INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. 2018/04/18 13:56:53 fuzzer started 2018/04/18 13:56:54 dialing manager at 10.128.0.26:43187 2018/04/18 13:57:00 kcov=true, comps=false 2018/04/18 13:57:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x20000003da) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) 2018/04/18 13:57:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pread64(r0, &(0x7f0000c13f5c)=""/25, 0x19, 0x0) 2018/04/18 13:57:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) pwritev(r0, &(0x7f0000002640)=[{&(0x7f0000000400)="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", 0x801}], 0x1, 0x0) pwritev(r0, &(0x7f0000001f80)=[{&(0x7f0000001e80)="c0", 0x1}], 0x1, 0x0) 2018/04/18 13:57:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000002740)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003900)}}], 0x1, 0x0, &(0x7f0000003a00)) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@bridge_getneigh={0x20, 0x1e, 0x515, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/04/18 13:57:03 executing program 4: 2018/04/18 13:57:03 executing program 5: 2018/04/18 13:57:03 executing program 6: 2018/04/18 13:57:03 executing program 1: perf_event_open(&(0x7f00000029c0)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syzkaller login: [ 43.442585] ip (3699) used greatest stack depth: 54656 bytes left [ 44.301572] ip (3776) used greatest stack depth: 54312 bytes left [ 45.020726] ip (3847) used greatest stack depth: 54200 bytes left [ 45.380102] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.386598] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.428142] device bridge_slave_0 entered promiscuous mode [ 45.443989] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.450478] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.467139] device bridge_slave_0 entered promiscuous mode [ 45.498759] ip (3881) used greatest stack depth: 53960 bytes left [ 45.535202] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.541711] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.562914] device bridge_slave_0 entered promiscuous mode [ 45.585674] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.592168] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.619649] device bridge_slave_0 entered promiscuous mode [ 45.644495] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.650986] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.665011] device bridge_slave_0 entered promiscuous mode [ 45.678421] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.684898] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.712590] device bridge_slave_1 entered promiscuous mode [ 45.727724] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.734207] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.764509] device bridge_slave_1 entered promiscuous mode [ 45.773906] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.780375] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.795998] device bridge_slave_0 entered promiscuous mode [ 45.829617] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.836109] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.858471] device bridge_slave_1 entered promiscuous mode [ 45.874860] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.881355] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.912998] device bridge_slave_0 entered promiscuous mode [ 45.926979] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.933465] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.941604] device bridge_slave_1 entered promiscuous mode [ 45.950327] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.956826] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.974352] device bridge_slave_1 entered promiscuous mode [ 45.983496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.993914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.001320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.010242] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.016709] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.062723] device bridge_slave_1 entered promiscuous mode [ 46.069427] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.075920] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.104173] device bridge_slave_0 entered promiscuous mode [ 46.120890] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.127358] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.159000] device bridge_slave_1 entered promiscuous mode [ 46.183229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.192716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.208161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.217661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.228863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.236687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.267843] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.274345] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.324411] device bridge_slave_1 entered promiscuous mode [ 46.384867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.395448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.406172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.451011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.548174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.670284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.753685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.930174] ip (3974) used greatest stack depth: 53656 bytes left [ 