[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.847705] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.852516] random: sshd: uninitialized urandom read (32 bytes read) [ 34.340994] random: sshd: uninitialized urandom read (32 bytes read) [ 35.669748] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. [ 41.176880] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/01 02:01:21 fuzzer started 2018/06/01 02:01:21 dialing manager at 10.128.0.26:37137 [ 65.767135] can: request_module (can-proto-0) failed. [ 65.782365] can: request_module (can-proto-0) failed. 2018/06/01 02:01:47 kcov=true, comps=false 2018/06/01 02:01:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0037fc1807d82c99240970") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/135, 0x87) 2018/06/01 02:01:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000032c0)=@getlink={0x2c, 0x12, 0xf31, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x12}, @IFLA_MASTER={0x8, 0xa}]}, 0x2c}, 0x1}, 0x0) 2018/06/01 02:01:53 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") unshare(0x400) ioctl$int_out(r0, 0x40084149, &(0x7f0000000040)) 2018/06/01 02:01:53 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") unshare(0x400) ioctl$int_out(r0, 0xc0884113, &(0x7f0000000040)) 2018/06/01 02:01:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000e40)="0047fc2f50dd2c99240970") sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x139}, 0x1}, 0x0) 2018/06/01 02:01:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYBLOB="10000200c0dea804a071207cc200000000000000"], 0x2}, 0x1}, 0x0) 2018/06/01 02:01:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket$inet6(0xa, 0x1200000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/06/01 02:01:53 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x139}, 0x1}, 0x0) [ 74.389945] IPVS: ftp: loaded support on port[0] = 21 [ 74.492717] IPVS: ftp: loaded support on port[0] = 21 [ 74.493933] IPVS: ftp: loaded support on port[0] = 21 [ 74.502559] IPVS: ftp: loaded support on port[0] = 21 [ 74.528097] IPVS: ftp: loaded support on port[0] = 21 [ 74.551066] IPVS: ftp: loaded support on port[0] = 21 [ 74.605425] IPVS: ftp: loaded support on port[0] = 21 [ 74.615161] IPVS: ftp: loaded support on port[0] = 21 [ 76.568975] ip (4694) used greatest stack depth: 54424 bytes left [ 76.945843] ip (4720) used greatest stack depth: 54056 bytes left [ 77.493689] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.500194] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.534861] device bridge_slave_0 entered promiscuous mode [ 77.726153] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.732656] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.768958] device bridge_slave_1 entered promiscuous mode [ 77.850913] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.857433] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.907713] device bridge_slave_0 entered promiscuous mode [ 77.961210] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.967660] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.003126] device bridge_slave_0 entered promiscuous mode [ 78.021658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.031147] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.037597] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.055658] device bridge_slave_0 entered promiscuous mode [ 78.086865] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.093348] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.131765] device bridge_slave_0 entered promiscuous mode [ 78.153102] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.159558] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.167694] device bridge_slave_1 entered promiscuous mode [ 78.175938] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.182453] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.194933] device bridge_slave_0 entered promiscuous mode [ 78.210694] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.217136] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.233031] device bridge_slave_0 entered promiscuous mode [ 78.251545] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.258009] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.271640] device bridge_slave_1 entered promiscuous mode [ 78.280152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.288151] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.294582] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.319536] device bridge_slave_1 entered promiscuous mode [ 78.339763] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.346243] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.364982] device bridge_slave_0 entered promiscuous mode [ 78.385694] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.392142] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.402537] device bridge_slave_1 entered promiscuous mode [ 78.418389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.425982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.438260] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.444773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.472310] device bridge_slave_1 entered promiscuous mode [ 78.511370] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.517854] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.547765] device bridge_slave_1 entered promiscuous mode [ 78.568000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.580138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.588118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.597466] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.603926] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.654124] device bridge_slave_1 entered promiscuous mode [ 