[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 32.759874] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.149691] random: sshd: uninitialized urandom read (32 bytes read) [ 36.532121] random: sshd: uninitialized urandom read (32 bytes read) [ 37.857421] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. [ 43.350529] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/11 09:57:33 fuzzer started 2018/05/11 09:57:34 dialing manager at 10.128.0.26:45945 [ 66.480978] can: request_module (can-proto-0) failed. [ 66.492378] can: request_module (can-proto-0) failed. 2018/05/11 09:57:58 kcov=true, comps=false 2018/05/11 09:58:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) 2018/05/11 09:58:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r3, 0x8000180) sendfile(r2, r3, &(0x7f0000001000), 0x400000000fee) recvmmsg(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}}], 0x1b1, 0x0, 0x0) 2018/05/11 09:58:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x40000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2002, 0xffffffffffffffff, 0x802132, 0xffffffffffffffff, 0x0) 2018/05/11 09:58:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x84001) 2018/05/11 09:58:03 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000340)="c3", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) read(r1, &(0x7f0000000080)=""/255, 0xff) 2018/05/11 09:58:03 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000340)="c3", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) shutdown(r1, 0x1) 2018/05/11 09:58:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/05/11 09:58:03 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r3, 0x40001) sendfile(r2, r3, &(0x7f0000001000), 0x400000000fee) recvmmsg(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123, 0x7b}], 0x1, &(0x7f0000000680)=""/108, 0x6c}}, {{0x0, 0x0, &(0x7f00000007c0)}}], 0x2, 0x0, 0x0) [ 74.335879] IPVS: ftp: loaded support on port[0] = 21 [ 74.343730] IPVS: ftp: loaded support on port[0] = 21 [ 74.352732] IPVS: ftp: loaded support on port[0] = 21 [ 74.358349] IPVS: ftp: loaded support on port[0] = 21 [ 74.407928] IPVS: ftp: loaded support on port[0] = 21 [ 74.408681] IPVS: ftp: loaded support on port[0] = 21 [ 74.416098] IPVS: ftp: loaded support on port[0] = 21 [ 74.421527] IPVS: ftp: loaded support on port[0] = 21 [ 76.360531] ip (4696) used greatest stack depth: 54552 bytes left [ 77.428609] ip (4776) used greatest stack depth: 54344 bytes left [ 77.993772] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.000292] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.028291] device bridge_slave_0 entered promiscuous mode [ 78.061895] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.068392] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.092239] device bridge_slave_0 entered promiscuous mode [ 78.110462] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.116963] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.132567] device bridge_slave_0 entered promiscuous mode [ 78.150282] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.156789] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.171546] device bridge_slave_0 entered promiscuous mode [ 78.181142] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.187623] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.195728] device bridge_slave_0 entered promiscuous mode [ 78.204219] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.210681] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.234710] device bridge_slave_0 entered promiscuous mode [ 78.267130] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.273641] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.283389] device bridge_slave_0 entered promiscuous mode [ 78.295974] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.303293] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.316793] device bridge_slave_0 entered promiscuous mode [ 78.326695] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.333172] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.344300] device bridge_slave_1 entered promiscuous mode [ 78.353165] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.359660] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.384789] device bridge_slave_1 entered promiscuous mode [ 78.393302] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.399780] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.419402] device bridge_slave_1 entered promiscuous mode [ 78.446001] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.452538] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.462949] device bridge_slave_1 entered promiscuous mode [ 78.475385] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.481883] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.495577] device bridge_slave_1 entered promiscuous mode [ 78.503519] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.510132] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.521122] device bridge_slave_1 entered promiscuous mode [ 78.532832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.539336] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.566210] device bridge_slave_1 entered promiscuous mode [ 78.588996] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.595572] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.610475] device bridge_slave_1 entered promiscuous mode [ 78.622487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.632857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.645940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.654517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.662323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.718525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.801218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.830731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.845482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.855274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.873721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.885753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.910792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.931671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.967931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.071194] ip (4884) used greatest stack depth: 54104 bytes left [ 79.144395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.466204] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.570516] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.586578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.597528] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.613239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.647889] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.666671] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.695687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.739668] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.800839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.823560] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.841253] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.870976] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.894339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.939429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.992783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.030740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.037814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.077845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.084867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.095684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.108275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.121156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.128637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.153986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.187296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.227456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.234535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.247603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.255296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.262589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.270892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.313912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.345647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.380180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.388659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.408657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.419299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.443009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.457582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.475822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.486578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.500450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.512568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.542204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.578302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.915068] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.938025] team0: Port device team_slave_0 added [ 80.951743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.971131] team0: Port device team_slave_0 added [ 81.017676] ip (5014) used greatest stack depth: 53800 bytes left [ 81.047620] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.075542] team0: Port device team_slave_0 added [ 81.101970] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.128437] team0: Port device team_slave_0 added [ 81.147016] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.166318] team0: Port device team_slave_0 added [ 81.189612] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.215186] team0: Port device team_slave_1 added [ 81.227615] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.244769] team0: Port device team_slave_0 added [ 81.257431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.267465] team0: Port device team_slave_0 added [ 81.273599] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.290485] team0: Port device team_slave_1 added [ 81.324257] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.335195] team0: Port device team_slave_1 added [ 81.343559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.360080] team0: Port device team_slave_1 added [ 81.388920] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.407103] team0: Port device team_slave_1 added [ 81.425823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.452205] team0: Port device team_slave_0 added [ 81.464257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.485139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.492411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.501795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.522092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.544184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.562970] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.573986] team0: Port device team_slave_1 added [ 81.582981] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.597017] team0: Port device team_slave_1 added [ 81.615432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.624875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.643384] team0: Port device team_slave_1 added [ 