INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2018/04/19 14:23:09 fuzzer started 2018/04/19 14:23:10 dialing manager at 10.128.0.26:37327 2018/04/19 14:23:16 kcov=true, comps=false 2018/04/19 14:23:19 executing program 0: 2018/04/19 14:23:19 executing program 1: 2018/04/19 14:23:19 executing program 7: 2018/04/19 14:23:19 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x800000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010000)="00080000ec0500001302000012000000000000000002000000010000ba55394ce10000001e000000000000000010cc0302000100526549734572334673000000030000000200010002000102000000000100000081057152c0554b48a2b926da7ee68a230000000000000000000000000000000001001e004c2bbd5a004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003000000000000000000000000000000", 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f0000000000000000000000000000000000000000000000000000000000", 0x60, 0x11000}, {&(0x7f0000010300)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xf00, 0x11100}, {&(0x7f0000011200)="00000000000000000000000012000000000000000002000000010000ba55394ce10000001e000000000000000000000000000000000000000000000000000000", 0x40, 0x212000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f0000000000000000000000000000000000000000000000000000", 0x60, 0x213000}, {&(0x7f0000011400)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003000000300000000000000000000000000000004c2bbd5a4c2bbd5a4c2bbd5a0100000000000000", 0x60, 0x213fa0}], 0x0, &(0x7f0000011500)) 2018/04/19 14:23:19 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x0) 2018/04/19 14:23:19 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)="2f2f66696c653002", r0, &(0x7f0000000080)='./file0\x00') renameat(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)="2f2f66696c653002") 2018/04/19 14:23:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000280)={[{@flush='flush', 0x2c}]}) open$dir(&(0x7f0000000340)='./file0/file0\x00', 0x40, 0x0) 2018/04/19 14:23:19 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000001c00)=[{}], 0x1, 0x0) open(&(0x7f0000000500)="2f2f66696c653002", 0x0, 0x0) r0 = open(&(0x7f00000006c0)="2f2f66696c653002", 0x0, 0x22) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) fdatasync(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740002040100027002704cf8", 0x16}], 0x0, &(0x7f0000000e80)=ANY=[]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000780)=ANY=[], &(0x7f00000001c0), 0x0) open$dir(&(0x7f0000000e40)='./file0//ile0\x00', 0xc240, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x3, &(0x7f0000000600)=[{&(0x7f0000000280)="055220b882e653e31d50feb9d9880e864ba2c934664f8b7535bdd050d354700146b0ea7036cde341b02e683eb1c44619a6795276126215349317c9d7155649c80e029bb2f09741f0dcb0cf48bb3e81da748e022b29c09d57d2abe415637c9dba626d3d03d6d8e5d4da92020dc3050bf9bef646f2f5846c068f2d2ca16a4dd322e867bacc5f85b9d23c6b5b1153913d130b9c4081990e0af809f5fd68af5356a083837a049dac67534e4e9462a85ef1dc88b67d4543556704ac2c5f27452c2e0b5dbe2a794207", 0xc6, 0xbcac}, {&(0x7f0000000400)="892d8a98027379e476b8ef88ffc721879cf3", 0x12, 0x7fff}, {&(0x7f0000000440)="2f0949950e3e67ce48cfde989eeb85a958fb1d132dd588f1b0a5895a0088918770ad8992f960ae4f8c0cb0d6cef615527214e2abb72b8a27c411d9e9bee2966b9af828f668db5a9b5d1ed497d4b7270d", 0x50, 0x3}], 0x201800, &(0x7f00000004c0)={[{@dmask={'dmask', 0x3d, [0x31]}, 0x2c}, {@quiet='quiet', 0x2c}]}) truncate(&(0x7f0000000040)='./file0//ile0\x00', 0x8c3) mkdir(&(0x7f0000000140)="2f2f66696c653002", 0x2c) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x70cc3b8922081ddf, 0x28) syzkaller login: [ 42.597515] ip (3748) used greatest stack depth: 54192 bytes left [ 44.423307] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.429801] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.451339] device bridge_slave_0 entered promiscuous mode [ 44.593645] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.600137] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.634491] device bridge_slave_0 entered promiscuous mode [ 44.694432] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.700925] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.730288] device bridge_slave_0 entered promiscuous mode [ 44.744889] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.751362] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.761080] device bridge_slave_1 entered promiscuous mode [ 44.770960] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.777410] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.786292] device bridge_slave_0 entered promiscuous mode [ 44.801979] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.808417] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.834510] device bridge_slave_0 entered promiscuous mode [ 44.850764] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.857230] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.867261] device bridge_slave_0 entered promiscuous mode [ 44.876973] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.883443] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.894141] device bridge_slave_0 entered promiscuous mode [ 44.905585] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.912110] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.936985] device bridge_slave_1 entered promiscuous mode [ 44.953801] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.960261] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.001211] device bridge_slave_1 entered promiscuous mode [ 45.010683] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.017131] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.046461] device bridge_slave_1 entered promiscuous mode [ 45.054319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.062301] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.068775] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.091500] device bridge_slave_1 entered promiscuous mode [ 45.109794] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.116230] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.149772] device bridge_slave_1 entered promiscuous mode [ 