78.706624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.714376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.745697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.770837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.779103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.852384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.897792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.929875] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.968378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.056862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.197264] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.206964] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.306753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.417919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.431626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.440311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.458114] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.477850] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.497283] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.538231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.622399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.629554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.656442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.668382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.675347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.688399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.723226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.745193] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.754668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.781884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.788835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.888993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.915643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.924562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.946242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.953805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.983632] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.995399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.002360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.026828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.033785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.060805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.067861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.140151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.147207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.179224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.186563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.226853] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.250972] team0: Port device team_slave_0 added [ 80.266949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.274340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.316459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.323601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.338836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.346177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.354410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.386898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.461527] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.472817] team0: Port device team_slave_1 added [ 80.503647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.511987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.631519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.656456] team0: Port device team_slave_0 added [ 80.715578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.722599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.735369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.759338] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.774864] team0: Port device team_slave_0 added [ 80.845491] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.883230] team0: Port device team_slave_1 added [ 80.915653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.935009] team0: Port device team_slave_0 added [ 80.955923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.962899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.973926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.999474] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.027796] team0: Port device team_slave_0 added [ 81.045350] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.069763] team0: Port device team_slave_1 added [ 81.087815] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.099862] team0: Port device team_slave_0 added [ 81.121002] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.132803] team0: Port device team_slave_0 added [ 81.148756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.159573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.171966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.202618] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.217159] team0: Port device team_slave_1 added [ 81.222813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.229937] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.265850] team0: Port device team_slave_1 added [ 81.289461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.299895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.318469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.326408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.333292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.348002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.375283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.405545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.419849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.428896] team0: Port device team_slave_0 added [ 81.435992] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.444401] team0: Port device team_slave_1 added [ 81.458979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.469806] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.480909] team0: Port device team_slave_1 added [ 81.509709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.523436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.546822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.553861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.569958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.582357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.601861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.617570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.630308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.654949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.675201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.693815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.701695] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.709281] team0: Port device team_slave_1 added [ 