47.208097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.219139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.273161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.384163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.411276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.433427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.455072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.463946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.489283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.614115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.622791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.691099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.700752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.792927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.920599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.020687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.418307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.474192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.484440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.545346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.636386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.645368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.689140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.700584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.730220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.775016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.855488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.868458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.884288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.925788] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.933972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.945839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.970235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.982366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.991764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.003329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.037020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.047748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.055360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.065777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.082767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.115112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.130282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.140252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.150363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.197253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.225853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.259943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.279472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.290763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.308458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.318441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.327429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.336398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.357854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.366601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.374494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.381983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.389481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.411098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.441263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.469957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.510259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.517644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.528765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.588438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.595645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.604775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.633961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.641937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.652307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.688477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.727197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.751191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.808698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.815903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.834108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.875921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.883177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.907849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.537245] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.543748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.550601] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.557239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.617097] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.625326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.650565] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.657089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.663944] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.670412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.715073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.722905] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.729354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.736224] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.742668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.795892] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.806993] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.813427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.820235] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.826653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.834951] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.032581] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.039144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.045953] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.052407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.062171] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.195768] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.202266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.209747] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.216198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.235823] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.249261] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.255720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.262585] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.269076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.284013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.304663] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.311114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.317965] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.324403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.426265] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.643414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.661661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.690715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.720625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.735339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.742656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.750557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.155008] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.244160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.288441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.450837] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.539375] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.720159] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.731376] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.845862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.950780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.957382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.971708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.069985] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.076274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.087628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.112918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.137658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.167546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.294082] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.300365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.311925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.343776] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.355252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.377912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.561103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.567355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.575788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.604134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.610374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.642154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.839996] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.846282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.857891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/18 13:57:29 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:29 executing program 2: 2018/04/18 13:57:30 executing program 2: 2018/04/18 13:57:30 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:30 executing program 6: 2018/04/18 13:57:30 executing program 2: 2018/04/18 13:57:30 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:30 executing program 6: 2018/04/18 13:57:30 executing program 0: 2018/04/18 13:57:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x103) 2018/04/18 13:57:30 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) 2018/04/18 13:57:30 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xe5}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x5, 0x6f2000, 0xfffffffb, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x2a}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x16, 0x6f2000, 0x2, &(0x7f0000000180)) socketpair$inet_icmp(0x16, 0x6f2000, 0xf, &(0x7f0000000180)) 2018/04/18 13:57:30 executing program 5: 2018/04/18 13:57:30 executing program 6: 2018/04/18 13:57:30 executing program 3: 2018/04/18 13:57:31 executing program 3: 2018/04/18 13:57:31 executing program 5: 2018/04/18 13:57:31 executing program 4: 2018/04/18 13:57:31 executing program 6: 2018/04/18 13:57:31 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cd390b081bf2aaaaaaaaaaaa86dd600400000000000000750400100000a67947000000000000ffffe0000002ff0200000000000000000000000000010200907800000000609433df00003a00ff02000000000000000100000002000000000000000000000001fca967e17f79101009000000"], 0x0) 2018/04/18 13:57:31 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000040), 0x1ae, 0x0) 2018/04/18 13:57:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)) 2018/04/18 13:57:31 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xfa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x4, 0xfffffffd, 0xfffffffc, &(0x7f0000000080)) 2018/04/18 13:57:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x28, &(0x7f0000000700)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={r1}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r2, &(0x7f00000004c0), &(0x7f00000005c0)=""/235}, 0x18) 2018/04/18 13:57:31 executing program 6: unlink(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='mqueue\x00', 0x0, &(0x7f0000e2ef53)) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000680)) umount2(&(0x7f0000000040)='./file0\x00', 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') umount2(&(0x7f0000a23000)='./file0\x00', 0xc) 2018/04/18 13:57:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') 2018/04/18 13:57:31 executing program 0: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='!cpuset\x00', 0x0) 2018/04/18 13:57:31 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/18 13:57:31 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) close(r0) 2018/04/18 13:57:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') pread64(r0, &(0x7f0000000040), 0x1ae, 0x0) 2018/04/18 13:57:31 executing program 1: 2018/04/18 13:57:31 executing program 3: semtimedop(0x0, &(0x7f00000011c0)=[{0x0, 0xd769}], 0x1, &(0x7f0000001200)) 2018/04/18 