45.159144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.168617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.183214] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.189680] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.206303] device bridge_slave_1 entered promiscuous mode [ 45.213825] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.220285] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.244189] device bridge_slave_0 entered promiscuous mode [ 45.259392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.276597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.286210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.337193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.360268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.373701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.412362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.472376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.479607] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.486135] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.521974] device bridge_slave_1 entered promiscuous mode [ 45.531800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.558455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.629643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.719530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.939697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.289393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.332406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.380753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.414695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.475548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.492290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.521870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.574007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.601016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.612622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.679635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.715723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.773583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.963345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.976134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.206980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.477505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.656203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.680123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.704791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.712983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.730879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.805764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.873107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.883813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.926604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.946891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.960159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.970789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.988188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.036560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.050324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.099549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.106703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.116390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.139641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.162083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.173701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.211200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.218617] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.232545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.239671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.251949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.269791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.291163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.307195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.316016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.326563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.337723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.345379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.354394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.364517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.372281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.421922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.456128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.485781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.510286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.520097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.541612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.549117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.558628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.567495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.604187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.632855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.648335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.670666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.678267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.686905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.705754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.714785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.732462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.795107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.820933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.846106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.916419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.923589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.935762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.969427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.983495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.000999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.557645] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.564138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.570981] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.577443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.605156] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.612121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.821438] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.827934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.834754] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.841227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.876933] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.907288] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.913763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.920611] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.927122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.958974] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.053163] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.059649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.066513] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.072970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.131834] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.141568] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.148060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.154905] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.161359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.198951] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.225240] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.231726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.238595] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.245086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.320964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.327889] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.334338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.341168] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.347622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.381532] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.395675] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.402141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.408965] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.415397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.423345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.615178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.627311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.638159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.646267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.655267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.664150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.673891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.996589] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.328429] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.479897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.678946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.805181] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.815367] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.844201] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.883391] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.891159] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.897370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.909982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.124141] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.130383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.140592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.219484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.225947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.237254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.583911] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.590181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.601596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.638275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.646211] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.652456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.672008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.701178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.719794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.756394] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.764082] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.770666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.808623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.823153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.839639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/19 14:23:45 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000001300), 0x0) 2018/04/19 14:23:45 executing program 5: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/19 14:23:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000780), 0x0, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) 2018/04/19 14:23:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2}, 0x10) 2018/04/19 14:23:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x40000004e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) 2018/04/19 14:23:46 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @loopback=0x7f000001}}}, 0x104) 2018/04/19 14:23:46 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x400000004e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000000040)=""/149, 0xfffffffffffffe70, 0x0, 0x0, 0xdaf0) 2018/04/19 14:23:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000040)="be38fc69faea5bd09bf0307006cefbafc01c3062dfedf949ad4e86bda4029155e2d6181bc9f0d25d4a23fed54bd250db05a0fbd78679ca006afa4ee44cb7b522c4a38231a9f99b3001e1d4857321a6a7c9e36ae424cc0d49fdb6c13c422fde782dd0c18a3a4018030b94ba6b7ff3f3192f8c563a1986d839c40052c8d3a78ae29126", 0x82, 0xc1, &(0x7f0000000100)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000500)="acbb915d6846975d5d248d4c727115f29ae03c05a1540f5303683cc3316fab70b8f72443207b3bc9d2b76a2124327a8dc22115702dfd81d9c5daf3734095c968bb4c931a63cd940101810cf243974b73d5c0d300e011c378c17bde5460ef55a7bcfe93f760a0a1928b8c0954a22b092351d191ed0effdcf4ac142f1fd6395e0e7303", 