[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.646470] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.826099] random: sshd: uninitialized urandom read (32 bytes read) [ 34.326918] random: sshd: uninitialized urandom read (32 bytes read) [ 35.607423] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. [ 41.143189] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/17 02:12:11 fuzzer started 2018/05/17 02:12:11 dialing manager at 10.128.0.26:41335 [ 63.195741] can: request_module (can-proto-0) failed. [ 63.206483] can: request_module (can-proto-0) failed. 2018/05/17 02:12:34 kcov=true, comps=false 2018/05/17 02:12:38 executing program 0: 2018/05/17 02:12:38 executing program 1: 2018/05/17 02:12:38 executing program 7: 2018/05/17 02:12:38 executing program 2: 2018/05/17 02:12:38 executing program 3: 2018/05/17 02:12:38 executing program 4: 2018/05/17 02:12:38 executing program 5: 2018/05/17 02:12:38 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) dup(0xffffffffffffffff) [ 69.568947] IPVS: ftp: loaded support on port[0] = 21 [ 69.692951] IPVS: ftp: loaded support on port[0] = 21 [ 69.715634] IPVS: ftp: loaded support on port[0] = 21 [ 69.728896] IPVS: ftp: loaded support on port[0] = 21 [ 69.733845] IPVS: ftp: loaded support on port[0] = 21 [ 69.747805] IPVS: ftp: loaded support on port[0] = 21 [ 69.765285] IPVS: ftp: loaded support on port[0] = 21 [ 69.772388] IPVS: ftp: loaded support on port[0] = 21 [ 71.424125] ip (4668) used greatest stack depth: 54552 bytes left [ 72.640501] ip (4770) used greatest stack depth: 54344 bytes left [ 72.691153] ip (4776) used greatest stack depth: 53800 bytes left [ 72.774173] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.780658] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.808485] device bridge_slave_0 entered promiscuous mode [ 73.024278] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.030770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.069994] device bridge_slave_0 entered promiscuous mode [ 73.081856] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.088303] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.096402] device bridge_slave_1 entered promiscuous mode [ 73.139638] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.146134] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.159755] device bridge_slave_0 entered promiscuous mode [ 73.174849] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.181281] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.208510] device bridge_slave_0 entered promiscuous mode [ 73.222865] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.229369] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.248902] device bridge_slave_0 entered promiscuous mode [ 73.266553] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.273026] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.286319] device bridge_slave_0 entered promiscuous mode [ 73.313118] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.319652] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.327945] device bridge_slave_0 entered promiscuous mode [ 73.337618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.345425] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.351854] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.362370] device bridge_slave_1 entered promiscuous mode [ 73.370014] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.376481] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.404191] device bridge_slave_0 entered promiscuous mode [ 73.426310] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.432775] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.449954] device bridge_slave_1 entered promiscuous mode [ 73.463730] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.470170] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.481313] device bridge_slave_1 entered promiscuous mode [ 73.505793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.513754] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.520474] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.545109] device bridge_slave_1 entered promiscuous mode [ 73.560837] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.567298] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.593571] device bridge_slave_1 entered promiscuous mode [ 73.610073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.617905] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.624384] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.632557] device bridge_slave_1 entered promiscuous mode [ 73.647502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.681893] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.688385] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.715992] device bridge_slave_1 entered promiscuous mode [ 73.739771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.747303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.768625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.786197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.831577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.849621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.924388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.942724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.950270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.976848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.029581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.109522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.171395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.310889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.457104] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.514831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.524301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.543683] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.581118] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.590876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.606930] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.679805] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.691435] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.772357] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.807922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.822544] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.841562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.852233] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.880311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.911827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.919218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.985995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.993093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.026733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.052214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.059205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.070531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.080709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.110547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.117554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.147196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.155598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.188744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.195790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.229078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.240347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.247332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.262808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.294619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.302327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.323213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.330238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.354992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.362143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.404591] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.432671] team0: Port device team_slave_0 added [ 75.444981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.455616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.530224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.554829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.593934] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.627422] team0: Port device team_slave_1 added [ 75.824665] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.844396] team0: Port device team_slave_0 added [ 75.885149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.892224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.906473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.959119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.981380] team0: Port device team_slave_0 added [ 76.002446] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.021865] team0: Port device team_slave_0 added [ 76.045270] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.061242] team0: Port device team_slave_0 added [ 76.083389] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.101650] team0: Port device team_slave_1 added [ 76.120142] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.128739] team0: Port device team_slave_1 added [ 76.137384] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.154346] team0: Port device team_slave_0 added [ 76.168362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.177392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.186309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.205115] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.213184] team0: Port device team_slave_0 added [ 76.230348] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.246212] team0: Port device team_slave_1 added [ 76.267607] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.284116] team0: Port device team_slave_0 added [ 76.305512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.312910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.324791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.352514] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.365663] team0: Port device team_slave_1 added [ 76.371425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.378503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.390432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.414734] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.431213] team0: Port device team_slave_1 added [ 76.448916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.456727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.473481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.501299] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.509913] team0: Port device team_slave_1 added [ 76.522308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.532741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.547903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.581254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.588407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.606810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.626622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.635815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.642902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.652141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.660866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.670132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.679850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.696510] team0: Port device team_slave_1 added [ 76.702722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.724447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.738532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.761878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.770505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.777455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.799911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.815322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.825441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.841738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.853792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.861747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.870416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.882215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.891315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.911475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.924462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.932121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.942676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.952171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.001468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.032395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.066100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.078563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.088370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.096134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.103855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.112935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.128839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.142610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.151606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.165201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.174996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.202735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.217309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.238660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.259838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.269786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.277620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.291009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.301000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.322148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.346391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.367988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.383970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.400300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.408543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.418634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.434781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.464546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.497428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.524221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.550627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.564804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.577124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.584602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.592906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.621745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.632233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.643544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.654405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.688680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.724581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.742975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.752081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.772067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.797734] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.814583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.823686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.175719] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.182210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.189064] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.195739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.209727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