040000040d000300ea1100008005000000", 0x29}], 0x1) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000bc0)="96", 0x1}], 0x1, &(0x7f0000000100)=ANY=[]}}], 0x1, 0x0) 2018/04/20 19:10:40 executing program 5: unshare(0x60000000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0xa3) 2018/04/20 19:10:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x2, 0x12c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00', 'bridge_slave_1\x00', 'syzkaller1\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1b0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000025c0), 0x200000000000008e}}], 0x285f5ed, 0x0) 2018/04/20 19:10:40 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xc6) close(r0) 2018/04/20 19:10:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000efcc)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfffffffe}}, 0x1c}, 0x1}, 0x0) 2018/04/20 19:10:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000013db4)={0x20, 0x20, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @fd}]}, 0x20}, 0x1}, 0x0) 2018/04/20 19:10:40 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f00000002c0)) 2018/04/20 19:10:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x30, 0xaff, 0x0, 0x0, {0x1}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/20 19:10:40 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r1, 0x0) 2018/04/20 19:10:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) 2018/04/20 19:10:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f00000012c0), 0x8, &(0x7f0000001300)) 2018/04/20 19:10:41 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000340)='btrfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)={[{@device={'device', 0x3d, './file0'}, 0x2c}]}) 2018/04/20 19:10:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10, 0x7400000000000000}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x2e, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x8, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/20 19:10:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f00000000c0)=""/47, 0x2f) 2018/04/20 19:10:41 executing program 2: r0 = memfd_create(&(0x7f0000000180)='procsystemsecurityvmnet1\x00', 0x0) fallocate(r0, 0x3, 0x1000, 0x9ef) 2018/04/20 19:10:41 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007de000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00007d8ef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x20a) 2018/04/20 19:10:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10) 2018/04/20 19:10:41 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000001080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f0000644ff0)=[{&(0x7f0000ff8000)="480000001400257f09004b01fcfc8c560a880000f217e00600000000000000a2bc560300000000000000200028213ee206000000000000ffff5bf1ff00c7e5ed5e00000000620000", 0x48}], 0x1) 2018/04/20 19:10:41 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r1, r2) 2018/04/20 19:10:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f000001d000), 0x0, &(0x7f000001c000)}, 0xc100) r1 = dup2(r0, r0) sendmsg$key(r1, &(0x7f000000b000)={0x0, 0x0, &(0x7f000001fff0)={&(0x7f0000003fd0)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/04/20 19:10:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[{0x10, 0x84}], 0x10}}], 0x1, 0x0) 2018/04/20 19:10:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x17, 0x25}, [], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x431, &(0x7f0000000180)=""/195}, 0x48) 2018/04/20 19:10:41 executing program 5: unshare(0x60000000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0xa3) 2018/04/20 19:10:41 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x1276) 2018/04/20 19:10:41 