0x82, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/19 14:23:46 executing program 6: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mlock(&(0x7f0000007000/0x4000)=nil, 0x4000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/19 14:23:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000280)={[{@flush='flush', 0x2c}]}) open$dir(&(0x7f0000000340)='./file0/file0\x00', 0x40, 0x0) [ 67.613276] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 67.621111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/19 14:23:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) lstat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540)) [ 67.699669] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 67.707651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/19 14:23:46 executing program 7: r0 = open(&(0x7f0000000040)='..', 0x0, 0x0) fsync(r0) 2018/04/19 14:23:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) shutdown(r0, 0x0) [ 67.813170] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 67.820724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/19 14:23:46 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x600) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) [ 67.943210] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 67.950729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 68.017901] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.025439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 68.086641] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.094258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/19 14:23:47 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f0000004a40)=@generic, 0x80, &(0x7f0000006dc0), 0x0, &(0x7f0000006e00)=""/136, 0x88}}], 0x1, 0x0, 0x0) mlock(&(0x7f0000007000/0x4000)=nil, 0x4000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/19 14:23:47 executing program 5: r0 = socket$inet(0x2, 0x200000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000002000), 0xd5) 2018/04/19 14:23:47 executing program 7: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) 2018/04/19 14:23:47 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') 2018/04/19 14:23:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) shutdown(r0, 0x0) 2018/04/19 14:23:47 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f00000045c0)=@l2, 0x80, &(0x7f0000004940)=[{&(0x7f0000004880)=""/143, 0x8f}], 0x1, &(0x7f0000004980)=""/142, 0x8e}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/19 14:23:47 executing program 0: r0 = socket(0x2, 0x3, 0x40000000000000ff) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x44) 2018/04/19 14:23:47 executing program 6: r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000236fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) [ 68.134463] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.141986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/19 14:23:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180), 0x4) 2018/04/19 14:23:47 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r3 = dup3(r2, r1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x34123610) close(r0) 2018/04/19 14:23:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write(r1, &(0x7f0000000380)="0f", 0x1) r2 = dup3(r1, r0, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x1, [{}]}) 2018/04/19 14:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in6, 0x0, 0x1}}, 0xe8) 2018/04/19 14:23:47 executing program 1: clock_gettime(0xfffffffffffffffb, &(0x7f0000000280)) 2018/04/19 14:23:47 executing program 6: rt_sigaction(0x17, &(0x7f00000000c0), 0x0, 0x8, &(0x7f0000000100)) 2018/04/19 14:23:47 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @icmp=@address_reply={0x12}}}}}, 0x0) 2018/04/19 14:23:48 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="000100000008000066000000df020000ec00000001000000000000000000000000200000002000000001000000000000495fbe5a0000ffff53ef010001000000495fbe5a000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010400)="0000000000000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050166696c65320000000d0000001000050166696c65330000000e0000001000050166696c6530", 0x379, 0x48e0}, {&(0x7f0000012800)="a48100000a000000771bbe5a6a1bbe5a6a1bbe5a00000000000001000000000000000010", 0x24, 0xfc00}, {&(0x7f0000012c00)="a481000000000000081fbe5a081fbe5a081fbe5a0000000000000100000000000000001000000000000000000000000000000000000000000000000000000000", 0x40, 0x10400}, {&(0x7f0000013000)="a481000013000000601ebe5a9e1dbe5a9e1dbe5a0000000000000100000000000000001000000000d181d18ed0b7d0bad0b0d0bbd0bbd0b5d1800a0000000000", 0x40, 0x10c00}, {&(0x7f0000013400)="a481000000000000782bbe5a7120be5a7120be5a0000000000000100000000000000001000000000000000000000000000000000000000000000000000000000", 0x40, 0x11400}], 0x0, &(0x7f0000000080)={[{@nombcache='nombcache', 0x2c}, {@discard='discard', 0x2c}, {@jqfmt_vfsv0='jqfmt=vfsv0', 0x2c}, {@user_xattr='user_xattr', 0x2c}, {@abort='abort', 0x2c}]}) 2018/04/19 14:23:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) 2018/04/19 14:23:48 executing program 1: timer_create(0x0, &(0x7f0000000200)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000140), &(0x7f00000004c0)}}, &(0x7f00000008c0)) timer_getoverrun(0x0) 2018/04/19 14:23:48 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file2\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./bus\x00') fsync(r1) 2018/04/19 14:23:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r0, &(0x7f0000000640), 0x0, 0x0) 2018/04/19 14:23:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) read(r0, &(0x7f0000000000)=""/188, 0xbc) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="4b624f8ec76402101ecb464232", 0xd, 0x8084, &(0x7f00004d4000)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000f66f90)="fbf327899de7fe7e0c02fe5cbb35491715b7af550749e32dbeda8d7e3749bb6ac7383d2bfac27aa9c48c5d847fdc41ddc4b7c3add1701f2c", 0x38, 0x0, &(0x7f0000a6d000)={0x2, 0x0, @rand_addr}, 0x10) 2018/04/19 14:23:48 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f00000045c0)=@l2, 