INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. 2018/04/27 15:19:34 fuzzer started 2018/04/27 15:19:35 dialing manager at 10.128.0.26:34871 syzkaller login: [ 50.088330] can: request_module (can-proto-0) failed. [ 50.099723] can: request_module (can-proto-0) failed. 2018/04/27 15:19:42 kcov=true, comps=false 2018/04/27 15:19:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") pread64(r0, &(0x7f0000001280)=""/4096, 0x1000, 0x8000000000000) 2018/04/27 15:19:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="6c6f3a00000600"}) 2018/04/27 15:19:46 executing program 7: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000f) accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/04/27 15:19:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000f) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r1, 0x1) 2018/04/27 15:19:46 executing program 4: 2018/04/27 15:19:46 executing program 5: 2018/04/27 15:19:46 executing program 6: 2018/04/27 15:19:46 executing program 3: [ 55.157214] IPVS: ftp: loaded support on port[0] = 21 [ 55.241426] IPVS: ftp: loaded support on port[0] = 21 [ 55.287186] IPVS: ftp: loaded support on port[0] = 21 [ 55.355319] IPVS: ftp: loaded support on port[0] = 21 [ 55.449347] IPVS: ftp: loaded support on port[0] = 21 [ 55.539871] IPVS: ftp: loaded support on port[0] = 21 [ 55.669329] IPVS: ftp: loaded support on port[0] = 21 [ 55.803270] IPVS: ftp: loaded support on port[0] = 21 [ 56.791561] ip (4678) used greatest stack depth: 53992 bytes left [ 57.479576] ip (4729) used greatest stack depth: 53928 bytes left [ 57.968224] ip (4772) used greatest stack depth: 53768 bytes left [ 58.256174] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.262654] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.305415] device bridge_slave_0 entered promiscuous mode [ 58.376099] ip (4797) used greatest stack depth: 53656 bytes left [ 58.404258] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.410786] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.454396] device bridge_slave_0 entered promiscuous mode [ 58.572643] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.579145] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.617195] device bridge_slave_1 entered promiscuous mode [ 58.675617] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.682129] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.703623] device bridge_slave_0 entered promiscuous mode [ 58.732397] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.738940] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.776151] device bridge_slave_0 entered promiscuous mode [ 58.803946] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.810514] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.824640] device bridge_slave_1 entered promiscuous mode [ 58.843305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.889841] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.896318] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.923765] device bridge_slave_1 entered promiscuous mode [ 58.958098] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.964646] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.011718] device bridge_slave_1 entered promiscuous mode [ 59.044713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.055685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.099817] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.106327] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.126419] device bridge_slave_0 entered promiscuous mode [ 59.158718] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.165255] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.189160] device bridge_slave_0 entered promiscuous mode [ 59.213986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.224566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.233666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.310122] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.316615] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.355010] device bridge_slave_1 entered promiscuous mode [ 59.385844] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.392406] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.403858] device bridge_slave_0 entered promiscuous mode [ 59.419123] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.425591] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.446237] device bridge_slave_0 entered promiscuous mode [ 59.481671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.490122] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.496583] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.516774] device bridge_slave_1 entered promiscuous mode [ 59.544891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.562836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.585923] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.592426] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.641111] device bridge_slave_1 entered promiscuous mode [ 59.668371] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.674911] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.697156] device bridge_slave_1 entered promiscuous mode [ 