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) fcntl$setlease(r0, 0x400, 0x2) 2018/04/20 19:10:41 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) lseek(r0, 0x0, 0x2) 2018/04/20 19:10:41 executing program 1: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0x800452d3, &(0x7f00000002c0)) 2018/04/20 19:10:42 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r1, r2) 2018/04/20 19:10:42 executing program 7: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fmask={'fmask', 0x3d}, 0x2c}]}) 2018/04/20 19:10:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0xb, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/04/20 19:10:42 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) 2018/04/20 19:10:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2=0xe0000002, @multicast1=0xe0000001}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000005ffc)=0x2d) 2018/04/20 19:10:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x97) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x0, "dcbd7013560987c90ebd84b6e984c7242a057f7f7f8b85f0aba26dc45e69c2db87180107eba9f36e22ba7df5228e6a97e954627eb3966137d05054d92ff0e25078b35ba8d6f9e3ab5b89afb667676ae0"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x8, 0x0, "df2c9c7c239a55325fe54fe4b8475c9366744ab461310000cc839c6d3d1f288e5da58ffb88c3c9978407767b86505a282c66a7702a239d5a0f8b7b29a332d8b0f83a005fc5f5db95c1deca497bf4535e"}, 0xd8) sendto$inet6(r0, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/20 19:10:42 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) fcntl$setlease(r0, 0x400, 0x2) 2018/04/20 19:10:42 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r1, r2) 2018/04/20 19:10:42 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r1, r2) 2018/04/20 19:10:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@uid={'uid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/20 19:10:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='nfsd\x00', 0x0, &(0x7f0000000500)) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x0, &(0x7f00000003c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/20 19:10:42 executing program 5: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ah_ip4_spec={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, {"8294", @random="c6540be59341"}, @esp_ip4_spec={@remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, {'g-', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}) 2018/04/20 19:10:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000c3000)={0xf, 0x4, 0x4, 0x1934, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x380) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000022c0)={r1, &(0x7f0000000040), &(0x7f0000000040)}, 0x20) close(r0) 2018/04/20 19:10:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000eddffe)='(', 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x6e, &(0x7f000062fff8), 0x8) 2018/04/20 19:10:43 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f}, 0xa) 2018/04/20 19:10:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0xe, &(0x7f0000000240)={'broute\x00'}, &(0x7f0000000080)=0x78) 2018/04/20 19:10:43 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0xfffffffffffffeff, &(0x7f0000ffd000/0x3000)=nil, 0x2) 2018/04/20 19:10:43 executing program 3: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='?', 0x1, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) 2018/04/20 19:10:43 executing program 1: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000100008000000000", 0x4, 0x0) 2018/04/20 19:10:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0), 0x4) dup2(r0, r1) 2018/04/20 19:10:43 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) fcntl$setlease(r0, 0x400, 0x2) 2018/04/20 19:10:43 