13:57:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x6000) pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x0) 2018/04/18 13:57:31 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:31 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x800000000004, 0x800000000000054}, 0x25) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x102}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xffffff9c, 0x730000, 0x1, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x730000, 0x730002, 0x1, &(0x7f00000001c0)) 2018/04/18 13:57:31 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x112}) 2018/04/18 13:57:31 executing program 2: 2018/04/18 13:57:31 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x400000002}, 0x1c) sendmmsg(r0, &(0x7f000000b180)=[{{&(0x7f0000000400)=@in={0x2, 0x4e24, @rand_addr}, 0x80, &(0x7f0000001280), 0x0, &(0x7f0000003740)}}], 0x1, 0x0) 2018/04/18 13:57:32 executing program 1: 2018/04/18 13:57:32 executing program 2: 2018/04/18 13:57:32 executing program 3: 2018/04/18 13:57:32 executing program 5: 2018/04/18 13:57:32 executing program 0: 2018/04/18 13:57:32 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:32 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x9}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7fffffffefff, 0x7f985eac2000, 0x705000, &(0x7f0000000080)) 2018/04/18 13:57:32 executing program 4: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 2018/04/18 13:57:32 executing program 1: 2018/04/18 13:57:32 executing program 2: 2018/04/18 13:57:32 executing program 3: 2018/04/18 13:57:32 executing program 5: [ 70.289109] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 2018/04/18 13:57:32 executing program 5: 2018/04/18 13:57:32 executing program 2: 2018/04/18 13:57:32 executing program 1: 2018/04/18 13:57:32 executing program 0: 2018/04/18 13:57:32 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) 2018/04/18 13:57:32 executing program 3: 2018/04/18 13:57:32 executing program 4: 2018/04/18 13:57:32 executing program 6: 2018/04/18 13:57:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xe6}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x3, 0x705000, &(0x7f0000000180)) 2018/04/18 13:57:32 executing program 2: mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./control\x00', 0x800) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) 2018/04/18 13:57:32 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000002a00070032f00008004a7700fbffffff010000000300000106ff00000400ff10", 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x101000, 0x0) 2018/04/18 13:57:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/18 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8, 0x11}, @IFLA_ADDRESS={0xc, 0x1, @random="8adc116323ee"}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2018/04/18 13:57:32 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) 2018/04/18 13:57:32 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000001740)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@bridge_getneigh={0x28, 0x1e, 0xa09, 0x0, 0x0, {0x7}, [@IFLA_MASTER={0x8, 0xa, 0x3}]}, 0x28}, 0x1}, 0x0) 2018/04/18 13:57:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xe6}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x3, 0x705000, &(0x7f0000000180)) 2018/04/18 13:57:32 executing program 2: unshare(0x40600) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[0x3, 0x101, 0x1, 0x0, 0x8]}) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000000c0), 0x4) ioctl(r1, 0x7f, &(0x7f0000000100)="8aa0ab8bd8f138a729273007d5c502908b152a740f9003d47baec9f675880bd6b7d6f2ed5205ba125639db461fce8f470ec313acf797daf581588f3123f81ce366ba934fec648ca561efa9d7db1fd6047889127a6c33498e2c72a2d5054bb36bbe4dbd6375db3050228bb78147399b00c6c7ed5542eb63ff0141fa005e3cb86e20ee343b90c65f3cf56063f04abd12b6077f0319ab76ba496d") 2018/04/18 13:57:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r0, &(0x7f0000021fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5ab7", 0x2}], 0x1, &(0x7f0000000040)}, 0xc100) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/68, 0x44}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000200)="bc679d5883809db8dc59d71e30cdb9cbf0b9fba324e1cde306ccbf7a713d616df1c687498eb37c0e7d289c651aebf0e9f13f8bf7cc6859666c1df6ded50e8987214ea9", 0x43}], 0x1, &(0x7f0000000040)}, 0x0) [ 70.853185] netlink: 'syz-executor1': attribute type 17 has an invalid length. 2018/04/18 13:57:32 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) 2018/04/18 13:57:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0xffffffffffffffff) mq_timedsend(0xffffffffffffffff, &(0x7f0000006ff3), 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}) setsockopt$inet_int(r0, 0x0, 0xcc, &(0x7f0000002000), 0x23) 2018/04/18 13:57:32 executing program 6: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x3, [@rand_addr, @empty, @dev={0xac, 0x14, 0x14}]}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb39f, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x3, 0x2, 0x0, 0x1}, 0x100000001, 0x2c4, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x3ff, 0x5}) 2018/04/18 13:57:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000180)='keyring\x00', 0x3) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x7f) 2018/04/18 13:57:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x11, 0xc, "89ffb205c8055ffdec7a3ec2f1ff29c0b2c2695f313015da63706aa552ad889a885ec445956ffb9de3729fa4ad477741cb1dae43da2ff1cca65cf1c5e41f1fc0", "d3991b93c6d69a186842a7c2e4e23c6f1262e6ee22ec56c0fda87a0cb01fa868", [0xff, 0x80000001]}) r2 = accept4(r0, 0x0, &(0x7f0000000040)=0xc5, 0x0) sendto$unix(r2, &(0x7f0000000040), 0x15b64163e22f3a90, 0x0, 0x0, 0xfffffffffffffd7a) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) prlimit64(r3, 0xe, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000100)) 2018/04/18 13:57:33 executing program 2: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @rand_addr=0x3}, @dev={0xfe, 0x80, [], 0x1d}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x6, 0x1, 0x1f, 0x400, 0xfffffffffffffffb, 0x80880010, r4}) tee(r2, r1, 0x5, 0x0) r5 = gettid() ioctl$TCSBRKP(r2, 