81.726634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.738526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.753106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.762709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.786141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.808904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.820664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.835873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.852971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.861428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.870422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.883805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.894760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.907191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.936002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.966416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.001809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.030655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.039823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.047787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.056811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.064663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.072848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.087647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.103096] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.117565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.125876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.149797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.163972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.180690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.200892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.208720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.218394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.225453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.234499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.243707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.252155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.263525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.288940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.296447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.312021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.345198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.353535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.361659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.370214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.392466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.426862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.452841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.469668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.479629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.495108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.511919] ip (5091) used greatest stack depth: 53432 bytes left [ 82.527905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.544669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.566222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.574286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.587162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.612578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.641394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.671094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.709172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.718112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.726831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.757632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.765308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.780395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.100197] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.106653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.113424] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.119835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.172936] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.195252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.544112] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.550592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.557394] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.563861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.587092] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.768163] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.774620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.781401] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.787835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.805398] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.815850] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.822296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.829079] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.835467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.843341] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.864756] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.871188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.877974] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.884395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.897975] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.939360] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.945814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.952589] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.959052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.997625] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.216196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.226710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.262337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.291745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.307474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.341719] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.348163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.354923] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.361376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.394576] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.410442] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.416891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.423703] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.430121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.446711] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.239273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.250637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.708488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.009268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.351792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.400759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