INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. 2018/04/22 03:41:41 fuzzer started 2018/04/22 03:41:42 dialing manager at 10.128.0.26:42949 syzkaller login: [ 48.953932] can: request_module (can-proto-0) failed. [ 48.964888] can: request_module (can-proto-0) failed. 2018/04/22 03:41:49 kcov=true, comps=false 2018/04/22 03:41:52 executing program 0: 2018/04/22 03:41:52 executing program 1: 2018/04/22 03:41:52 executing program 3: 2018/04/22 03:41:52 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000780)={0x0, ""/4096}, 0x1008, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="83"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)) 2018/04/22 03:41:52 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) 2018/04/22 03:41:52 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaed3ad35189f508060001080006040001ff0dffffffefac1414bbaaaaaaaaaaaaacd18835"], &(0x7f0000000080)) 2018/04/22 03:41:52 executing program 5: 2018/04/22 03:41:52 executing program 6: [ 53.464979] IPVS: ftp: loaded support on port[0] = 21 [ 53.550573] IPVS: ftp: loaded support on port[0] = 21 [ 53.596607] IPVS: ftp: loaded support on port[0] = 21 [ 53.675934] IPVS: ftp: loaded support on port[0] = 21 [ 53.770476] IPVS: ftp: loaded support on port[0] = 21 [ 53.873362] IPVS: ftp: loaded support on port[0] = 21 [ 54.036696] IPVS: ftp: loaded support on port[0] = 21 [ 54.185766] IPVS: ftp: loaded support on port[0] = 21 [ 56.009302] ip (4675) used greatest stack depth: 54184 bytes left [ 56.304987] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.311532] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.345249] device bridge_slave_0 entered promiscuous mode [ 56.565566] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.572129] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.589980] device bridge_slave_1 entered promiscuous mode [ 56.787780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.871317] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.877832] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.913299] device bridge_slave_0 entered promiscuous mode [ 56.930646] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.937119] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.958105] device bridge_slave_0 entered promiscuous mode [ 57.008473] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.014993] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.032438] device bridge_slave_0 entered promiscuous mode [ 57.063101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.079737] ip (4756) used greatest stack depth: 53656 bytes left [ 57.083088] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.092520] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.146687] device bridge_slave_1 entered promiscuous mode [ 57.187325] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.193853] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.221173] device bridge_slave_1 entered promiscuous mode [ 57.254906] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.261463] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.290410] device bridge_slave_1 entered promiscuous mode [ 57.349576] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.356114] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.381346] device bridge_slave_0 entered promiscuous mode [ 57.405848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.458577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.490566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.593422] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.599951] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.626175] device bridge_slave_1 entered promiscuous mode [ 57.637539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.661412] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.667936] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.686463] device bridge_slave_0 entered promiscuous mode [ 57.713332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.722440] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.728903] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.747304] device bridge_slave_0 entered promiscuous mode [ 57.770732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.780192] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.844569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.889252] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.895772] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.915907] device bridge_slave_0 entered promiscuous mode [ 57.945906] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.952436] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.975267] device bridge_slave_1 entered promiscuous mode [ 57.994024] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.000564] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.019160] device bridge_slave_1 entered promiscuous mode [ 58.055177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.086169] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.102667] ip (4819) used greatest stack depth: 53640 bytes left [ 58.115089] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.121568] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.179211] device bridge_slave_1 entered promiscuous mode [ 58.199173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.207513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.315602] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.392019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.405771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.451485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.463225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.471735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.538233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.545264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.585628] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.650141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.683526] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.728520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.767336] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.807643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.814732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.901143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.908246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.972391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.979764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.998165] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.028489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.037347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.118142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.132905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.141145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.159651] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.216191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.223708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.239761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.246768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.311757] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.357327] team0: Port device team_slave_0 added [ 