[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 28.446846] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 29.863369] random: sshd: uninitialized urandom read (32 bytes read) [ 30.137390] random: sshd: uninitialized urandom read (32 bytes read) [ 31.400073] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. [ 36.955660] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/13 11:47:36 fuzzer started 2018/05/13 11:47:36 dialing manager at 10.128.0.26:32873 [ 59.305419] can: request_module (can-proto-0) failed. [ 59.316343] can: request_module (can-proto-0) failed. 2018/05/13 11:48:00 kcov=true, comps=false 2018/05/13 11:48:04 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@getspdinfo={0x14, 0x25, 0x301}, 0x14}, 0x1}, 0x0) 2018/05/13 11:48:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x0, 0xfff, 0x0, {0x0, 0x989680}}) 2018/05/13 11:48:04 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), 0xb) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4000000007}, 0x1c) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/05/13 11:48:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d08000)='/dev/ptmx\x00', 0x105, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d4800008884134508d746c4ad1921a782f9639b020800a70814", 0x35}], 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x4bc4, 0x0, 0x401}) 2018/05/13 11:48:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x200002, 0xa}) ioctl$LOOP_SET_STATUS(r0, 0x1276, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "390cdd0a55a565d8f43cb620010000009d00000023e0b7d65f90b0e6330ee739b319d8f6aa6bd58d1443434482e85040cac4ee588881157d335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) socket$key(0xf, 0x3, 0x2) 2018/05/13 11:48:04 executing program 4: clone(0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 2018/05/13 11:48:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x2) r2 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r2, 0x0) ioctl(r1, 0x440000000000127f, &(0x7f0000000040)) 2018/05/13 11:48:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r1, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3d0f5f569629e1691681449dc33e4b96e7d71acec3270c46c74442fbb78a39abcddd7c12b184b60f369e4cbf65bddc6e709130c8664607bf74f8e51b570d3a12155be268339d9e2012ee5e7f8ac4696119e847f2fc96f6006cbda28c502d7ee34fcabbbb5c303f7cd3292aabb74a7bff1f76fce1b1fe13482fda1408973de9868e96c630ff08bd68c3a98d07ce0662997755f039a7ee45bdae739d3f3b1cbd5ecfa8825b540b6417c730ec4a8204ce2ba6ebd0c9452b0cc1273bbd591314867c54abafc48697fed81bfeec349729da076218770bb7ba8a2aedca9000638018a28abcaa3dc6642db8097039f0f9f6fdd1ab481507e5796d65b2a81bd38b11c518feed59fce3147bb2bd31518c6032745185a44a98ec2efe3f8eb27709c2e70cfef9a971f97159e74868d6a55e1a8e6e7b500d7c116f02594a58e3dceb86175af56c7502287ddab530acb67386725e0d6b2e317cb0b87affd30d4ff210024287c19d27033b7a11bf18d1ce1e23f618476b15c3a5574fdc0f238f2ec1c3cd2784fd3d8235278bd957c929021d97da58459f921a47002a4841ff77262b7150c5fbda7f8bf6801c22adfb0bc96f7a2d8527aaf00ae5b663eb0f69914dc722b2d7b1e4861ed66168b7c6afa56fff36de7c842f3d24ecc65d25f24917f0867f6a2fb7c5a02335ff1870d35c3aba978208c118fb5ed56f102cf9bfde60786175bc25ebba02aaa4cbbdc95afa96c3449e53c5ea7e92bdabc8ae8b28370cdefc009698f8f870da37e1b188a5439428b619618179900e03df2d5926bd0a69fe94b5553ce84323a03b371d35d4984daa8e4f52cbc75d05dbd12d3bdcc5125ea53559ae82593a6a8d9812ea99d4166451edc55e5dd97f98b7e5c6527658765d14c9c5be3fc4153881d666dbf5eb45c1cbde2781a985f59e7e5aab7d9398dcc21e1d7495047a5afb84727aadc86854edd5a5a645ca3715b2c78ef32702231aa8be45cf97ac787765bbb631f6a357d292bbe97e7d3ec6d15b82f0985f7c0fe679b9788674b80312b5f365dbcf1a8eb5e295084485dcc92f2b905cdded6e2e81cfc7e9d29ec61fd893d120c31b9101770f4cb2e38a8a518295d373f9e6ba8a7226542c67a2ea423f1a32722260ad533435f903933a70906b10e7e5efac4ba3830e242919997a34044cb831a59186eeb68a93ff9eac431e938b48b810a08aab9730597e196127e4b64a6fd8b431a79f8253b031a59c22e", 0x437}], 0x1}}], 0x1, 0x20000094) dup2(r0, r1) [ 66.454153] IPVS: ftp: loaded support on port[0] = 21 [ 66.461819] IPVS: ftp: loaded support on port[0] = 21 [ 66.468184] IPVS: ftp: loaded support on port[0] = 21 [ 66.475990] IPVS: ftp: loaded support on port[0] = 21 [ 66.492963] IPVS: ftp: loaded support on port[0] = 21 [ 66.495596] IPVS: ftp: loaded support on port[0] = 21 [ 66.524507] IPVS: ftp: loaded support on port[0] = 21 [ 66.525444] IPVS: ftp: loaded support on port[0] = 21 [ 68.187514] ip (4656) used greatest stack depth: 54152 bytes left [ 68.861770] ip (4710) used greatest stack depth: 54088 bytes left [ 69.769746] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.776220] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.810210] device bridge_slave_0 entered promiscuous mode [ 69.825701] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.832171] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.844516] device bridge_slave_0 entered promiscuous mode [ 69.874331] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.880785] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.890943] device bridge_slave_0 entered promiscuous mode [ 69.918978] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.925463] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.952483] device bridge_slave_0 entered promiscuous mode [ 69.964895] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.971361] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.989129] device bridge_slave_0 entered promiscuous mode [ 70.008944] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.015436] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.040933] device bridge_slave_0 entered promiscuous mode [ 70.058424] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.064873] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.078320] device bridge_slave_0 entered promiscuous mode [ 70.092409] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.098833] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.108973] device bridge_slave_1 entered promiscuous mode [ 70.121434] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.127933] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.147344] device bridge_slave_0 entered promiscuous mode [ 70.165813] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.172261] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.188457] device bridge_slave_1 entered promiscuous mode [ 70.200628] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.207099] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.233190] device bridge_slave_1 entered promiscuous mode [ 70.241743] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.248203] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.262449] device bridge_slave_1 entered promiscuous mode [ 70.280093] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.286529] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.300501] device bridge_slave_1 