59.715487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.765602] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.774521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.875174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.925282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.933558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.990981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.005069] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.096007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.108852] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.158736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.192270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.282723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.347623] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.403118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.410135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.460203] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.480570] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.522331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.529289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.539893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.546917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.640210] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.687136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.694187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.727480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.752748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.759779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.773437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.780407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.818980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.904725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.914458] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.936549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.947572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.995953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.002964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.083166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.111016] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.141894] team0: Port device team_slave_0 added [ 61.166498] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.187752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.196767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.267518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.276993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.298772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.305814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.364481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.396962] team0: Port device team_slave_1 added [ 61.414391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.422408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.461876] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.485122] team0: Port device team_slave_0 added [ 61.505766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.514699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.555253] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.570389] team0: Port device team_slave_0 added [ 61.593223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.600432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.629320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.637907] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.661349] team0: Port device team_slave_0 added [ 61.679863] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.692651] team0: Port device team_slave_1 added [ 61.707864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.720925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.770365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.779754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.810396] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.827185] team0: Port device team_slave_1 added [ 61.852718] ip (5030) used greatest stack depth: 53640 bytes left [ 61.856158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.888895] team0: Port device team_slave_1 added [ 61.902771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.916269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.932208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.958972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.983362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.004999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.062188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.074191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.081336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.099454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.125322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.156565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.185221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.203000] team0: Port device team_slave_0 added [ 62.210229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.218009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.233682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.255006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.262142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.270981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.316535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.350869] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.366980] team0: Port device team_slave_0 added [ 62.381105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.388007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.401631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.448465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.463964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.478375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.503537] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.513184] team0: Port device