INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2018/04/18 21:37:25 fuzzer started 2018/04/18 21:37:25 dialing manager at 10.128.0.26:44151 2018/04/18 21:37:31 kcov=true, comps=false 2018/04/18 21:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000300fc0)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/04/18 21:37:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x636}, 0x1c) 2018/04/18 21:37:35 executing program 7: r0 = socket(0x1e, 0x2, 0x0) sendmsg(r0, &(0x7f000095ffc8)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "bc07000000008d0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe00000003000000f8000007003f010039d8f986ff01000000000000af50d5fe32c419d67bcbc7e3ad316a198374edb9b7341c1fd4cb24281e27800000100076c3979ac40000bd837e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="56bd9a550c05d66c0a6618c0a9ceb36304d39f5b294c69fa7b7823a5dd64e4e7c55b029d392163d0c541ad88761a652be16be90701d01f2879da84f57000f0b16e", 0x41}], 0x1, &(0x7f00002d4000), 0x0, 0x2000000000000000}, 0x7ffffffd) 2018/04/18 21:37:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)) 2018/04/18 21:37:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/04/18 21:37:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002202, &(0x7f0000000000)) 2018/04/18 21:37:35 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) clone(0x8000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="bd837f3e08648438eea17de9f757b3b3249d00625f03520e964e6b2a9496e3d078d37cad6a9672b20525044bc529a6bf9e6a9a4a4a135b2c3eff65f5d218e3cecd668b502f699859a910dd453de06642a9558451caa384603a2fe41ffe511026d86532e98e2b25f902fdce43b9087db63c7d5b205240") mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x20d4671c, &(0x7f0000e6eff8)={0x77359400}) mq_timedsend(r0, &(0x7f000003a000), 0x0, 0x0, &(0x7f000066cff0)={0x0, 0x1c9c380}) 2018/04/18 21:37:35 executing program 6: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000000), 0x38d, 0x10000003) syzkaller login: [ 45.489346] ip (3761) used greatest stack depth: 54688 bytes left [ 45.715752] ip (3779) used greatest stack depth: 54672 bytes left [ 46.717641] ip (3879) used greatest stack depth: 54544 bytes left [ 46.760472] ip (3880) used greatest stack depth: 54200 bytes left [ 47.131281] ip (3913) used greatest stack depth: 53656 bytes left [ 47.368436] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.374970] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.412409] device bridge_slave_0 entered promiscuous mode [ 47.444265] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.450802] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.498509] device bridge_slave_0 entered promiscuous mode [ 47.519546] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.526114] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.556596] device bridge_slave_0 entered promiscuous mode [ 47.582080] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.588557] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.604957] device bridge_slave_0 entered promiscuous mode [ 47.620890] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.627374] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.650909] device bridge_slave_0 entered promiscuous mode [ 47.676919] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.683395] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.701350] device bridge_slave_0 entered promiscuous mode [ 47.715661] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.722154] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.739985] device bridge_slave_0 entered promiscuous mode [ 47.747796] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.754404] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.773852] device bridge_slave_0 entered promiscuous mode [ 47.789648] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.796140] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.819484] device bridge_slave_1 entered promiscuous mode [ 47.833820] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.840366] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.854268] device bridge_slave_1 entered promiscuous mode [ 47.861321] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.867801] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.885378] device bridge_slave_1 entered promiscuous mode [ 47.906605] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.913124] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.921304] device bridge_slave_1 entered promiscuous mode [ 47.933677] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.940177] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.950320] device bridge_slave_1 entered promiscuous mode [ 47.957972] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.964459] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.975721] device bridge_slave_1 entered promiscuous mode [ 47.994937] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.001420] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.026466] device bridge_slave_1 entered promiscuous mode [ 48.033697] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.040221] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.058946] device bridge_slave_1 entered promiscuous mode [ 48.067937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.077444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.094712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.102395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.117661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.150852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.241890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.263666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.274760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.290734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.303529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.313101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.348226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.380382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.464746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.495539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.250101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.266783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.307179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.327932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.408195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.427798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.471092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.504361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.514425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.541097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.548466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.568547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.629125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.643792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.730346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.742583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.529560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.543667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.565584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.577799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.658465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.675486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.688683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.731615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.740557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.750759