.216368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.528975] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.535435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.542241] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.548686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.592636] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.643902] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.650375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.657202] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.663628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.749921] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.970994] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.977465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.984262] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.990685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.004261] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.014973] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.021421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.028236] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.034665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.050462] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.066657] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.073091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.079855] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.086355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.118851] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.132917] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.139322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.146071] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.152468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.173239] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.188947] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.195394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.202198] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.208617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.247521] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.267142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.282936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.315576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.340422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.362743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.374917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.388917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.731079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.899311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.983734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.079529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.145135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.554117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.569443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.664704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.693671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.736583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.786392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.818526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.908904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.327340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.335756] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.342568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.353560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.437671] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.444127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.457308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.504829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.512674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.531840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.575951] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.604349] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.611960] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.618194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.631858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.708885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.715194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.728934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.135605] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.216741] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.236371] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.245483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.258715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.318264] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.351204] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.357919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.367847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.427160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.434705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.448768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.509450] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.535864] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.046386] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.138420] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.165393] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/17 02:13:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x18, 0x5, 0x0, 0x0, {0x1}, [@generic='\\']}, 0x18}, 0x1}, 0x0) 2018/05/17 02:13:05 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x1}}) 2018/05/17 02:13:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x4002, 0x0) 2018/05/17 02:13:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x82) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 2018/05/17 02:13:05 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x4, 0x7699fcec, 0xff, 0xde, 0x7ff}, &(0x7f0000000180)=0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\'@\x00') 2018/05/17 02:13:05 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x80e85411) 2018/05/17 02:13:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) 2018/05/17 02:13:05 executing program 5: semtimedop(0x0, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 95.598163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/17 02:13:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0'}, 0x4) 2018/05/17 02:13:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/17 02:13:05 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0'}, 0x4) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r2, &(0x7f00000000c0)=""/196, 0xc4, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) 2018/05/17 02:13:05 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 2018/05/17 02:13:05 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x6, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x104) 2018/05/17 02:13:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") flistxattr(r0, &(0x7f0000000100)=""/87, 0x9) 2018/05/17 02:13:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f00000008c0)=@in={0x0, 0x0, @multicast1}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=""/252, 0xfc}}], 0x1, 0x10102, &(0x7f0000000c80)) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f"], 0x1) 2018/05/17 02:13:05 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x3, 0x0, 0x1000}], 0x1) 2018/05/17 02:13:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/05/17 02:13:06 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x20000000) 2018/05/17 02:13:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f0000000000)) 2018/05/17 02:13:06 executing program 6: r0 = socket$inet(0x2, 0x3, 0x2) io_setup(0xc92, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)}]) 2018/05/17 02:13:06 executing program 3: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/05/17 02:13:06 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0'}, 