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0xc, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0x20}, 0x1}, 0x0) 2018/04/20 19:10:43 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8994, &(0x7f0000000000)={'bond0\x00'}) 2018/04/20 19:10:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000928f74)={0x0, 0x0, 0x0, "717565756531000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f000006ff44)={0x0, 0x0, 'client0\x00', 0x0, "6318ca4c372bbf06", "99f3c2e1541fe1bfdf54840c086e666dec2aef8735f8bc6ae79d506a1f00f7b8"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 72.799110] ================================================================== [ 72.806524] BUG: KMSAN: uninit-value in ipv6_skip_exthdr+0x135/0x900 [ 72.813001] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.16.0+ #84 [ 72.819205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.828531] Call Trace: [ 72.831088] [ 72.833227] dump_stack+0x185/0x1d0 [ 72.836839] ? ipv6_skip_exthdr+0x135/0x900 [ 72.841145] kmsan_report+0x142/0x240 [ 72.844931] __msan_warning_32+0x6c/0xb0 [ 72.848968] ipv6_skip_exthdr+0x135/0x900 [ 72.853093] icmp6_send+0xec1/0x3460 [ 72.856785] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 72.862127] ? update_cfs_rq_load_avg+0x1460/0x1aa0 [ 72.867133] ? ndisc_error_report+0x40/0x1a0 [ 72.871525] ? icmpv6_param_prob+0xc0/0xc0 [ 72.875736] icmpv6_send+0xe0/0x110 [ 72.879340] ? ndisc_error_report+0x101/0x1a0 [ 72.883810] ip6_link_failure+0x8f/0x580 [ 72.887848] ? ip6_negative_advice+0x350/0x350 [ 72.892408] ndisc_error_report+0x101/0x1a0 [ 72.896710] ? ndisc_solicit+0x5c0/0x5c0 [ 72.900751] neigh_invalidate+0x385/0x930 [ 72.904878] neigh_timer_handler+0xd85/0x12d0 [ 72.909350] call_timer_fn+0x26a/0x5a0 [ 72.913212] ? neigh_blackhole+0x60/0x60 [ 72.917251] __run_timers+0xda7/0x11c0 [ 72.921115] ? neigh_blackhole+0x60/0x60 [ 72.925155] ? irq_exit+0x202/0x240 [ 72.928757] ? run_timer_softirq+0x14/0x70 [ 72.932973] ? timers_dead_cpu+0x1010/0x1010 [ 72.937364] run_timer_softirq+0x43/0x70 [ 72.941404] __do_softirq+0x56d/0x93d [ 72.945199] irq_exit+0x202/0x240 [ 72.948642] exiting_irq+0xe/0x10 [ 72.952078] smp_apic_timer_interrupt+0x64/0x90 [ 72.956724] apic_timer_interrupt+0xf/0x20 [ 72.960928] [ 72.963142] RIP: 0010:default_idle+0x1fb/0x3c0 [ 72.967694] RSP: 0018:ffffffff87c0fd88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 [ 72.975374] RAX: ffff880203eb5440 RBX: 0000000000000000 RCX: ffff880000000000 [ 72.982622] RDX: ffff880203ab5440 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 72.989867] RBP: ffffffff87c0fdc0 R08: 0000000001080020 R09: 0000000000000002 [ 72.997114] R10: 00000010f32895c0 R11: 0000000000000000 R12: 0000000000000000 [ 73.004359] R13: ffffffff87c1eb00 R14: ffffffff87c0fe24 R15: ffffffff87c1f418 [ 73.011612] ? default_idle+0x6b/0x3c0 [ 73.015479] ? __sched_text_end+0x1/0x1 [ 73.019432] arch_cpu_idle+0x20/0x30 [ 73.023121] do_idle+0x349/0x790 [ 73.026464] cpu_startup_entry+0x45/0x50 [ 73.030513] rest_init+0x1c1/0x1f0 [ 73.034041] ? hpet_time_init+0x20/0xe0 [ 73.037990] start_kernel+0xf93/0xfb0 [ 73.041766] x86_64_start_kernel+0x2fa/0x310 [ 73.046155] secondary_startup_64+0xa5/0xb0 [ 73.050448] [ 73.052051] Uninit was stored to memory at: [ 73.056358] kmsan_internal_chain_origin+0x12b/0x210 [ 73.061436] kmsan_memcpy_origins+0x11d/0x170 [ 73.065907] __msan_memcpy+0x19f/0x1f0 [ 73.069769] skb_copy_bits+0x63a/0xdb0 [ 73.073638] ipv6_skip_exthdr+0x297/0x900 [ 73.077759] icmp6_send+0xec1/0x3460 [ 73.081449] icmpv6_send+0xe0/0x110 [ 73.085061] ip6_link_failure+0x8f/0x580 [ 73.089096] ndisc_error_report+0x101/0x1a0 [ 73.093403] neigh_invalidate+0x385/0x930 [ 73.097527] neigh_timer_handler+0xd85/0x12d0 [ 