team_slave_1 added [ 62.521882] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.539755] team0: Port device team_slave_0 added [ 62.552802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.567178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.579742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.607534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.616821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.627810] team0: Port device team_slave_0 added [ 62.637289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.645962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.658248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.682010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.710430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.738407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.748714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.773124] team0: Port device team_slave_1 added [ 62.781433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.800133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.834519] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.849313] team0: Port device team_slave_1 added [ 62.855358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.864747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.887648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.898992] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.907418] team0: Port device team_slave_1 added [ 62.913358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.921322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.930733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.942277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.970948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.992249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.029274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.036243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.048935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.088889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.096699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.104846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.118089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.143396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.171584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.189780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.206446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.229017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.247751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.266951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.287087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.325258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.332876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.346012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.382640] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.390165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.403209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.420545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.428830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.445421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.487485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.495535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.533517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.578177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.585649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.598145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.634477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.650148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.666167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.695396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.706602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.716473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.729075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.744692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.773322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.818964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.826478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.841540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.904609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.911987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.925380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.270811] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.277311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.284211] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.290680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.321107] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.329582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.413757] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.420231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.427138] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.433680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.463421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.490308] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.496769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.503640] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.510106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.552072] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.799427] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.805906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.812741] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.819195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.879098] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.100063] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.106578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.113401] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.119869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.163621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.185105] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.191579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.198413] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.204863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.215815] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.254300] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.260787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.267677] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.274138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.371261] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.377850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.391851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.407012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.420753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.429321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.437005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.484097] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.490577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.497398] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.503823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.596119] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.423167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.016565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.126246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.677831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.920535] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.943564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.980733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.056726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.096996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.361218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.442122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.590486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.746373] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.752619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.761614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.791557] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.805857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.844659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.869714] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.886715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.917093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.194646] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.288772] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.439581] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.445968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.457329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.521954] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.601918] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.743160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.749696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.763482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.800259] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.807857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.821005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.846684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.853315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.870832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.102575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.108880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.124289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.182015] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.190215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.209780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.412975] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.485816] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.569566] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.663830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.980826] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.040570] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/27 15:20:15 executing program 0: r0 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/04/27 15:20:15 executing program 5: 2018/04/27 15:20:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) shutdown(r0, 0x1) 2018/04/27 15:20:15 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000001c0)) sendmsg$netrom(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@full={{0x3, {"98aa020ca54afb"}}, [{"5ce1556db42a9f"}, {"e77e8ef6e1ba45"}, {"ac44fa9e11c176"}, {"9dd97c5dffe04b"}, {"08601baa6d91bd"}, {"45773cbc005606"}, {"4e48809d3b8d41"}, {"7020b598a7eb64"}]}, 0x48, &(0x7f0000000680), 0x113, &(0x7f0000001580)}, 0x0) 2018/04/27 15:20:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000f) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r1, 0x1) 2018/04/27 15:20:15 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480), 0x0) 2018/04/27 15:20:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x5450, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) 