.440886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.517283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.554677] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.680203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.765118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.823867] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.151669] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.186666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.272167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.307716] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.381897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.402518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.410726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.445179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.496063] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.652922] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.659316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.671886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.957237] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.963574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.977556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.031462] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.037812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.048609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.073909] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.089943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.107589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.155277] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.161828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.178299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.223331] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.360948] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.367320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.381174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.438736] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.445295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.459790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.510551] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.786434] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.925989] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.953976] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.979189] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.210323] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.261232] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/01 02:02:20 executing program 0: 2018/06/01 02:02:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 2018/06/01 02:02:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000600), &(0x7f00000000c0)=0xfe4c) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000180)=""/78, &(0x7f0000000200)=0x4e) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$evdev(r2, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x2710}}, {{0x77359400}, 0x0, 0x8}], 0x13d) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0xfffffe74) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/06/01 02:02:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pwritev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="b1", 0x1}], 0x1, 0x0) 2018/06/01 02:02:20 executing program 5: 2018/06/01 02:02:20 executing program 2: 2018/06/01 02:02:20 executing program 6: 2018/06/01 02:02:20 executing program 4: 2018/06/01 02:02:21 executing program 5: 2018/06/01 02:02:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0xff8c) recvmmsg(r1, &(0x7f00000052c0)=[{{&(0x7f0000000740)=@rc, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)=""/27, 0x1b}}], 0x1, 0x0, &(0x7f0000005340)) 2018/06/01 02:02:21 executing program 6: clone(0x24000000, &(0x7f0000000080), &(0x7f0000000800), &(0x7f0000000640), &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") waitid(0x0, 0x0, &(0x7f0000000240), 0x4000000c, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480), &(0x7f00000003c0)=0xfffffdd3) 2018/06/01 02:02:21 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pwritev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="b1", 0x1}], 0x1, 0x0) 2018/06/01 02:02:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000140)=0x8, 0x4) 2018/06/01 02:02:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x17e) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000007980)=[{{&(0x7f0000005380)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000007800)=[{&(0x7f0000006740)=""/4096, 0x1000}], 0x1, &(0x7f0000007880)=""/203, 0xcb}}], 0x1, 0x100, &(0x7f0000007ac0)={0x77359400}) 2018/06/01 02:02:21 executing program 5: timer_create(0x8, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000000200)) timer_delete(0x0) 2018/06/01 02:02:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000000c0)=""/4096, 0x8c) 2018/06/01 02:02:21 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x9) write$cgroup_pid(r1, &(0x7f0000000000)={[0x0]}, 0x1) 2018/06/01 02:02:21 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="8100756994094bd7f1586f") fallocate(r1, 0x2, 0xf2f7, 0x0) 2018/06/01 02:02:21 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000180)) 2018/06/01 02:02:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') fallocate(r2, 0x0, 0x3, 0x8000) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/06/01 02:02:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') preadv(r0, &(0x7f0000000080), 0xa2, 0x4000000) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4004b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'vlan0\x00'}}) 2018/06/01 02:02:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000040)="6664696e666f2f3400c5a869aa779dc1e0660200a3263e208481981a1be412755c0544134e9557bcd92ffd22f8e5226eb774cde2f08fb218e793103d099da82b16e747a902e304432b0036b19dcfa0b9b10afec0cd651138409a154ee82c39357b4e09788aea9299ddb902d2e5541364bfe434af82b7da6803e0f56e2c0833a850d923875b4682bd8f2aa88b4699be8810e6") preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 2018/06/01 02:02:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, r1}) 2018/06/01 02:02:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="5a1606d3d72c70330ed87cd5459c05dd", 0x10}], 0x1}, 0x8080) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x200002dc}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 2018/06/01 02:02:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clone(0x10000000, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)) 2018/06/01 