59.376857] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.399266] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.444647] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.462995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.469951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.581429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.589502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.612908] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.622759] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.652997] team0: Port device team_slave_1 added [ 59.717475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.738712] team0: Port device team_slave_0 added [ 59.755383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.771668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.798473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.805842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.838526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.846193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.884539] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.905151] team0: Port device team_slave_0 added [ 59.918371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.927068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.941711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.987121] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.995634] team0: Port device team_slave_0 added [ 60.003499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.010912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.037468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.052559] team0: Port device team_slave_1 added [ 60.071805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.080184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.099473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.106517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.136959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.190552] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.211127] team0: Port device team_slave_1 added [ 60.235364] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.250959] team0: Port device team_slave_1 added [ 60.297999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.306842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.329932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.364239] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.382772] team0: Port device team_slave_0 added [ 60.420923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.428392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.435770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.452435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.474125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.502278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.523655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.535864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.548115] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.558631] team0: Port device team_slave_0 added [ 60.564594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.572892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.595941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.613987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.641814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.664118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.674805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.694364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.702712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.716633] team0: Port device team_slave_1 added [ 60.729098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.742170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.753502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.774408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.804666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.833513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.840473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.857863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.883865] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.912023] team0: Port device team_slave_1 added [ 60.927234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.944022] team0: Port device team_slave_0 added [ 60.957075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.965999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.973433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.991382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.038448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.055515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.079733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.094799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.104404] team0: Port device team_slave_0 added [ 61.116295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.128845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.158376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.166644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.177854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.189477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.207853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.226310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.245827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.255262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.268483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.289979] team0: Port device team_slave_1 added [ 61.306629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.325220] team0: Port device team_slave_1 added [ 61.345382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.359597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.387736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.397907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.427757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.461898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.470090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.487531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.512213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.536596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.558593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.567911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.584192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.591551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.608251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.624841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.654221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.678765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.692408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.704888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.729106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.736857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.745593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.761435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.770587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.818584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.826930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.838624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.866439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.899776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.925398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.970672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.978773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.000565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