entered promiscuous mode [ 70.313907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.321349] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.327818] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.356163] device bridge_slave_1 entered promiscuous mode [ 70.373015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.382435] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.388918] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.407771] device bridge_slave_1 entered promiscuous mode [ 70.425310] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.431791] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.455085] device bridge_slave_1 entered promiscuous mode [ 70.472980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.483484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.492152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.499809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.508538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.547440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.555230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.670190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.681900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.698220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.730183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.743510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.772837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.914144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.077218] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.137084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.286900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.313819] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.338151] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.378737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.393131] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.403696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.419310] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.529946] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.542291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.555136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.575510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.584320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.610296] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.620551] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.630505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.676439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.687968] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.891125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.910994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.918014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.940427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.950303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.975941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.982872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.064904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.081412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.115746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.122754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.138112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.145639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.213263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.220250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.314762] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.340891] team0: Port device team_slave_0 added [ 72.407778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.414840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.482713] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.513793] team0: Port device team_slave_0 added [ 72.544841] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.561980] team0: Port device team_slave_1 added [ 72.608887] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.632638] team0: Port device team_slave_0 added [ 72.641970] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.660910] team0: Port device team_slave_0 added [ 72.681805] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.698702] team0: Port device team_slave_1 added [ 72.722896] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.736688] team0: Port device team_slave_0 added [ 72.769307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.793233] team0: Port device team_slave_0 added [ 72.815689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.825938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.843479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.871567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.883365] team0: Port device team_slave_1 added [ 72.910978] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.919723] team0: Port device team_slave_1 added [ 72.932602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.951294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.966813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.981239] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.991484] team0: Port device team_slave_0 added [ 73.015547] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.042976] team0: Port device team_slave_1 added [ 73.062013] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.072816] team0: Port device team_slave_1 added [ 73.086799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.094017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.106978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.123309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.134210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.159796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.196150] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.207385] team0: Port device team_slave_1 added [ 73.223496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.232713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.241780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.254350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.267154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.291640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.309929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.331636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.341523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.354520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.363234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.371266] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.379715] team0: Port device team_slave_0 added [ 