73.101996] call_timer_fn+0x26a/0x5a0 [ 73.105856] __run_timers+0xda7/0x11c0 [ 73.109717] run_timer_softirq+0x43/0x70 [ 73.113753] __do_softirq+0x56d/0x93d [ 73.117525] Uninit was created at: [ 73.121040] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 73.126031] kmsan_alloc_page+0x82/0xe0 [ 73.129982] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 73.134717] alloc_pages_current+0x6b5/0x970 [ 73.139112] skb_page_frag_refill+0x3ba/0x5e0 [ 73.143582] sk_page_frag_refill+0xa4/0x340 [ 73.147879] __ip6_append_data+0x1a20/0x4bb0 [ 73.152261] ip6_append_data+0x40e/0x6b0 [ 73.156304] rawv6_sendmsg+0x2787/0x4cc0 [ 73.160350] inet_sendmsg+0x48d/0x740 [ 73.164125] ___sys_sendmsg+0xec0/0x1310 [ 73.168162] SYSC_sendmsg+0x2a3/0x3d0 [ 73.171936] SyS_sendmsg+0x54/0x80 [ 73.175449] do_syscall_64+0x309/0x430 [ 73.179311] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.184469] ================================================================== [ 73.191800] Disabling lock debugging due to kernel taint [ 73.197221] Kernel panic - not syncing: panic_on_warn set ... [ 73.197221] [ 73.204561] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 4.16.0+ #84 [ 73.212067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.221394] Call Trace: [ 73.223952] [ 73.226081] dump_stack+0x185/0x1d0 [ 73.229690] panic+0x39d/0x940 [ 73.232869] ? ipv6_skip_exthdr+0x135/0x900 [ 73.237164] kmsan_report+0x238/0x240 [ 73.240941] __msan_warning_32+0x6c/0xb0 [ 73.244978] ipv6_skip_exthdr+0x135/0x900 [ 73.249104] icmp6_send+0xec1/0x3460 [ 73.252793] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 73.258131] ? update_cfs_rq_load_avg+0x1460/0x1aa0 [ 73.263132] ? ndisc_error_report+0x40/0x1a0 [ 73.267522] ? icmpv6_param_prob+0xc0/0xc0 [ 73.271738] icmpv6_send+0xe0/0x110 [ 73.275343] ? ndisc_error_report+0x101/0x1a0 [ 73.279823] ip6_link_failure+0x8f/0x580 [ 73.283869] ? ip6_negative_advice+0x350/0x350 [ 73.288432] ndisc_error_report+0x101/0x1a0 [ 73.292737] ? ndisc_solicit+0x5c0/0x5c0 [ 73.296795] neigh_invalidate+0x385/0x930 [ 73.300928] neigh_timer_handler+0xd85/0x12d0 [ 73.305406] call_timer_fn+0x26a/0x5a0 [ 73.309272] ? neigh_blackhole+0x60/0x60 [ 73.313317] __run_timers+0xda7/0x11c0 [ 73.317185] ? neigh_blackhole+0x60/0x60 [ 73.321228] ? irq_exit+0x202/0x240 [ 73.324837] ? run_timer_softirq+0x14/0x70 [ 73.329055] ? timers_dead_cpu+0x1010/0x1010 [ 73.333443] run_timer_softirq+0x43/0x70 [ 73.337489] __do_softirq+0x56d/0x93d [ 73.341275] irq_exit+0x202/0x240 [ 73.344712] exiting_irq+0xe/0x10 [ 73.348148] smp_apic_timer_interrupt+0x64/0x90 [ 73.352799] apic_timer_interrupt+0xf/0x20 [ 73.357011] [ 73.359240] RIP: 0010:default_idle+0x1fb/0x3c0 [ 73.363796] RSP: 0018:ffffffff87c0fd88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 [ 73.371483] RAX: ffff880203eb5440 RBX: 0000000000000000 RCX: ffff880000000000 [ 73.378741] RDX: ffff880203ab5440 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 73.385994] RBP: ffffffff87c0fdc0 R08: 0000000001080020 R09: 0000000000000002 [ 73.393244] R10: 00000010f32895c0 R11: 0000000000000000 R12: 0000000000000000 [ 73.400495] R13: ffffffff87c1eb00 R14: ffffffff87c0fe24 R15: ffffffff87c1f418 [ 73.407757] ? default_idle+0x6b/0x3c0 [ 73.411632] ? __sched_text_end+0x1/0x1 [ 73.415592] arch_cpu_idle+0x20/0x30 [ 73.419288] do_idle+0x349/0x790 [ 73.422646] cpu_startup_entry+0x45/0x50 [ 73.426689] rest_init+0x1c1/0x1f0 [ 73.430214] ? hpet_time_init+0x20/0xe0 [ 73.434168] start_kernel+0xf93/0xfb0 [ 73.437950] x86_64_start_kernel+0x2fa/0x310 [ 73.442340] secondary_startup_64+0xa5/0xb0 [ 73.447171] Dumping ftrace buffer: [ 73.450694] (ftrace buffer empty) [ 73.454379] Kernel Offset: disabled [ 73.457978] Rebooting in 86400 seconds..