.050192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.057707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.084768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.110889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.122173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.169191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.327188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.334621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.353078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.391535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.400604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.416258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.396595] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.403138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.409996] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.416461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.443345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.472306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.849239] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.855774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.862704] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.869189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.882541] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.895899] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.902395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.909266] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.915720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.923955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.166012] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.172550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.179416] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.185861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.242189] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.354812] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.361325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.368245] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.374682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.388135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.479438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.494939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.524854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.556845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.639014] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.645577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.652484] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.658927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.727310] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.762956] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.769487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.776359] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.782832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.792331] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.970876] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.977398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.984555] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.991057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.028605] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.503621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.519181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.558066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.511586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.913245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.951966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.279272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.341631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.399857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.444850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.668284] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.843765] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.884146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.978452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.090254] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.098487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.120160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.171820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.195476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.205404] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.482703] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.489179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.500093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.750403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.756730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.764573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.793460] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.829143] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.034769] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.043898] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.050249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.066766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.077507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.095905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.121745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.129825] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.150129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.168778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.417621] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.628453] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.634802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.642991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.666205] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.693098] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.702569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.715870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.879508] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.921396] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.009684] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.392978] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.537754] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/22 03:42:21 executing program 0: 2018/04/22 03:42:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) 2018/04/22 03:42:21 executing program 1: 2018/04/22 03:42:21 executing program 3: 2018/04/22 03:42:21 executing program 5: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) syz_open_dev$evdev(&(0x7f0000001fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/22 03:42:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000), &(0x7f0000000040), 0x8) 2018/04/22 03:42:21 executing program 6: 2018/04/22 03:42:21 executing program 7: 2018/04/22 03:42:21 executing program 7: 2018/04/22 03:42:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2100}, {r0, 0x8}, {0xffffffffffffffff, 0x4009}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x1}, 0x8) 2018/04/22 03:42:21 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f0000000040)=""/100, 0x64, &(0x7f00000000c0)=""/107}}, 0x68) 2018/04/22 03:42:21 executing program 0: socket$inet(0x2, 