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.824553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.843868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.868910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.886685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.914497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.944956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.952462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.977179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.007082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.014513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.022231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.050735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.074616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.083230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.090421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.103115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.138139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.160984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.184870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.195134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.204843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.213494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.229955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.250499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.259543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.268371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.277234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.289111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.300597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.315678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.333512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.343917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.352290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.359491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.387801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.411571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.430880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.456636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.466689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.475447] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.487721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.499186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.510012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.518373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.531895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.542707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.553132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.570378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.601175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.613801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.631562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.665132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.686661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.712796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.699971] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.706577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.713436] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.719912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.756871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.766818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.795964] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.802468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.809362] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.815824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.826747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.833884] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.840367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.847198] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.853652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.901910] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.916422] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.922895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.929717] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.936159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.956429] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.963634] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.970154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.977067] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.983547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.015237] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.026470] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.032963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.039857] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.046338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.074106] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.086787] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.093280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.100167] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.106725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.149779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.159472] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.165947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.172831] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.179346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.194681] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.817128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.829191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.850782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.877750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.902730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.924508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.939427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.197591] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.310472] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.374578] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.494304] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.531448] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.710953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.814784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.892352] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.022969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.029370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.046553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.102203] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.108465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.126661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.187859] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.194193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.205378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.348912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.355222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.363615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.403003] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.409339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.427712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.460813] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.476523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.516347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.642821] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.649344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.660642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.895984] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.902279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.913311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/18 