0x4) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r2, &(0x7f00000000c0)=""/196, 0xc4, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) 2018/05/17 02:13:06 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2000000002, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) mmap(&(0x7f000050c000/0x4000)=nil, 0x4000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 2018/05/17 02:13:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f00000008c0)=@in={0x0, 0x0, @multicast1}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=""/252, 0xfc}}], 0x1, 0x10102, &(0x7f0000000c80)) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f"], 0x1) 2018/05/17 02:13:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0'}, 0x4) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r2, &(0x7f00000000c0)=""/196, 0xc4, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) 2018/05/17 02:13:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000bc0)=0x7f) 2018/05/17 02:13:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)={[0x30]}, 0x1) 2018/05/17 02:13:06 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 2018/05/17 02:13:06 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") semget(0xffffffffffffffff, 0xf0cb239183f4c4c5, 0x200) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0x9, 0x2, 0x0, 0x60000000000000, 0x0, 0x2, 0x6, 0x0, 0x80}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0'}, 0x4) sendfile(r1, r1, &(0x7f0000000240), 0x20000102000007) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x4) 2018/05/17 02:13:06 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0'}, 0x4) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r2, &(0x7f00000000c0)=""/196, 0xc4, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) [ 97.233537] ================================================================== [ 97.240942] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e3/0x600 [ 97.247341] CPU: 0 PID: 6683 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #96 [ 97.254516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.263853] Call Trace: [ 97.266433] dump_stack+0x185/0x1d0 [ 97.270052] ? netlink_rcv_skb+0x3e3/0x600 [ 97.274295] kmsan_report+0x142/0x240 [ 97.278114] __msan_warning_32+0x6c/0xb0 [ 97.282166] netlink_rcv_skb+0x3e3/0x600 [ 97.286313] ? rtnetlink_bind+0x120/0x120 [ 97.290463] rtnetlink_rcv+0x50/0x60 [ 97.294162] netlink_unicast+0x166b/0x1740 [ 97.298393] ? rtnetlink_net_exit+0xa0/0xa0 [ 97.302700] netlink_sendmsg+0x1072/0x1370 [ 97.306922] kernel_sendmsg+0x228/0x2d0 [ 97.310882] ? netlink_getsockopt+0xc80/0xc80 [ 97.315362] sock_no_sendpage+0x1c8/0x250 [ 97.319503] ? sock_no_mmap+0x30/0x30 [ 97.323292] sock_sendpage+0x1de/0x2c0 [ 97.327177] pipe_to_sendpage+0x31b/0x430 [ 97.331306] ? sock_fasync+0x2b0/0x2b0 [ 97.335184] ? generic_pipe_buf_get+0xf0/0xf0 [ 97.339677] __splice_from_pipe+0x49a/0xf30 [ 97.343993] ? generic_splice_sendpage+0x2a0/0x2a0 [ 97.348911] generic_splice_sendpage+0x1c6/0x2a0 [ 97.353663] ? iter_file_splice_write+0x1710/0x1710 [ 97.358672] ? iter_file_splice_write+0x1710/0x1710 [ 97.363684] direct_splice_actor+0x19b/0x200 [ 97.368109] splice_direct_to_actor+0x764/0x1040 [ 97.372855] ? do_splice_direct+0x540/0x540 [ 97.377160] ? security_file_permission+0x269/0x490 [ 97.382176] do_splice_direct+0x335/0x540 [ 97.386324] do_sendfile+0x1067/0x1e40 [ 97.390221] __x64_sys_sendfile64+0x218/0x390 [ 97.394714] do_syscall_64+0x154/0x220 [ 97.398609] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.403789] RIP: 0033:0x455a09 [ 97.407489] RSP: 002b:00007f2ca4e94c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.415204] RAX: ffffffffffffffda RBX: 00007f2ca4e956d4 RCX: 0000000000455a09 [ 97.422463] RDX: 00000000200000c0 RSI: 0000000000000015 RDI: 0000000000000014 [ 97.429714] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.436975] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 97.444238] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 97.451500] [ 97.453112] Uninit was stored to memory at: [ 97.457439] kmsan_internal_chain_origin+0x12b/0x210 [ 97.462536] kmsan_memcpy_origins+0x11d/0x170 [ 97.467022] __msan_memcpy+0x109/0x160 [ 97.470900] _copy_from_iter_full+0xdfc/0x1450 [ 97.475465] netlink_sendmsg+0xe1c/0x1370 [ 97.479602] kernel_sendmsg+0x228/0x2d0 [ 97.483572] sock_no_sendpage+0x1c8/0x250 [ 97.487713] sock_sendpage+0x1de/0x2c0 [ 97.491582] pipe_to_sendpage+0x31b/0x430 [ 97.495718] __splice_from_pipe+0x49a/0xf30 [ 97.500038] generic_splice_sendpage+0x1c6/0x2a0 [ 97.504792] direct_splice_actor+0x19b/0x200 [ 97.509191] splice_direct_to_actor+0x764/0x1040 [ 97.513948] do_splice_direct+0x335/0x540 [ 97.518086] do_sendfile+0x1067/0x1e40 [ 97.521974] __x64_sys_sendfile64+0x218/0x390 [ 97.526473] do_syscall_64+0x154/0x220 [ 97.530350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.535513] Uninit was created at: [ 97.539049] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 97.544064] kmsan_alloc_page+0x82/0xe0 [ 97.548030] __alloc_pages_nodemask+0xf8e/0x5dd0 [ 97.552782] alloc_pages_current+0x6b5/0x970 [ 97.557176] push_pipe+0x680/0xca0 [ 97.560699] iov_iter_get_pages+0x1357/0x1810 [ 97.565193] __blockdev_direct_IO+0x1a4d/0x6580 [ 97.569867] ext4_direct_IO+0xed8/0x27c0 [ 97.573942] generic_file_read_iter+0x3bd2/0x4440 [ 97.578798] ext4_file_read_iter+0x30f/0x520 [ 97.583199] generic_file_splice_read+0x5d2/0x900 [ 97.588043] splice_direct_to_actor+0x4c6/0x1040 [ 97.592794] do_splice_direct+0x335/0x540 [ 97.596934] do_sendfile+0x1067/0x1e40 [ 97.600804] __x64_sys_sendfile64+0x218/0x390 [ 97.605280] do_syscall_64+0x154/0x220 [ 97.609159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.614333] ================================================================== [ 97.621668] Disabling lock debugging due to kernel taint [ 97.627102] Kernel panic - not syncing: panic_on_warn set ... [ 97.627102] [ 97.634460] CPU: 0 PID: 6683 Comm: syz-executor6 Tainted: G B 4.17.0-rc5+ #96 [ 97.643018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.652373] Call Trace: [ 97.654961] dump_stack+0x185/0x1d0 [ 97.658580] panic+0x39d/0x940 [ 97.661772] ? netlink_rcv_skb+0x3e3/0x600 [ 97.666009] kmsan_report+0x238/0x240 [ 97.669803] __msan_warning_32+0x6c/0xb0 [ 97.673851] netlink_rcv_skb+0x3e3/0x600 [ 97.677919] ? rtnetlink_bind+0x120/0x120 [ 97.682070] rtnetlink_rcv+0x50/0x60 [ 97.685784] netlink_unicast+0x166b/0x1740 [ 97.690001] ? rtnetlink_net_exit+0xa0/0xa0 [ 97.694310] netlink_sendmsg+0x1072/0x1370 [ 97.698529] kernel_sendmsg+0x228/0x2d0 [ 97.702485] ? netlink_getsockopt+0xc80/0xc80 [ 97.706974] sock_no_sendpage+0x1c8/0x250 [ 97.711109] ? sock_no_mmap+0x30/0x30 [ 97.714892] sock_sendpage+0x1de/0x2c0 [ 97.718767] pipe_to_sendpage+0x31b/0x430 [ 97.722898] ? sock_fasync+0x2b0/0x2b0 [ 97.726774] ? generic_pipe_buf_get+0xf0/0xf0 [ 97.731260] __splice_from_pipe+0x49a/0xf30 [ 97.735567] ? generic_splice_sendpage+0x2a0/0x2a0 [ 97.740485] generic_splice_sendpage+0x1c6/0x2a0 [ 97.745227] ? iter_file_splice_write+0x1710/0x1710 [ 97.750233] ? iter_file_splice_write+0x1710/0x1710 [ 97.755238] direct_splice_actor+0x19b/0x200 [ 97.759635] splice_direct_to_actor+0x764/0x1040 [ 97.764375] ? do_splice_direct+0x540/0x540 [ 97.768680] ? security_file_permission+0x269/0x490 [ 97.773684] do_splice_direct+0x335/0x540 [ 97.777824] do_sendfile+0x1067/0x1e40 [ 97.781702] __x64_sys_sendfile64+0x218/0x390 [ 97.786183] do_syscall_64+0x154/0x220 [ 97.790061] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.795233] RIP: 0033:0x455a09 [ 97.798403] RSP: 002b:00007f2ca4e94c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.806096] RAX: ffffffffffffffda RBX: 00007f2ca4e956d4 RCX: 0000000000455a09 [ 97.813348] RDX: 00000000200000c0 RSI: 0000000000000015 RDI: 0000000000000014 [ 97.820611] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.827862] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 97.835114] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 97.842852] Dumping ftrace buffer: [ 97.846376] (ftrace buffer empty) [ 97.850071] Kernel Offset: disabled [ 97.853674] Rebooting in 86400 seconds..