0xa, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [{[], {0x8100}}], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "37a30afa5dc632bedb2b8594c9c520d68ce86dcb4b657e8eb74830b9090ba8ab790d4f52bdc2825fe984593c4fe3f4b268daba3470c275857608a0c12e25adbb"}}}}, &(0x7f0000000180)) 2018/04/22 03:42:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x101) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/22 03:42:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) 2018/04/22 03:42:21 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000700)="0d0000000000000000040000000000000c000000000000000b0000000c00000008000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff0d000b00000000000000000000000000060000000a00000008000000ffffffffffffffffffffffffffffffffffffffff090000000000000000000000000000004500000006000000010000000b0000000b0000000e0000004000000040000000fc0fd8", 0xa7, 0x400000}], 0x0, &(0x7f00000000c0)=ANY=[]) 2018/04/22 03:42:21 executing program 5: syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140), 0x0, 0x10000}], 0x0, &(0x7f0000014300)) [ 81.372312] syz-executor0 uses obsolete (PF_INET,SOCK_PACKET) [ 81.476500] ================================================================== [ 81.483927] BUG: KMSAN: uninit-value in btrfs_scan_one_device+0x4b6/0x920 [ 81.490864] CPU: 0 PID: 6582 Comm: syz-executor5 Not tainted 4.16.0+ #85 [ 81.497710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.507059] Call Trace: [ 81.509647] dump_stack+0x185/0x1d0 [ 81.513282] ? btrfs_scan_one_device+0x4b6/0x920 [ 81.518040] kmsan_report+0x142/0x240 [ 81.521847] __msan_warning_32+0x6c/0xb0 [ 81.525912] btrfs_scan_one_device+0x4b6/0x920 [ 81.530506] btrfs_mount_root+0x332/0x21b0 [ 81.534751] ? kmsan_set_origin+0x9e/0x160 [ 81.538994] ? btrfs_control_open+0x80/0x80 [ 81.543318] mount_fs+0x296/0x780 [ 81.546785] vfs_kern_mount+0x222/0x990 [ 81.550768] btrfs_mount+0x7fe/0x2db0 [ 81.554581] ? kmsan_set_origin+0x9e/0x160 [ 81.559000] ? btrfs_resize_thread_pool+0x5b0/0x5b0 [ 81.564021] mount_fs+0x296/0x780 [ 81.567486] vfs_kern_mount+0x222/0x990 [ 81.571505] do_mount+0xca5/0x4ed0 2018/04/22 03:42:21 executing program 2: r0 = gettid() prlimit64(r0, 0x8, 0x0, &(0x7f0000000040)) sched_setaffinity(r0, 0x8, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000591000)={@link_local={0x1, 0x80, 0xc2}, @random="0300000885ea", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x14, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}, &(0x7f0000e28000)) 2018/04/22 03:42:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) [ 81.575054] ? __kmalloc+0x23c/0x350 [ 81.578771] ? copy_mount_options+0x91/0x540 [ 81.583280] SYSC_mount+0x32e/0x3d0 [ 81.586917] SyS_mount+0x77/0xa0 [ 81.590288] do_syscall_64+0x309/0x430 [ 81.594181] ? put_mnt_ns+0x2f0/0x2f0 [ 81.597989] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 81.603174] RIP: 0033:0x457dba [ 81.606360] RSP: 002b:00007f59f5f1bba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.614069] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000457dba [ 81.621338] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 00007f59f5f1bbf0 [ 81.628609] RBP: 0000000000000001 R08: 0000000020014300 R09: 0000000020000040 [ 81.635877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 81.643147] R13: 0000000000000001 R14: 00000000006fcb50 R15: 0000000000000000 [ 81.650417] [ 81.652045] Uninit was stored to memory at: [ 81.656378] kmsan_internal_chain_origin+0x12b/0x210 [ 81.661486] kmsan_memcpy_origins+0x11d/0x170 [ 81.665983] __msan_memcpy+0x109/0x160 [ 81.669873] _copy_to_iter+0x852/0x28f0 2018/04/22 03:42:21 executing program 1: unshare(0x40600) pipe(&(0x7f0000000200)={0x0, 0x0}) ioctl$VT_ACTIVATE(r1, 0x5606, 0x401) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) r2 = getpgrp(0x0) ptrace(0x4217, r2) 2018/04/22 03:42:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) [ 81.673848] copy_page_to_iter+0x383/0x1b70 [ 81.678166] shmem_file_read_iter+0x99f/0x1180 [ 81.682746] do_iter_readv_writev+0x84d/0xa00 [ 81.687246] do_iter_read+0x303/0xd70 [ 81.691050] vfs_iter_read+0x118/0x180 [ 81.694942] loop_queue_work+0x270e/0x3ef0 [ 81.699186] kthread_worker_fn+0x58f/0x900 [ 81.703422] loop_kthread_worker_fn+0x90/0xb0 [ 81.707943] kthread+0x539/0x720 [ 81.711322] ret_from_fork+0x35/0x40 [ 81.715033] Uninit was created at: [ 81.718589] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 81.723615] kmsan_alloc_page+0x82/0xe0 [ 81.727595] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 81.732350] alloc_pages_vma+0xcc8/0x1800 [ 81.736504] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 81.741523] shmem_getpage_gfp+0x35db/0x5770 [ 81.745931] shmem_file_read_iter+0x508/0x1180 [ 81.750513] do_iter_readv_writev+0x84d/0xa00 [ 81.755009] do_iter_read+0x303/0xd70 [ 81.758809] vfs_iter_read+0x118/0x180 [ 81.762694] loop_queue_work+0x270e/0x3ef0 [ 81.766927] kthread_worker_fn+0x58f/0x900 [ 81.771161] loop_kthread_worker_fn+0x90/0xb0 2018/04/22 03:42:21 executing program 4: connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)) 2018/04/22 03:42:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bbeff4)) shutdown(r0, 0x2) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 81.775655] kthread+0x539/0x720 [ 81.779026] ret_from_fork+0x35/0x40 [ 81.782731] ================================================================== [ 81.790086] Disabling lock debugging due to kernel taint [ 81.795542] Kernel panic - not syncing: panic_on_warn set ... [ 81.795542] [ 81.802913] CPU: 0 PID: 6582 Comm: syz-executor5 Tainted: G B 4.16.0+ #85 [ 81.811055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.820407] Call Trace: [ 81.823003] dump_stack+0x185/0x1d0 [ 81.826640] panic+0x39d/0x940 [ 81.829858] ? btrfs_scan_one_device+0x4b6/0x920 [ 81.834621] kmsan_report+0x238/0x240 [ 81.838432] __msan_warning_32+0x6c/0xb0 [ 81.842502] btrfs_scan_one_device+0x4b6/0x920 [ 81.847094] btrfs_mount_root+0x332/0x21b0 [ 81.851341] ? kmsan_set_origin+0x9e/0x160 [ 81.855583] ? btrfs_control_open+0x80/0x80 [ 81.859907] mount_fs+0x296/0x780 [ 81.863456] vfs_kern_mount+0x222/0x990 [ 81.867437] btrfs_mount+0x7fe/0x2db0 [ 81.871249] ? kmsan_set_origin+0x9e/0x160 2018/04/22 03:42:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) [ 81.875487] ? btrfs_resize_thread_pool+0x5b0/0x5b0 [ 81.880505] mount_fs+0x296/0x780 [ 81.883977] vfs_kern_mount+0x222/0x990 [ 81.887966] do_mount+0xca5/0x4ed0 [ 81.891506] ? __kmalloc+0x23c/0x350 [ 81.895221] ? copy_mount_options+0x91/0x540 [ 81.899641] SYSC_mount+0x32e/0x3d0 [ 81.903277] SyS_mount+0x77/0xa0 [ 81.906646] do_syscall_64+0x309/0x430 [ 81.910541] ? put_mnt_ns+0x2f0/0x2f0 [ 81.914351] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 81.919538] RIP: 0033:0x457dba 2018/04/22 03:42:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/43) socketpair$inet6(0xa, 0x3, 0x1000, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x7fffffff, 0x4) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x9, &(0x7f0000000040)="64e9b1fa92a9ca1160"}) [ 81.922720] RSP: 002b:00007f59f5f1bba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.930429] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000457dba [ 81.937703] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 00007f59f5f1bbf0 [ 81.944976] RBP: 0000000000000001 R08: 0000000020014300 R09: 0000000020000040 [ 81.952246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 81.959511] R13: 0000000000000001 R14: 00000000006fcb50 R15: 0000000000000000 [ 81.967264] Dumping ftrace buffer: [ 81.970787] (ftrace buffer empty) [ 81.974471] Kernel Offset: disabled [ 81.978080] Rebooting in 86400 seconds..