21:38:01 executing program 2: mkdir(&(0x7f0000bdb000)='./file0\x00', 0x0) mount(&(0x7f0000e07000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x0, &(0x7f000054d000)) r0 = epoll_create1(0x80000) r1 = open(&(0x7f0000000100)='\x00', 0x48000, 0x100) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getpeername$packet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000002c0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000008c0)={@local, @multicast2, 0x0}, &(0x7f0000000900)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @multicast2}, &(0x7f0000000980)=0xc) r9 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000cc0)=0x14, 0x80000) accept$packet(0xffffffffffffff9c, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000ec0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f00)={0x0, @loopback, @multicast1}, &(0x7f0000000f40)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'team_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001000)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) getsockname(0xffffffffffffff9c, &(0x7f0000001100)=@hci={0x0, 0x0}, &(0x7f0000001180)=0x80) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000011c0)={'veth0_to_bond\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001200)={0x0, @rand_addr, @multicast2}, &(0x7f0000001240)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001280)={@local, 0x0}, &(0x7f00000012c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10004020}, 0xc, &(0x7f00000018c0)={&(0x7f0000001300)={0x5a4, r2, 0x70e, 0x70bd2d, 0x25dfdbfc, {0x3}, [{{0x8, 0x1, r3}, {0xb0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3ca}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0x168, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xb8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r17}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r20}, {0x4, 0x2}}, {{0x8, 0x1, r21}, {0x114, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x106afb3e}}, {0x8, 0x6, r22}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0x8, 0x1081, 0xffffffffffffffdb, 0x7000000}, {0x84, 0x7, 0x3, 0x101}, {0x0, 0x6, 0x9, 0x80000000}, {0xfff, 0x3, 0x2, 0x200}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x6, 0x0, 0x4, 0x100000000}]}}}]}}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x4}, 0x1) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r24 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2000141042, 0x0) readv(r24, &(0x7f0000000440)=[{&(0x7f0000000380)=""/169, 0xa9}], 0x1) linkat(r24, &(0x7f0000000080)='./file1\x00', r24, &(0x7f00000000c0)='./file0\x00', 0x1000) ptrace$setopts(0x4206, r23, 0x0, 0x48) 2018/04/18 21:38:01 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x2}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x9, 0x2e}) ioctl$TUNSETTXFILTER(r0, 0x8924, &(0x7f0000000240)=ANY=[@ANYBLOB="14072b4af20549ddfaad554293081ba50100005b"]) 2018/04/18 21:38:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20080, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) quotactl(0x3ff, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000001c0)="58f33fd757383276c0bcffcf2fae782377648bc64fb3f5290a5a6137e54203d45f27089244d3bd97a3a6c4477e09280379d630d906c6dfcd666d854f9d5b07d0b2c941c008202768392c2b3ee5bcda97fd8033e78dbdc699ac42dbde0c93d4498071fe24d817e2719f3e1f76fc779766482422879a83989da1517dd9ada4930567f5") seccomp(0x1, 0x1, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{}, {0x5, 0x3}, {0x6}]}) 2018/04/18 21:38:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'team_slave_1\x00', 0x2}, 0x18) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/156, 0x9c}, {&(0x7f0000000180)=""/159, 0x9f}], 0x2, 0x0) [ 70.709967] ================================================================== [ 70.717391] BUG: KMSAN: uninit-value in tipc_node_get_mtu+0x200/0x7a0 [ 70.723974] CPU: 1 PID: 5761 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 70.730802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.740238] Call Trace: [ 70.742831] dump_stack+0x185/0x1d0 [ 70.746457] ? tipc_node_get_mtu+0x200/0x7a0 [ 70.750871] kmsan_report+0x142/0x240 [ 70.754677] __msan_warning_32+0x6c/0xb0 [ 70.758843] tipc_node_get_mtu+0x200/0x7a0 [ 70.763083] __tipc_sendmsg+0x1b32/0x41c0 [ 70.767239] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.772091] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.776764] ? local_bh_enable+0x36/0x40 [ 70.780863] tipc_sendmsg+0xeb/0x140 [ 70.784596] ? tipc_recvmsg+0x1c30/0x1c30 [ 70.788751] ___sys_sendmsg+0xec0/0x1310 [ 70.792842] ? __fdget+0x4e/0x60 [ 70.796235] SYSC_sendmsg+0x2a3/0x3d0 [ 70.800052] SyS_sendmsg+0x54/0x80 [ 70.803594] do_syscall_64+0x309/0x430 [ 70.807488] ? ___sys_sendmsg+0x1310/0x1310 [ 70.811817] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.817012] RIP: 0033:0x455329 [ 70.820204] RSP: 002b:00007fdbb801ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.827921] RAX: ffffffffffffffda RBX: 00007fdbb801b6d4 RCX: 0000000000455329 [ 70.835194] RDX: 000000007ffffffd RSI: 000000002095ffc8 RDI: 0000000000000013 [ 70.842465] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.849734] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.857094] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 70.864371] [ 70.866010] Local variable description: ----dnode@__tipc_sendmsg [ 70.872142] Variable was created at: [ 70.875859] __tipc_sendmsg+0x20c/0x41c0 [ 70.879921] tipc_sendmsg+0xeb/0x140 [ 70.883625] ================================================================== [ 70.890975] Disabling lock debugging due to kernel taint [ 70.896426] Kernel panic - not syncing: panic_on_warn set ... [ 70.896426] [ 70.903793] CPU: 1 PID: 5761 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 70.911928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.921374] Call Trace: [ 70.923975] dump_stack+0x185/0x1d0 [ 70.927606] panic+0x39d/0x940 [ 70.930819] ? tipc_node_get_mtu+0x200/0x7a0 [ 70.935230] kmsan_report+0x238/0x240 [ 70.939046] __msan_warning_32+0x6c/0xb0 [ 70.943113] tipc_node_get_mtu+0x200/0x7a0 [ 70.947354] __tipc_sendmsg+0x1b32/0x41c0 [ 70.951513] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.956359] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.961034] ? local_bh_enable+0x36/0x40 [ 70.965106] tipc_sendmsg+0xeb/0x140 [ 70.968824] ? tipc_recvmsg+0x1c30/0x1c30 [ 70.972981] ___sys_sendmsg+0xec0/0x1310 [ 70.977048] ? __fdget+0x4e/0x60 [ 70.980426] SYSC_sendmsg+0x2a3/0x3d0 [ 70.984237] SyS_sendmsg+0x54/0x80 [ 70.987778] do_syscall_64+0x309/0x430 [ 70.991670] ? ___sys_sendmsg+0x1310/0x1310 [ 70.995998] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.001181] RIP: 0033:0x455329 [ 71.004363] RSP: 002b:00007fdbb801ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.012071] RAX: ffffffffffffffda RBX: 00007fdbb801b6d4 RCX: 0000000000455329 [ 71.019335] RDX: 000000007ffffffd RSI: 000000002095ffc8 RDI: 0000000000000013 [ 71.026601] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.033864] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.041131] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 71.050842] Dumping ftrace buffer: [ 71.054378] (ftrace buffer empty) [ 71.058071] Kernel Offset: disabled [ 71.061675] Rebooting in 86400 seconds..