2018/04/27 15:20:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)=""/23, &(0x7f0000000200)=0x17) shutdown(r0, 0x1) 2018/04/27 15:20:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001580)=[{&(0x7f0000000100)}], 0x0, &(0x7f0000001640)) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 2018/04/27 15:20:15 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) getsockname(r0, &(0x7f0000000140)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80) 2018/04/27 15:20:15 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000001c0)) sendmsg$netrom(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@full={{0x3, {"98aa020ca54afb"}}, [{"5ce1556db42a9f"}, {"e77e8ef6e1ba45"}, {"ac44fa9e11c176"}, {"9dd97c5dffe04b"}, {"08601baa6d91bd"}, {"45773cbc005606"}, {"4e48809d3b8d41"}, {"7020b598a7eb64"}]}, 0x48, &(0x7f0000000680), 0x113, &(0x7f0000001580)}, 0x0) 2018/04/27 15:20:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)=""/23, &(0x7f0000000200)=0x17) shutdown(r0, 0x1) 2018/04/27 15:20:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) dup3(r1, r0, 0x0) 2018/04/27 15:20:15 executing program 7: r0 = mq_open(&(0x7f0000000000)="ba6c6f2300", 0x0, 0x0, &(0x7f0000a27fc0)) lseek(r0, 0x0, 0x2) 2018/04/27 15:20:15 executing program 3: timer_create(0xffffffffffffffff, &(0x7f000014b000)={0x0, 0x0, 0x1}, &(0x7f0000000000)) 2018/04/27 15:20:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000040)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 2018/04/27 15:20:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{}, {0xe}}) 2018/04/27 15:20:16 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) flistxattr(r0, &(0x7f00000002c0)=""/36, 0x24) 2018/04/27 15:20:16 executing program 7: r0 = memfd_create(&(0x7f00000005c0)="6465762046a80d01bed3c1e1c85fe2dbef94a677a99248217280a42d688043cc913ddb112187ee23355083fc8a1eed8f3d1a468b405da49550403420a5685e12afb758b1bfcf91d09bfe61b023e1b04f2f8e23a38e1ef575997d875079d8275500cf932de25ff116808e0097e9a30f89ffec73d758337ba4ecfe26e0709dceb3bc100af911f29826293f7e6d4cbbb7fa03189e2fd5b9461150c1f6c46be2eddd2f84ce8136164ee052fdf7c5919654885d693f6c70f42b0eef3f33160056b93855cb84bf62730fd9afe77c1b8d7b0b9dcc2a7566f6067be13c15bbbc440e796acc56b204c7f48fcdfa2e84e52a95", 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000dc0)={@dev}, &(0x7f0000000e00)=0x14) geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e40)={{{@in=@dev={0xac, 0x14, 0x14}}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000280)=0x100) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000340)}, {&(0x7f0000000480)="afa511460042b5c179c6de6a317be7c4d643699668ceb7452c7eb7bc2132bfb4bc29ab3c45bb3cb87332b74a6b8e472b0a3e24d97e91784cba60d7ca30bd33058385ce3393fa1a47d5962ef5481e18de4b142ac5f233eef8dd10b26f98c51337ac94fa0c3a8b7433d031bd6d90d62eabf2780539e5fc0c634b44bcadd776c7ad5575be36ce5d12f41b18548525031a49ca9dce0909a548de147d8ac5c02e3695bcf83f01352f7cf9cef6e71399a1b86dd2cab80e52f4c8fef58e35f4910bd1764ab07fdb89436bf984a023d6f00844de95f8d7f5c335911e3bb2d162435c99e67757edffafba427f1914", 0xea}], 0x2, 0x0) 2018/04/27 15:20:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{0x4}}) 2018/04/27 15:20:16 executing program 6: open(&(0x7f0000000080)='./file0\x00', 0x1fffc, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000580)={{0x0, 0x0, r0}}) 2018/04/27 15:20:16 executing program 0: r0 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/04/27 15:20:16 executing program 2: r0 = mq_open(&(0x7f0000000240)="ba6c6f2300", 0x41, 0x0, &(0x7f0000000280)) mq_timedsend(r0, &(0x7f00000002c0)="58b1f2", 0x3, 0x0, &(0x7f0000000380)) 2018/04/27 15:20:16 executing program 1: r0 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/04/27 15:20:16 executing program 4: syslog(0x3, &(0x7f00000000c0), 0x0) 2018/04/27 15:20:16 executing program 5: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x9c361bcffe5b5b66) 2018/04/27 15:20:16 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x101800, 0x0) dup3(r1, r0, 0x0) read(r0, &(0x7f0000000000)=""/106, 0x6a) 2018/04/27 15:20:16 executing program 3: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), 0x4) 2018/04/27 15:20:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2}, 0x10) 2018/04/27 15:20:18 executing program 4: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:18 executing program 5: memfd_create(&(0x7f0000000200)='\x00', 0x3) 2018/04/27 15:20:18 executing program 6: mq_open(&(0x7f0000000000)="ba6c6f2300", 0x3, 0x0, &(0x7f0000a27fc0)) 2018/04/27 15:20:18 executing program 7: syslog(0x3, &(0x7f00000000c0), 0xffffffffffffff76) 2018/04/27 15:20:18 executing program 2: r0 = socket(0x10, 0x400000000002, 0x0) write(r0, &(0x7f0000000180)="1f0000004a001d683cf5914afe00665801080026ff0a27060000350000e6ff68f03467d690fdbb40065b2cedb933b97b", 0x30) 2018/04/27 15:20:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00'}, 0x18) 2018/04/27 15:20:18 executing program 3: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:18 executing program 1: r0 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/04/27 15:20:18 executing program 7: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:18 executing program 2: timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f}, &(0x7f00002d3ffc)) timer_create(0x2, &(0x7f0000978fa0)={0x0, 0x12}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000cfa000)={0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={r1}, &(0x7f00003d7ff0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a3fe0)={{0x0, 0x989680}, {0x0, r2+10000000}}, &(0x7f00006dcfe0)) clock_gettime(0x0, &(0x7f0000000180)={0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {r3}}, &(0x7f00000000c0)) 