02:02:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) 2018/06/01 02:02:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0037fc1807d82c99240970") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000180), &(0x7f0000000040), 0x0) 2018/06/01 02:02:22 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000580)=""/103) 2018/06/01 02:02:22 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) 2018/06/01 02:02:22 executing program 3: clone(0x24000000, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=@fragment, 0x8) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") waitid(0x0, 0x0, &(0x7f0000000240), 0x4000000c, &(0x7f0000000280)) 2018/06/01 02:02:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) readv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000011c0)=""/182, &(0x7f0000000000)=0xb6) [ 102.435434] alg: No test for gcm(aes-fixed-time) (gcm_base(ctr(aes-fixed-time),ghash-generic)) 2018/06/01 02:02:23 executing program 4: 2018/06/01 02:02:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x8000) 2018/06/01 02:02:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f0000000240)=[{&(0x7f00000047c0)=""/110, 0x4}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket$inet6(0xa, 0x1200000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") recvmmsg(r0, &(0x7f00000045c0)=[{{&(0x7f00000043c0)=@pppol2tp, 0x80, &(0x7f00000044c0), 0x0, &(0x7f0000004500)=""/138, 0x8a}}], 0x1, 0x0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x317, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/06/01 02:02:23 executing program 6: 2018/06/01 02:02:23 executing program 7: 2018/06/01 02:02:23 executing program 1: 2018/06/01 02:02:23 executing program 0: 2018/06/01 02:02:23 executing program 3: 2018/06/01 02:02:23 executing program 1: 2018/06/01 02:02:23 executing program 3: 2018/06/01 02:02:23 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local={0xac, 0x14, 0x14, 0xaa}}}, [@migrate={0x5c, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@broadcast=0xffffffff, @in6=@empty={[0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}, 0x1}, 0x0) 2018/06/01 02:02:23 executing program 4: 2018/06/01 02:02:23 executing program 6: 2018/06/01 02:02:23 executing program 0: 2018/06/01 02:02:24 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) 2018/06/01 02:02:24 executing program 6: 2018/06/01 02:02:24 executing program 1: 2018/06/01 02:02:24 executing program 2: 2018/06/01 02:02:24 executing program 4: 2018/06/01 02:02:24 executing program 7: 2018/06/01 02:02:24 executing program 5: 2018/06/01 02:02:24 executing program 0: 2018/06/01 02:02:24 executing program 6: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, @in={0x2, 0x2, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000007a40)) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}, 0x1}, 0x0) 2018/06/01 02:02:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x2000400) socket$inet(0x10, 0x0, 0x0) 2018/06/01 02:02:24 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/06/01 02:02:24 executing program 7: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000300), 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000004c0), &(0x7f0000000500)=0x8) sendto$ax25(r1, &(0x7f0000000140)="af29e50d24f1369065c02ed5c56fd8600fefd373f152ca0e4963346955e38458691b9d7d9440b36b0aec4931598d8f487adecdb134faec17e1f2744b8e58d2c504ca7e11151beb5cf1da53980076c0f1d29bc2cc73148d758273849a22710b296bc7fdd74f00964aa7030c611ac39f298e95", 0x72, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000380)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@canfd={0xd, {{0x0, 0x9, 0x80, 0xfffffffffffffe01}, 0x2f, 0x3, 0x0, 0x0, "cdb0596668ef54193afaf1aabecee1eb3b3b3439a579f87191b95445e6a729653640c141a014be58d68ee7865896498a71b0f31333e0db02d720aab1024a46a2"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x925, 0x1ae, 0xd2c, 0x568]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 2018/06/01 02:02:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/06/01 02:02:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r1, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f0000214000)=[{&(0x7f0000314f64)=ANY=[@ANYBLOB="84889be7670ef41f00"], 0x2f9}], 0x1, &(0x7f0000414000)}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000078dffc), 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) r2 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000238000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) sendmsg(r2, &(0x7f0000785fc8)={0x0, 0x0, &(0x7f0000c62ff0)=[{&(0x7f0000895000)="e5", 0x1}], 0x1, &(0x7f0000f2d000)}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000140)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, r3, r4, 0x1, 0x150000) 2018/06/01 02:02:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f00000023c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002700)}}], 0x1, 0x40, &(0x7f0000002900)) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x440, 0xa4080) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0xd309, 0x7}, 'port0\x00', 0xc, 0x2, 0x100000001, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x3}) [ 104.673835] openvswitch: netlink: Key type 512 is out of range max 29 2018/06/01 02:02:24 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000040)=0x60, 0x800) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/148, 0xf}], 0x100000000000039a, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000001c0)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 2018/06/01 02:02:24 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x100000016907d, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x9f) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x102, 0x1f, 0x0, 0x0, 0x7, @random="2cc6d06d7fcc"}, 0x10) 2018/06/01 02:02:24 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, r1, r2, 0xffffffffffffffff, 0x2a, 0x200000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/164, &(0x7f0000000040)=0x10) [ 104.857992] openvswitch: netlink: Either Ethernet header or EtherType is required. 2018/06/01 02:02:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x84013, r0, 0x800000) [ 104.925584] openvswitch: netlink: Either Ethernet header or EtherType is required. 