0x5425, 0xadb7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x200, 0x5, 0xfffffffffffffff8, 0x80, 0x8, 0x7f4, 0x0, 0x80, 0x8000, 0x3f}, 0xb) write$cgroup_int(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="332fb23282ed15ba11e8c40ca52d156f5333d688c4e62f6a566e4bc576cf9f36183d287bebbeabc81fc74c140f81c7b31e59ceda5ed18cd3270e07ae61775922af14724dc54cb589df7079cead90e9740d48f8841d03eaf7bac3e2e76211b7738abf62ffcdeddb0f87652f0fea4b40d070e987613e6918bc5b5bc2aa3a45b222ee2afa221dedcab4e456000000000000000000000000000000"], 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r5, 0x15) close(r3) 2018/04/18 13:57:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000380)=@raw, &(0x7f0000ac3000)='GPL\x00', 0xb5, 0x67, &(0x7f0000000080)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xfecd, &(0x7f0000011f3d)=""/195}, 0x48) 2018/04/18 13:57:33 executing program 7: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x18, r1, 0x0, 0x2) 2018/04/18 13:57:33 executing program 6: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x3, [@rand_addr, @empty, @dev={0xac, 0x14, 0x14}]}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb39f, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x3, 0x2, 0x0, 0x1}, 0x100000001, 0x2c4, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x3ff, 0x5}) [ 71.653121] ================================================================== [ 71.660539] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 71.667803] CPU: 0 PID: 5914 Comm: syz-executor5 Not tainted 4.16.0+ #84 [ 71.674625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.683975] Call Trace: [ 71.686563] dump_stack+0x185/0x1d0 [ 71.690177] ? csum_partial_copy_to_user+0x450/0x500 [ 71.695263] kmsan_report+0x142/0x240 [ 71.699047] __msan_warning_32+0x6c/0xb0 [ 71.703100] csum_partial_copy_to_user+0x450/0x500 [ 71.708023] csum_and_copy_to_iter+0x3dc/0x2140 [ 71.712679] ? kmsan_set_origin_inline+0x6b/0x120 [ 71.717506] ? __msan_poison_alloca+0x15c/0x1d0 [ 71.722167] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 71.727260] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 71.732611] udpv6_recvmsg+0xc65/0x29e0 [ 71.736578] ? udp6_lib_lookup_skb+0x240/0x240 [ 71.741142] inet_recvmsg+0x4c2/0x5f0 [ 71.744930] sock_recvmsg+0x1d0/0x230 [ 71.748717] ? inet_sendpage+0x8c0/0x8c0 [ 71.752765] ___sys_recvmsg+0x3fb/0x810 [ 71.756732] ? __fget_light+0x56/0x710 [ 71.760601] ? __fdget+0x4e/0x60 [ 71.763953] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 71.769304] ? __fget_light+0x6b9/0x710 [ 71.773266] SYSC_recvmsg+0x298/0x3c0 [ 71.777057] SyS_recvmsg+0x54/0x80 [ 71.780582] do_syscall_64+0x309/0x430 [ 71.784454] ? ___sys_recvmsg+0x810/0x810 [ 71.788588] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.793760] RIP: 0033:0x455329 [ 71.796930] RSP: 002b:00007f4a55105c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 71.804617] RAX: ffffffffffffffda RBX: 00007f4a551066d4 RCX: 0000000000455329 [ 71.811869] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000013 [ 71.819118] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.826369] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.833620] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 71.840875] [ 71.842481] Uninit was created at: [ 71.846010] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 71.851015] kmsan_alloc_page+0x82/0xe0 [ 71.854975] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 71.859710] alloc_pages_current+0x6b5/0x970 [ 71.864103] skb_page_frag_refill+0x3ba/0x5e0 [ 71.868581] sk_page_frag_refill+0xa4/0x340 [ 71.872889] __ip6_append_data+0x1a20/0x4bb0 [ 71.877280] ip6_append_data+0x40e/0x6b0 [ 71.881334] udpv6_sendmsg+0xfd5/0x45b0 [ 71.885288] inet_sendmsg+0x48d/0x740 [ 71.889074] ___sys_sendmsg+0xec0/0x1310 [ 71.893116] SYSC_sendmsg+0x2a3/0x3d0 [ 71.896899] SyS_sendmsg+0x54/0x80 [ 71.900420] do_syscall_64+0x309/0x430 [ 71.904291] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.909461] ================================================================== [ 71.916798] Disabling lock debugging due to kernel taint [ 71.922227] Kernel panic - not syncing: panic_on_warn set ... [ 71.922227] [ 71.929576] CPU: 0 PID: 5914 Comm: syz-executor5 Tainted: G B 4.16.0+ #84 [ 71.937694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.947027] Call Trace: [ 71.949605] dump_stack+0x185/0x1d0 [ 71.953219] panic+0x39d/0x940 [ 71.956415] ? csum_partial_copy_to_user+0x450/0x500 [ 71.961502] kmsan_report+0x238/0x240 [ 71.965285] __msan_warning_32+0x6c/0xb0 [ 71.969334] csum_partial_copy_to_user+0x450/0x500 [ 71.974254] csum_and_copy_to_iter+0x3dc/0x2140 [ 71.978909] ? kmsan_set_origin_inline+0x6b/0x120 [ 71.983735] ? __msan_poison_alloca+0x15c/0x1d0 [ 71.988396] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 71.993493] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 71.998845] udpv6_recvmsg+0xc65/0x29e0 [ 72.002812] ? udp6_lib_lookup_skb+0x240/0x240 [ 72.007381] inet_recvmsg+0x4c2/0x5f0 [ 72.011175] sock_recvmsg+0x1d0/0x230 [ 72.014959] ? inet_sendpage+0x8c0/0x8c0 [ 72.019008] ___sys_recvmsg+0x3fb/0x810 [ 72.022974] ? __fget_light+0x56/0x710 [ 72.026840] ? __fdget+0x4e/0x60 [ 72.030193] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 72.035540] ? __fget_light+0x6b9/0x710 [ 72.039504] SYSC_recvmsg+0x298/0x3c0 [ 72.043291] SyS_recvmsg+0x54/0x80 [ 72.046818] do_syscall_64+0x309/0x430 [ 72.050690] ? ___sys_recvmsg+0x810/0x810 [ 72.054823] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.059994] RIP: 0033:0x455329 [ 72.063170] RSP: 002b:00007f4a55105c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 72.070863] RAX: ffffffffffffffda RBX: 00007f4a551066d4 RCX: 0000000000455329 [ 72.078127] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000013 [ 72.085380] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 72.092629] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.099879] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 72.107627] Dumping ftrace buffer: [ 72.111149] (ftrace buffer empty) [ 72.114833] Kernel Offset: disabled [ 72.118444] Rebooting in 86400 seconds..