2018/04/27 15:20:18 executing program 5: add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='user\x00', 0xfffffffffffffffc) 2018/04/27 15:20:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000000e000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet6(r0, &(0x7f0000f31000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 2018/04/27 15:20:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1f) r2 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) 2018/04/27 15:20:18 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/178) 2018/04/27 15:20:18 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/04/27 15:20:19 executing program 5: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 2018/04/27 15:20:19 executing program 6: unshare(0x60000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/97, 0x61) waitid(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x800, 0x3, 0x4}, &(0x7f0000000300)=0x98) 2018/04/27 15:20:19 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast=0xffffffff}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in={0x2, 0x0, @broadcast=0xffffffff}], 0x30) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xdee}, 0xc) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/04/27 15:20:19 executing program 1: r0 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) 2018/04/27 15:20:19 executing program 4: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:19 executing program 3: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:19 executing program 7: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:19 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) [ 87.227796] IPVS: ftp: loaded support on port[0] = 21 [ 87.245236] syz-executor0: vmalloc: allocation failure: 17179869180 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 87.257201] syz-executor0 cpuset=syz0 mems_allowed=0 [ 87.262461] CPU: 1 PID: 6817 Comm: syz-executor0 Not tainted 4.16.0+ #87 [ 87.269325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.278701] Call Trace: [ 87.281327] dump_stack+0x185/0x1d0 [ 87.285001] warn_alloc+0x3fc/0x660 [ 87.288713] __vmalloc_node_range+0xa6f/0x1140 [ 87.293358] __vmalloc_node_flags_caller+0x102/0x120 [ 87.298519] ? xt_alloc_entry_offsets+0x62/0x70 [ 87.303229] ? xt_alloc_entry_offsets+0x62/0x70 [ 87.307957] kvmalloc_node+0x2a6/0x2e0 [ 87.311892] xt_alloc_entry_offsets+0x62/0x70 [ 87.316432] translate_table+0x1fc/0x3500 [ 87.320639] ? __kmalloc_node+0xdec/0x1190 2018/04/27 15:20:19 executing program 5: r0 = mq_open(&(0x7f0000000000)="ba6c6f2300", 0x0, 0x0, &(0x7f0000a27fc0)) lseek(r0, 0x0, 0x3) [ 87.324963] ? kvmalloc_node+0x1a1/0x2e0 [ 87.329084] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 87.334526] do_arpt_set_ctl+0x608/0xb40 [ 87.338695] ? arpt_unregister_table+0x570/0x570 [ 87.343522] nf_setsockopt+0x476/0x4d0 [ 87.347518] ip_setsockopt+0x24b/0x2b0 [ 87.351519] ? ipv4_pktinfo_prepare+0x650/0x650 [ 87.356283] tcp_setsockopt+0x1bb/0x1f0 [ 87.360329] ? tcp_disconnect+0x15e0/0x15e0 [ 87.364690] sock_common_setsockopt+0x136/0x170 [ 87.369472] ? sock_common_recvmsg+0x270/0x270 [ 87.374130] SYSC_setsockopt+0x4b8/0x570 [ 87.378300] SyS_setsockopt+0x76/0xa0 [ 87.382200] do_syscall_64+0x309/0x430 [ 87.386149] ? SYSC_recv+0xe0/0xe0 [ 87.389735] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 87.394951] RIP: 0033:0x455979 [ 87.398164] RSP: 002b:00007f9015b60c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.405928] RAX: ffffffffffffffda RBX: 00007f9015b616d4 RCX: 0000000000455979 [ 87.413228] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000013 [ 87.420534] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 87.427834] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 87.435135] R13: 0000000000000572 R14: 00000000006fb350 R15: 0000000000000000 [ 87.442670] Mem-Info: [ 87.445211] active_anon:79047 inactive_anon:78 isolated_anon:0 [ 87.445211] active_file:3441 inactive_file:8498 isolated_file:0 [ 87.445211] unevictable:0 dirty:69 writeback:0 unstable:0 [ 87.445211] slab_reclaimable:3360 slab_unreclaimable:9134 [ 87.445211] mapped:73762 shmem:84 pagetables:1078 bounce:0 [ 87.445211] free:1065073 free_pcp:241 free_cma:0 [ 87.478558] Node 0 active_anon:311956kB inactive_anon:312kB active_file:13764kB inactive_file:33992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:294932kB dirty:276kB writeback:0kB shmem:336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 87.506763] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.533065] lowmem_reserve[]: 0 2820 7247 7247 [ 87.537789] Node 0 DMA32 free:2891428kB min:26240kB low:32800kB high:39360kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2892208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:780kB local_pcp:688kB free_cma:0kB [ 87.565636] lowmem_reserve[]: 0 0 4426 4426 2018/04/27 15:20:19 executing program 2: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 2018/04/27 15:20:19 executing program 5: sched_setattr(0x0, &(0x7f0000000080), 0x0) [ 87.570095] Node 0 Normal free:1359016kB min:41196kB low:51492kB high:61788kB active_anon:314004kB inactive_anon:312kB active_file:13764kB inactive_file:33992kB unevictable:0kB writepending:276kB present:4718592kB managed:4533200kB mlocked:0kB kernel_stack:10368kB pagetables:4312kB bounce:0kB free_pcp:328kB local_pcp:124kB free_cma:0kB [ 87.600127] lowmem_reserve[]: 0 0 0 0 [ 87.604088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 87.617585] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 704*4096kB (M) = 2891428kB [ 87.633094] Node 0 Normal: 53*4kB (UM) 48*8kB (UM) 6*16kB (UME) 6*32kB (UME) 13*64kB (UE) 5*128kB (UE) 3*256kB (UME) 1*512kB (M) 3*1024kB (ME) 1*2048kB (U) 330*4096kB (UM) = 1360436kB [ 87.649942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 87.658629] 12022 total pagecache pages [ 87.662683] 0 pages in swap cache [ 87.666224] Swap cache stats: add 0, delete 0, find 0/0 [ 87.671645] Free swap = 0kB [ 87.674758] Total swap = 0kB [ 87.677829] 1965969 pages RAM [ 87.681043] 0 pages HighMem/MovableOnly [ 87.685067] 105641 pages reserved 2018/04/27 15:20:19 executing program 6: unshare(0x60000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/97, 0x61) waitid(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x800, 0x3, 0x4}, &(0x7f0000000300)=0x98) 2018/04/27 15:20:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000a8bfff)=""/1, 0x805031ae) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TCXONC(r1, 0x540a, 0x0) dup3(r1, r0, 0x0) 2018/04/27 15:20:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000014c0)="c3401c344654f3c7d9b4883c8c8e3901a4eedc3d6bd8ebd65c856a27d61154adc2b2a9e93ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecb323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880aa0c34d91051b22fa0867d0ad4154004997e317b7900000000000000000000000000", 0x82, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x40, 0x0, "1d9ade008cbd88a3023fda1ce16a701b0020c16fbc969af580c4b4a495160cd9f0f5d82fe50f8dad66ba68d398fdafc6ae92fa4cfe7aad71830f472cfcb915c23a35231ccbd905856376c63601acb2a6"}, 0xd8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in6}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) read(r0, &(0x7f0000000400)=""/100, 0xf8) sendto$inet(r0, &(0x7f0000000240)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000540)=""/58, 0x3a) 2018/04/27 15:20:19 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f000079df88)) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="bf"], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)) 2018/04/27 15:20:20 executing program 5: r0 = socket(0xa, 0x80000, 0xffff) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x2e2bd91c}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0xb, 0x0, 0x4, 0x7, r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000a63fff), 0x0, 0x20020004, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f000074847c)=[{0x8}, {}, {}, {}, {}, {}, {}, {}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x20000000012c6, 0x1000010004}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00007b1ffc), 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0xaa000000000, 0x4) 2018/04/27 15:20:20 executing program 1: r0 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) 2018/04/27 15:20:20 executing program 3: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:20 executing program 4: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:20 executing program 7: write(0xffffffffffffffff, &(0x7f00007fbffd), 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r1, &(0x7f0000000180)=[{}, {&(0x7f0000000300)="eccbb8c99ca9a777b8024ad7ce5b412f83b0a3b4f20bcf16375800d68191004ff39982f7c0eb0d3cfcd2323c95723e552616a6573b7e159fd8298a79d8148375c90b0ea24c4d51d080b0f6aaef0ab0ab8f710b5f822b7795f000b74605c3bec3c8761d42a8c68d3806269af6d63191ae860cc91a228f762ed32b00e5fc1118e474e9", 0x82}, {&(0x7f0000000040)="f6b4db3dc0ca3d9ab952034b476c10c12c98faf21e733dc8cbc0aba87fe14df9382d29687405b4afdcf17c13bc00a00d85c1193eaf", 0x35}], 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@empty, @remote}, &(0x7f0000000640)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000680)) 2018/04/27 15:20:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffdfffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) exit(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x0, 0x0, {0x9}}, 0x14}, 0x1}, 0x0) [ 88.383604] ================================================================== [ 88.391031] BUG: KMSAN: uninit-value in tcp_parse_options+0x1161/0x1c70 [ 88.397793] CPU: 0 PID: 4556 Comm: syz-executor2 Not tainted 4.16.0+ #87 [ 88.404630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.413976] Call Trace: [ 88.416556] [ 88.418708] dump_stack+0x185/0x1d0 [ 88.422343] ? tcp_parse_options+0x1161/0x1c70 [ 88.426928] kmsan_report+0x142/0x240 [ 88.430727] __msan_warning_32+0x6c/0xb0 [ 88.434785] tcp_parse_options+0x1161/0x1c70 [ 88.439195] ? __msan_poison_alloca+0x9a/0x1d0 [ 88.443779] tcp_validate_incoming+0x4f1/0x2790 [ 88.448452] tcp_rcv_established+0xf60/0x2bb0 [ 88.452950] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 88.458310] tcp_v4_do_rcv+0x6cd/0xd90 [ 88.462198] tcp_v4_rcv+0x5ecf/0x6af0 [ 88.466005] ? tcp_v4_rcv+0x1801/0x6af0 [ 88.469980] ? tcp_filter+0x280/0x280 [ 88.473779] ip_local_deliver_finish+0x874/0xec0 [ 88.478537] ip_local_deliver+0x43c/0x4e0 [ 88.482681] ? ip_local_deliver+0x4e0/0x4e0 [ 88.486997] ? ip_call_ra_chain+0x7b0/0x7b0 [ 88.491311] ip_rcv_finish+0xa36/0x1d00 [ 88.495281] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 88.500641] ? nf_hook_slow+0x36f/0x3d0 [ 88.504614] ip_rcv+0x118f/0x16d0 [ 88.508063] ? ip_rcv+0x16d0/0x16d0 [ 88.511694] __netif_receive_skb_core+0x47df/0x4a90 [ 88.516708] ? kmsan_write_aligned_origin_inline+0x10/0x60 [ 88.522333] ? ip_local_deliver_finish+0xec0/0xec0 [ 88.527259] process_backlog+0x62d/0xe20 [ 88.531325] ? rps_trigger_softirq+0x2f0/0x2f0 [ 88.535899] net_rx_action+0x7c1/0x1a70 [ 88.539873] ? net_tx_action+0xab0/0xab0 [ 88.543928] __do_softirq+0x56d/0x93d [ 88.547731] irq_exit+0x202/0x240 [ 88.551181] exiting_irq+0xe/0x10 [ 88.554632] smp_apic_timer_interrupt+0x64/0x90 [ 88.559294] apic_timer_interrupt+0xf/0x20 [ 88.563517] [ 88.565752] RIP: 0010:finish_lock_switch+0x38/0x50 [ 88.570668] RSP: 0018:ffff88015ca2fbe8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 [ 88.578373] RAX: ffff88021f0dab00 RBX: ffff88018a15c418 RCX: ffff880000000000 [ 88.585636] RDX: ffff88021f0dbb00 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 88.592898] RBP: ffff88015ca2fc00 R08: 0000000001080020 R09: 0000000000000002 [ 88.600163] R10: ffffffff7fffffff R11: 0000000000000000 R12: ffff88021fc3eb00 [ 88.607426] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88021f0dab00 [ 88.614796] finish_task_switch+0xdb/0x230 [ 88.619035] __schedule+0x68e/0x730 [ 88.622657] ? schedule+0x1cc/0x2f0 [ 88.626279] schedule+0x1cc/0x2f0 [ 88.629728] do_nanosleep+0x2c3/0x9b0 [ 88.633532] SYSC_nanosleep+0x420/0x6a0 [ 88.637503] ? hrtimer_init_sleeper+0xc0/0xc0 [ 88.641996] SyS_nanosleep+0x46/0x70 [ 88.645705] do_syscall_64+0x309/0x430 [ 88.649593] ? hrtimer_nanosleep+0x560/0x560 [ 88.654000] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 88.659178] RIP: 0033:0x481080 [ 88.662356] RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 88.670056] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000481080 [ 88.677317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 [ 88.684578] RBP: 0000000000015758 R08: 0000000000000001 R09: 00000000018e3940 [ 88.691838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.699097] R13: 0000000000000003 R14: 0000000000000117 R15: 000000000001572f [ 88.706358] [ 88.707971] Uninit was created at: [ 88.711512] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 88.716608] kmsan_kmalloc+0x94/0x100 [ 88.720404] kmsan_slab_alloc+0x11/0x20 [ 88.724371] __kmalloc_node_track_caller+0xaed/0x11c0 [ 88.729558] __alloc_skb+0x2cf/0x9f0 [ 88.733277] tcp_send_ack+0x18c/0x910 [ 88.737068] tcp_rcv_established+0x2103/0x2bb0 [ 88.741644] tcp_v4_do_rcv+0x6cd/0xd90 [ 88.745521] tcp_v4_rcv+0x5ecf/0x6af0 [ 88.749317] ip_local_deliver_finish+0x874/0xec0 [ 88.754062] ip_local_deliver+0x43c/0x4e0 [ 88.758206] ip_rcv_finish+0xa36/0x1d00 [ 88.762168] ip_rcv+0x118f/0x16d0 [ 88.765614] __netif_receive_skb_core+0x47df/0x4a90 [ 88.770632] process_backlog+0x62d/0xe20 [ 88.774684] net_rx_action+0x7c1/0x1a70 [ 88.778651] __do_softirq+0x56d/0x93d [ 88.782438] ================================================================== [ 88.789780] Disabling lock debugging due to kernel taint [ 88.795219] Kernel panic - not syncing: panic_on_warn set ... [ 88.795219] [ 88.802596] CPU: 0 PID: 4556 Comm: syz-executor2 Tainted: G B 4.16.0+ #87 [ 88.810728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.820073] Call Trace: [ 88.822645] [ 88.824790] dump_stack+0x185/0x1d0 [ 88.828421] panic+0x39d/0x940 [ 88.831630] ? tcp_parse_options+0x1161/0x1c70 [ 88.836207] kmsan_report+0x238/0x240 [ 88.840011] __msan_warning_32+0x6c/0xb0 [ 88.844072] tcp_parse_options+0x1161/0x1c70 [ 88.848483] ? __msan_poison_alloca+0x9a/0x1d0 [ 88.853068] tcp_validate_incoming+0x4f1/0x2790 [ 88.857746] tcp_rcv_established+0xf60/0x2bb0 [ 88.862249] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 88.867611] tcp_v4_do_rcv+0x6cd/0xd90 [ 88.871504] tcp_v4_rcv+0x5ecf/0x6af0 [ 88.875316] ? tcp_v4_rcv+0x1801/0x6af0 [ 88.879292] ? tcp_filter+0x280/0x280 [ 88.883096] ip_local_deliver_finish+0x874/0xec0 [ 88.887854] ip_local_deliver+0x43c/0x4e0 [ 88.891999] ? ip_local_deliver+0x4e0/0x4e0 [ 88.896318] ? ip_call_ra_chain+0x7b0/0x7b0 [ 88.900634] ip_rcv_finish+0xa36/0x1d00 [ 88.904606] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 88.909964] ? nf_hook_slow+0x36f/0x3d0 [ 88.913936] ip_rcv+0x118f/0x16d0 [ 88.917380] ? ip_rcv+0x16d0/0x16d0 [ 88.921015] __netif_receive_skb_core+0x47df/0x4a90 [ 88.926032] ? kmsan_write_aligned_origin_inline+0x10/0x60 [ 88.931655] ? ip_local_deliver_finish+0xec0/0xec0 [ 88.936579] process_backlog+0x62d/0xe20 [ 88.940641] ? rps_trigger_softirq+0x2f0/0x2f0 [ 88.945211] net_rx_action+0x7c1/0x1a70 [ 88.949183] ? net_tx_action+0xab0/0xab0 [ 88.953241] __do_softirq+0x56d/0x93d [ 88.957043] irq_exit+0x202/0x240 [ 88.960496] exiting_irq+0xe/0x10 [ 88.963947] smp_apic_timer_interrupt+0x64/0x90 [ 88.968615] apic_timer_interrupt+0xf/0x20 [ 88.972838] [ 88.975081] RIP: 0010:finish_lock_switch+0x38/0x50 [ 88.979999] RSP: 0018:ffff88015ca2fbe8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 [ 88.987696] RAX: ffff88021f0dab00 RBX: ffff88018a15c418 RCX: ffff880000000000 [ 88.994953] RDX: ffff88021f0dbb00 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 89.002227] RBP: ffff88015ca2fc00 R08: 0000000001080020 R09: 0000000000000002 [ 89.009484] R10: ffffffff7fffffff R11: 0000000000000000 R12: ffff88021fc3eb00 [ 89.016736] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88021f0dab00 [ 89.024012] finish_task_switch+0xdb/0x230 [ 89.028241] __schedule+0x68e/0x730 [ 89.031853] ? schedule+0x1cc/0x2f0 [ 89.035482] schedule+0x1cc/0x2f0 [ 89.038924] do_nanosleep+0x2c3/0x9b0 [ 89.042717] SYSC_nanosleep+0x420/0x6a0 [ 89.046683] ? hrtimer_init_sleeper+0xc0/0xc0 [ 89.051160] SyS_nanosleep+0x46/0x70 [ 89.054852] do_syscall_64+0x309/0x430 [ 89.058731] ? hrtimer_nanosleep+0x560/0x560 [ 89.063139] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 89.068316] RIP: 0033:0x481080 [ 89.071495] RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 89.079187] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000481080 [ 89.086448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 [ 89.093710] RBP: 0000000000015758 R08: 0000000000000001 R09: 00000000018e3940 [ 89.100968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.108215] R13: 0000000000000003 R14: 0000000000000117 R15: 000000000001572f [ 89.115944] Dumping ftrace buffer: [ 89.119469] (ftrace buffer empty) [ 89.123160] Kernel Offset: disabled [ 89.126761] Rebooting in 86400 seconds..