2018/06/01 02:02:25 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x400003, 0x8032, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="045ec1cbbd0450a5b45e3e2a92f1d7e1eb5cacf1a03b23a1092bd4da588460ddee813857ca4ff7c43f300d87fc0a2f4f68c36982a3bafbe0442d52788a9d7031cb3777e20497f02fe72f378806718478fc66c5ddb04f32d070b60b556a9fa5beed2d7806bc975c3a5d39a83ddae7dc78fcf5ec5d3af75ecafd3dc1dc1b01e07b2734c6e0d4d9eeb4c54a79ed1248d0c0ab70bda92128b4f857f3ae30ee99688c50603c079e43d27f00b91fc32906", 0xae}, {&(0x7f0000000180)="017c0e92528e80b84d9757d8fc595cd74831b274c0401c73fe52e1", 0x1b}, {&(0x7f00000001c0)="237eee6d852b7f170536d70b4b028e6a19ad160c8079333fa7847704", 0x1c}], 0x3, 0x0, 0x0, 0x4}, 0x10) 2018/06/01 02:02:25 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x55, 0x80005, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x20000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000280)=""/111) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@can={0x1d}, {&(0x7f0000000080)=""/243, 0xf3}, &(0x7f0000001380)}, 0xa3) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000001340)={r2, &(0x7f0000000340)=""/4096}) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) 2018/06/01 02:02:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x8, 0x84) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000000000000004, 0x110810, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x800) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x28, 0xc14, 0x7f, 0x8, 0x1, 0x8384}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) sendto$inet6(r0, &(0x7f000087dffe)='F', 0x1, 0x80, &(0x7f00000000c0)={0xa, 0xffffffffffffffff, 0xffffffffffff8000, @loopback={0x0, 0x1}}, 0x1c) 2018/06/01 02:02:25 executing program 4: perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x10000) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7ff) 2018/06/01 02:02:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000002ffc), &(0x7f0000002000)=0x1) write$rdma_cm(r1, &(0x7f0000000280)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffff}, 0x2, 0xb}}, 0x20) write$rdma_cm(r1, &(0x7f00000002c0)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x13}, 0x80000001}, r2}}, 0x30) close(0xffffffffffffffff) 2018/06/01 02:02:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) 2018/06/01 02:02:25 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000025d000)=0x8f, 0x734) socket$inet_dccp(0x2, 0x6, 0x0) 2018/06/01 02:02:25 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x80000000}) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) mbind(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x4001, &(0x7f0000000080)=0x100000000009, 0x20, 0x2) ioctl$KDSETMODE(r2, 0x4b3a, 0x4) [ 105.585936] ================================================================== [ 105.593366] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 105.599688] CPU: 1 PID: 6787 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 105.606959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.616315] Call Trace: [ 105.618912] dump_stack+0x185/0x1d0 [ 105.622552] ? kmsan_internal_check_memory+0x116/0x1e0 [ 105.627842] kmsan_report+0x149/0x260 [ 105.631650] kmsan_internal_check_memory+0x135/0x1e0 [ 105.636761] kmsan_copy_to_user+0x75/0x160 [ 105.641021] ? _copy_to_iter+0x92/0x2800 [ 105.645081] _copy_to_iter+0x45f/0x2800 [ 105.649053] ? finish_wait+0x10a/0x3e0 [ 105.652940] ? ieee802154_suspend+0x2b/0x130 [ 105.657356] vhost_chr_read_iter+0x7b3/0xc30 [ 105.661758] ? init_wait_entry+0x1a0/0x1a0 [ 105.665995] vhost_net_chr_read_iter+0xf6/0x130 [ 105.670662] ? vhost_net_exit+0x30/0x30 [ 105.674656] do_iter_readv_writev+0x84d/0xa00 [ 105.679152] ? vhost_net_exit+0x30/0x30 [ 105.683125] do_iter_read+0x303/0xd70 [ 105.686923] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 105.692379] do_readv+0x295/0x5f0 [ 105.695845] __x64_sys_readv+0xe1/0x120 [ 105.699807] do_syscall_64+0x152/0x230 [ 105.703684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 105.708853] RIP: 0033:0x455a09 [ 105.712026] RSP: 002b:00007faecfbc4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 105.719719] RAX: ffffffffffffffda RBX: 00007faecfbc56d4 RCX: 0000000000455a09 [ 105.726970] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 105.734219] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 105.741498] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 105.748749] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 105.756002] [ 105.757609] Uninit was created at: [ 105.761137] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 105.766237] kmsan_kmalloc+0x94/0x100 [ 105.770024] __kmalloc+0x141/0x350 [ 105.773552] translate_desc+0xbef/0x1120 [ 105.777597] vhost_update_used_flags+0x469/0x8d0 [ 105.782335] vhost_vq_init_access+0x173/0xa20 [ 105.786811] vhost_net_ioctl+0x2212/0x3450 [ 105.791030] do_vfs_ioctl+0xaf8/0x2410 [ 105.794900] __x64_sys_ioctl+0x280/0x320 [ 105.798945] do_syscall_64+0x152/0x230 [ 105.802815] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 105.807991] [ 105.809599] Bytes 4-7 of 72 are uninitialized [ 105.814071] Memory access starts at ffff88013ca157e0 [ 105.819148] ================================================================== [ 105.826484] Disabling lock debugging due to kernel taint [ 105.831909] Kernel panic - not syncing: panic_on_warn set ... [ 105.831909] [ 105.839256] CPU: 1 PID: 6787 Comm: syz-executor0 Tainted: G B 4.17.0-rc5+ #103 [ 105.847895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.857224] Call Trace: [ 105.859800] dump_stack+0x185/0x1d0 [ 105.863414] panic+0x39d/0x940 [ 105.866604] ? kmsan_internal_check_memory+0x116/0x1e0 [ 105.871867] kmsan_report+0x260/0x260 [ 105.875653] kmsan_internal_check_memory+0x135/0x1e0 [ 105.880744] kmsan_copy_to_user+0x75/0x160 [ 105.884961] ? _copy_to_iter+0x92/0x2800 [ 105.889004] _copy_to_iter+0x45f/0x2800 [ 105.892964] ? finish_wait+0x10a/0x3e0 [ 105.896849] ? ieee802154_suspend+0x2b/0x130 [ 105.901265] vhost_chr_read_iter+0x7b3/0xc30 [ 105.905665] ? init_wait_entry+0x1a0/0x1a0 [ 105.909890] vhost_net_chr_read_iter+0xf6/0x130 [ 105.914540] ? vhost_net_exit+0x30/0x30 [ 105.918499] do_iter_readv_writev+0x84d/0xa00 [ 105.922981] ? vhost_net_exit+0x30/0x30 [ 105.926938] do_iter_read+0x303/0xd70 [ 105.930720] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 105.936156] do_readv+0x295/0x5f0 [ 105.939596] __x64_sys_readv+0xe1/0x120 [ 105.943553] do_syscall_64+0x152/0x230 [ 105.947427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 105.952600] RIP: 0033:0x455a09 [ 105.955771] RSP: 002b:00007faecfbc4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 105.963462] RAX: ffffffffffffffda RBX: 00007faecfbc56d4 RCX: 0000000000455a09 [ 105.970797] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 105.978579] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 105.985833] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 105.993081] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 106.000787] Dumping ftrace buffer: [ 106.004308] (ftrace buffer empty) [ 106.007997] Kernel Offset: disabled [ 106.011596] Rebooting in 86400 seconds..