73.389741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.406825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.416958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.428999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.456904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.474058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.494419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.502967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.510712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.519304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.529274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.541176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.554252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.561783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.583382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.591644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.616585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.631577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.647292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.656193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.664446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.672996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.697931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.706937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.715441] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.727807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.736747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.744269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.781850] team0: Port device team_slave_1 added [ 73.801171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.808924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.832226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.872114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.897352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.915363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.929889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.937825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.945952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.953704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.961833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.969578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.977516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.006437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.019133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.028300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.036494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.043724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.058731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.079848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.100617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.122967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.131958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.140920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.149467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.159583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.168906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.201394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.221324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.243927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.268969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.280901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.295822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.308124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.330359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.348878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.378789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.429595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.436612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.449862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.644232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.651676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.665160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.879304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.886806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.909985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.246173] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.252645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.259437] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.265856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.303120] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.310727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.341511] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.347948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.354687] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.361098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.375930] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.383906] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.390309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.397108] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.403508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.423289] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.446988] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.453418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.460206] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.466612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.485720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.518568] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.525018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.531817] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.538234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.615126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.634571] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.641090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.647825] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.654264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.689184] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.705482] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.711910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.718661] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.725085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.768442] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.328697] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.335178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.341992] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.348428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.387877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.398493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.406833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.414954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.423662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.432307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.440917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.448582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.496372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.720808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.752309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.961683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.027685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.060467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.161907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.271694] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.494809] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.584752] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.656827] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.667943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.779640] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.814579] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.022912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.047695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.054096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.064258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.330811] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.337457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.351914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.390556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.396919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.413973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.458284] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.464705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.481263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.601691] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.622902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.629271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.639780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.683176] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.711445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.727802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.891920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.898253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.911406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.980498] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.032504] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.177568] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.352987] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.443291] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.481931] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.491150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.501310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.539820] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.676531] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.294189] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/13 11:48:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x200002, 0xa}) ioctl$LOOP_SET_STATUS(r0, 0x1276, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "390cdd0a55a565d8f43cb620010000009d00000023e0b7d65f90b0e6330ee739b319d8f6aa6bd58d1443434482e85040cac4ee588881157d335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) socket$key(0xf, 0x3, 0x2) 2018/05/13 11:48:31 executing program 5: perf_event_open(&(0x7f0000000840)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') lseek(r0, 0x0, 0x0) 2018/05/13 11:48:31 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x10b980) read(r0, &(0x7f0000c7c000)=""/136, 0x88) 2018/05/13 11:48:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2018/05/13 11:48:31 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) dup3(r2, r1, 0x0) 2018/05/13 11:48:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x200002, 0xa}) ioctl$LOOP_SET_STATUS(r0, 0x1276, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "390cdd0a55a565d8f43cb620010000009d00000023e0b7d65f90b0e6330ee739b319d8f6aa6bd58d1443434482e85040cac4ee588881157d335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) socket$key(0xf, 0x3, 0x2) 2018/05/13 11:48:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/13 11:48:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") seccomp(0x1, 0x0, &(0x7f0000016000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) [ 92.792611] audit: type=1326 audit(1526212111.791:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6595 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0xffff0000 2018/05/13 11:48:31 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 2018/05/13 11:48:31 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20000000000017, &(0x7f0000f78000)=0x400, 0x102fc) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000), 0x4) 2018/05/13 11:48:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") seccomp(0x1, 0x0, &(0x7f0000016000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) pwritev(0xffffffffffffffff, &(0x7f0000001340), 0x0, 0x0) 2018/05/13 11:48:31 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) dup3(r2, r1, 0x0) 2018/05/13 11:48:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) dup3(r2, r1, 0x0) [ 92.975869] audit: type=1326 audit(1526212111.974:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6614 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0xffff0000 2018/05/13 11:48:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x400000004e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 2018/05/13 11:48:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) dup3(r2, r1, 0x0) 2018/05/13 11:48:32 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x207fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) 2018/05/13 11:48:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) dup3(r2, r1, 0x0) 2018/05/13 11:48:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x200002, 0xa}) ioctl$LOOP_SET_STATUS(r0, 0x1276, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "390cdd0a55a565d8f43cb620010000009d00000023e0b7d65f90b0e6330ee739b319d8f6aa6bd58d1443434482e85040cac4ee588881157d335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) socket$key(0xf, 0x3, 0x2) 2018/05/13 11:48:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x40000004e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002640)='[', 0x1}], 0x1, &(0x7f0000003640)}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) r1 = dup(r0) clock_gettime(0x0, &(0x7f0000003e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003f00)=[{{&(0x7f0000002a40)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002ac0)=""/114, 0x72}], 0x1, &(0x7f0000000080)=""/181, 0xb5}}, {{0x0, 0x0, &(0x7f0000002e40), 0x0, &(0x7f0000002e80)=""/4096, 0x1000}}], 0x2, 0x160, &(0x7f0000000280)={0x0, r2+10000000}) 2018/05/13 11:48:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="10", 0x1}], 0x1, 0x0) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00io \x00memor\x00 \x00mEmory \x00pids '], 0x1a) 2018/05/13 11:48:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="10", 0x1}], 0x1, 0x0) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00i'], 0x2) [ 93.885277] ================================================================== [ 93.892704] BUG: KMSAN: uninit-value in __probe_kernel_read+0x224/0x280 [ 93.899445] CPU: 1 PID: 6654 Comm: syz-executor1 Not tainted 4.17.0-rc3+ #90 [ 93.906614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.915949] Call Trace: [ 93.918524] dump_stack+0x185/0x1d0 [ 93.922139] ? __probe_kernel_read+0x224/0x280 [ 93.926706] kmsan_report+0x142/0x240 [ 93.930499] __msan_warning_32+0x6c/0xb0 [ 93.934544] __probe_kernel_read+0x224/0x280 [ 93.938939] ? kmsan_copy_to_user+0x141/0x160 [ 93.943420] ? kmsan_copy_to_user+0x141/0x160 [ 93.947902] is_valid_bugaddr+0xb6/0x1a0 [ 93.951946] ? report_bug+0x4b/0x880 [ 93.955645] ? kmsan_copy_to_user+0x141/0x160 [ 93.960122] report_bug+0x6f/0x880 [ 93.963643] ? __msan_poison_alloca+0x15c/0x1d0 [ 93.968295] ? do_invalid_op+0x46/0x50 [ 93.972171] ? kmsan_copy_to_user+0x141/0x160 [ 93.976651] ? do_error_trap+0xac/0x600 [ 93.980611] ? do_invalid_op+0x46/0x50 [ 93.984481] ? kmsan_copy_to_user+0x141/0x160 [ 93.988963] do_error_trap+0x1aa/0x600 [ 93.992833] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 93.998271] ? futex_wait_queue_me+0x681/0x710 [ 94.002846] do_invalid_op+0x46/0x50 [ 94.006545] invalid_op+0x14/0x20 [ 94.009988] RIP: 0010:kmsan_copy_to_user+0x141/0x160 [ 94.015072] RSP: 0018:ffff88014302fa20 EFLAGS: 00010206 [ 94.020421] RAX: ffff880143333a80 RBX: ffff88014302fa78 RCX: 0000000000000028 [ 94.027677] RDX: 00007ffffffff000 RSI: ffff88014302fa78 RDI: 6d456d00206ff62c [ 94.034928] RBP: ffff88014302fa68 R08: 0000000001080020 R09: ffff88013ffbfa78 [ 94.042179] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000028 [ 94.049430] R13: 6d456d00206ff62c R14: 0000000000000000 R15: 0000000000000000 [ 94.056698] inet_gifconf+0x345/0x500 [ 94.060486] ? inet_netconf_fill_devconf+0xc30/0xc30 [ 94.065573] dev_ifconf+0x2b3/0x500 [ 94.069187] sock_do_ioctl+0x39b/0x6b0 [ 94.073060] sock_ioctl+0x400/0xca0 [ 94.076670] ? __x64_sys_ioctl+0x280/0x320 [ 94.080891] ? sock_poll+0x370/0x370 [ 94.084588] do_vfs_ioctl+0xaf0/0x2440 [ 94.088458] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 94.093802] ? __fget_light+0x6b9/0x710 [ 94.097762] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 94.103110] __x64_sys_ioctl+0x280/0x320 [ 94.107156] do_syscall_64+0x154/0x220 [ 94.111037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.116211] RIP: 0033:0x455979 [ 94.119380] RSP: 002b:00007f6be7f26c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.127071] RAX: ffffffffffffffda RBX: 00007f6be7f276d4 RCX: 0000000000455979 [ 94.134327] RDX: 0000000020000000 RSI: 0000000000008912 RDI: 0000000000000016 [ 94.141577] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 94.148829] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 94.156082] R13: 000000000000018f R14: 00000000006f6608 R15: 0000000000000000 [ 94.163339] [ 94.164948] Local variable description: ----key.i.i@from_kgid [ 94.170821] Variable was created at: [ 94.174520] from_kgid+0x52/0x410 [ 94.177960] path_openat+0x2503/0x6450 [ 94.181829] ================================================================== [ 94.189163] Disabling lock debugging due to kernel taint [ 94.194592] Kernel panic - not syncing: panic_on_warn set ... [ 94.194592] [ 94.201941] CPU: 1 PID: 6654 Comm: syz-executor1 Tainted: G B 4.17.0-rc3+ #90 [ 94.210495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.219831] Call Trace: [ 94.222413] dump_stack+0x185/0x1d0 [ 94.226032] panic+0x39d/0x940 [ 94.229225] ? __probe_kernel_read+0x224/0x280 [ 94.233793] kmsan_report+0x238/0x240 [ 94.237579] __msan_warning_32+0x6c/0xb0 [ 94.241625] __probe_kernel_read+0x224/0x280 [ 94.246025] ? kmsan_copy_to_user+0x141/0x160 [ 94.250508] ? kmsan_copy_to_user+0x141/0x160 [ 94.254990] is_valid_bugaddr+0xb6/0x1a0 [ 94.259042] ? report_bug+0x4b/0x880 [ 94.262741] ? kmsan_copy_to_user+0x141/0x160 [ 94.267219] report_bug+0x6f/0x880 [ 94.270741] ? __msan_poison_alloca+0x15c/0x1d0 [ 94.275395] ? do_invalid_op+0x46/0x50 [ 94.279267] ? kmsan_copy_to_user+0x141/0x160 [ 94.283747] ? do_error_trap+0xac/0x600 [ 94.287703] ? do_invalid_op+0x46/0x50 [ 94.291577] ? kmsan_copy_to_user+0x141/0x160 [ 94.296058] do_error_trap+0x1aa/0x600 [ 94.300020] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 94.305461] ? futex_wait_queue_me+0x681/0x710 [ 94.310038] do_invalid_op+0x46/0x50 [ 94.313740] invalid_op+0x14/0x20 [ 94.317179] RIP: 0010:kmsan_copy_to_user+0x141/0x160 [ 94.322259] RSP: 0018:ffff88014302fa20 EFLAGS: 00010206 [ 94.327602] RAX: ffff880143333a80 RBX: ffff88014302fa78 RCX: 0000000000000028 [ 94.334857] RDX: 00007ffffffff000 RSI: ffff88014302fa78 RDI: 6d456d00206ff62c [ 94.342121] RBP: ffff88014302fa68 R08: 0000000001080020 R09: ffff88013ffbfa78 [ 94.349372] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000028 [ 94.356622] R13: 6d456d00206ff62c R14: 0000000000000000 R15: 0000000000000000 [ 94.363886] inet_gifconf+0x345/0x500 [ 94.367672] ? inet_netconf_fill_devconf+0xc30/0xc30 [ 94.372758] dev_ifconf+0x2b3/0x500 [ 94.376384] sock_do_ioctl+0x39b/0x6b0 [ 94.380256] sock_ioctl+0x400/0xca0 [ 94.383866] ? __x64_sys_ioctl+0x280/0x320 [ 94.388085] ? sock_poll+0x370/0x370 [ 94.391782] do_vfs_ioctl+0xaf0/0x2440 [ 94.395656] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 94.401000] ? __fget_light+0x6b9/0x710 [ 94.404967] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 94.410318] __x64_sys_ioctl+0x280/0x320 [ 94.414364] do_syscall_64+0x154/0x220 [ 94.418240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.423764] RIP: 0033:0x455979 [ 94.426937] RSP: 002b:00007f6be7f26c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.434630] RAX: ffffffffffffffda RBX: 00007f6be7f276d4 RCX: 0000000000455979 [ 94.441882] RDX: 0000000020000000 RSI: 0000000000008912 RDI: 0000000000000016 [ 94.449135] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 94.456387] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 94.463640] R13: 000000000000018f R14: 00000000006f6608 R15: 0000000000000000 [ 94.471335] Dumping ftrace buffer: [ 94.474852] (ftrace buffer empty) [ 94.478548] Kernel Offset: disabled [ 94.482150] Rebooting in 86400 seconds..