0x80, &(0x7f0000004940)=[{&(0x7f0000004880)=""/143, 0x8f}], 0x1, &(0x7f0000004980)=""/142, 0x8e}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/19 14:23:48 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendmsg$netlink(r1, &(0x7f0000009800)={&(0x7f0000000000)=@proc={0x10}, 0xc, &(0x7f0000003600), 0x0, &(0x7f0000009740)=[@rights={0x10, 0x1, 0x1}], 0x10}, 0x0) 2018/04/19 14:23:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 2018/04/19 14:23:48 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x4000) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f00000045c0)=@l2, 0x80, &(0x7f0000004940)=[{&(0x7f0000004880)=""/143, 0x8f}], 0x1, &(0x7f0000004980)=""/142, 0x8e}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/19 14:23:48 executing program 1: unshare(0x400) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00001be000), 0x4) 2018/04/19 14:23:48 executing program 7: munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 2018/04/19 14:23:48 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f0000005000)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='./file0/file0\x00', r0, &(0x7f0000012ff8)='./file0\x00') 2018/04/19 14:23:48 executing program 2: symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') 2018/04/19 14:23:48 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendmsg$netlink(r1, &(0x7f0000009800)={&(0x7f0000000000)=@proc={0x10}, 0xc, &(0x7f0000003600), 0x0, &(0x7f0000009740)=[@rights={0x10, 0x1, 0x1}], 0x10}, 0x0) 2018/04/19 14:23:48 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000100)=0x1b4) [ 70.290301] ================================================================== [ 70.297716] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 70.304969] CPU: 1 PID: 5894 Comm: syz-executor3 Not tainted 4.16.0+ #84 [ 70.311781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.321112] Call Trace: [ 70.323692] dump_stack+0x185/0x1d0 [ 70.327301] ? csum_partial_copy_to_user+0x450/0x500 [ 70.332381] kmsan_report+0x142/0x240 [ 70.336159] __msan_warning_32+0x6c/0xb0 [ 70.340203] csum_partial_copy_to_user+0x450/0x500 [ 70.345115] csum_and_copy_to_iter+0x3dc/0x2140 [ 70.349768] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.354594] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.359249] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 70.364337] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 70.369688] udp_recvmsg+0x99c/0x1d90 [ 70.373473] ? udp_skb_dtor_locked+0x770/0x770 [ 70.378042] inet_recvmsg+0x4c2/0x5f0 [ 70.381846] ? inet_sendpage+0x8c0/0x8c0 [ 70.385898] sock_read_iter+0x405/0x480 [ 70.389857] ? kernel_sock_ip_overhead+0x350/0x350 [ 70.394771] __vfs_read+0x6fb/0x8e0 [ 70.398383] vfs_read+0x36c/0x6c0 [ 70.401821] SYSC_read+0x172/0x360 [ 70.405366] SyS_read+0x55/0x80 [ 70.408636] do_syscall_64+0x309/0x430 [ 70.412503] ? vfs_write+0x8d0/0x8d0 [ 70.416196] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.421364] RIP: 0033:0x455329 [ 70.424533] RSP: 002b:00007fc0d61f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.432223] RAX: ffffffffffffffda RBX: 00007fc0d61fa6d4 RCX: 0000000000455329 [ 70.439470] RDX: 00000000000000bc RSI: 0000000020000000 RDI: 0000000000000013 [ 70.446722] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.454012] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.461269] R13: 0000000000000490 R14: 00000000006f9e20 R15: 0000000000000000 [ 70.468516] [ 70.470119] Uninit was created at: [ 70.473641] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 70.478643] kmsan_alloc_page+0x82/0xe0 [ 70.482638] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 70.487419] alloc_pages_current+0x6b5/0x970 [ 70.491827] skb_page_frag_refill+0x3ba/0x5e0 [ 70.496320] sk_page_frag_refill+0xa4/0x340 [ 70.500733] __ip_append_data+0x107e/0x3d10 [ 70.505081] ip_append_data+0x2fb/0x440 [ 70.509102] udp_sendmsg+0x746/0x3180 [ 70.513045] inet_sendmsg+0x48d/0x740 [ 70.516888] SYSC_sendto+0x6c3/0x7e0 [ 70.520697] SyS_sendto+0x8a/0xb0 [ 70.524148] do_syscall_64+0x309/0x430 [ 70.528025] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.533196] ================================================================== [ 70.540532] Disabling lock debugging due to kernel taint [ 70.545971] Kernel panic - not syncing: panic_on_warn set ... [ 70.545971] [ 70.553314] CPU: 1 PID: 5894 Comm: syz-executor3 Tainted: G B 4.16.0+ #84 [ 70.561426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.570767] Call Trace: [ 70.573340] dump_stack+0x185/0x1d0 [ 70.576966] panic+0x39d/0x940 [ 70.580154] ? csum_partial_copy_to_user+0x450/0x500 [ 70.585236] kmsan_report+0x238/0x240 [ 70.589024] __msan_warning_32+0x6c/0xb0 [ 70.593081] csum_partial_copy_to_user+0x450/0x500 [ 70.597993] csum_and_copy_to_iter+0x3dc/0x2140 [ 70.602645] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.607464] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.612123] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 70.617223] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 70.622572] udp_recvmsg+0x99c/0x1d90 [ 70.626359] ? udp_skb_dtor_locked+0x770/0x770 [ 70.631439] inet_recvmsg+0x4c2/0x5f0 [ 70.635238] ? inet_sendpage+0x8c0/0x8c0 [ 70.639275] sock_read_iter+0x405/0x480 [ 70.643231] ? kernel_sock_ip_overhead+0x350/0x350 [ 70.648140] __vfs_read+0x6fb/0x8e0 [ 70.651750] vfs_read+0x36c/0x6c0 [ 70.655187] SYSC_read+0x172/0x360 [ 70.658704] SyS_read+0x55/0x80 [ 70.661963] do_syscall_64+0x309/0x430 [ 70.665829] ? vfs_write+0x8d0/0x8d0 [ 70.669523] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.674686] RIP: 0033:0x455329 [ 70.677852] RSP: 002b:00007fc0d61f9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.685538] RAX: ffffffffffffffda RBX: 00007fc0d61fa6d4 RCX: 0000000000455329 [ 70.692791] RDX: 00000000000000bc RSI: 0000000020000000 RDI: 0000000000000013 [ 70.700043] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.707295] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.714542] R13: 0000000000000490 R14: 00000000006f9e20 R15: 0000000000000000 [ 70.722238] Dumping ftrace buffer: [ 70.725759] (ftrace buffer empty) [ 70.729441] Kernel Offset: disabled [ 70.733042] Rebooting in 86400 seconds..