81.661285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.677622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.703905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.712902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.722238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.746279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.760301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.778435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.802142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.812738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.824535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.836786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.856566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.877576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.891633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.907740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.921167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.942488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.959881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.969650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.986440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.999078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.012359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.022478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.030885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.038766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.046757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.062999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.079768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.097964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.113803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.132874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.140892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.148283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.157334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.170204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.179231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.204510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.214269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.228263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.241956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.262261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.279831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.293331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.307786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.316184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.327416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.342281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.354392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.362776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.372244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.385454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.401441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.430843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.439714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.464414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.483544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.490889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.502363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.511793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.519398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.536466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.549116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.556451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.570934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.597354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.609404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.627377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.642275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.658177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.667801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.675997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.687365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.714116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.748741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.787928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.802739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.821621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.829600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.837949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.849008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.869153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.903910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.912895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.933982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.950850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.965993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.995414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.041764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.978225] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.984732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.991642] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.998142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.053226] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.059834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.097381] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.103906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.110813] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.117344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.196106] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.223248] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.229752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.236634] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.243115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.300333] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.321283] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.327774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.334753] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.341213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.350103] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.364448] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.370959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.377871] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.384349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.403619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.412673] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.419171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.426093] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.432552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.478161] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.485833] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.492316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.499249] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.505720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.531850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.556745] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.563244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.570125] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.576614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.584579] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.111217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.126192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.155907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.168915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.179529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.187145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.195016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.080022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.118818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.305575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.351748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.372900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.406561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.467875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.662655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.926817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.022458] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.076795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.153348] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.210257] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.277411] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.313486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.528945] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.799572] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.805995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.820940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.866016] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.872430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.884854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.926845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.935717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.952947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.096240] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.102626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.113406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.144233] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.150659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.175184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.199354] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.212212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.235388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.270626] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.285266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.314880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.374082] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.380542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.397883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.727322] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.794808] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.909509] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.999480] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.022270] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.053658] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.221716] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.287660] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/11 09:58:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRES64], 0xffc3) 2018/05/11 09:58:31 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000759000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') sendfile(r1, r2, &(0x7f0000a12000)=0x500, 0x1) 2018/05/11 09:58:33 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045439, 0x707000) 2018/05/11 09:58:33 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x2000000028801) write$evdev(r1, &(0x7f0000a16000)=[{{}, 0x14}], 0x18) 2018/05/11 09:58:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) read(r2, &(0x7f0000367fe4)=""/91, 0x5b) 2018/05/11 09:58:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1f}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f00000000c0)="f2f236ed9e9fccdb", 0x8) 2018/05/11 09:58:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x84001) 2018/05/11 09:58:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x148, 0x4) sendmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) 2018/05/11 09:58:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) 2018/05/11 09:58:33 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 2018/05/11 09:58:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") unshare(0x8000000) r1 = mq_open(&(0x7f0000000000)='^procwlan1\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x3, 0x2}) mq_notify(r1, &(0x7f00000000c0)={0x0, 0x0, 0x1}) 2018/05/11 09:58:33 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 2018/05/11 09:58:33 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045439, 0x707000) 2018/05/11 09:58:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000685ff0)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000000040)}, 0x8000) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfdef) 2018/05/11 09:58:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x84001) 2018/05/11 09:58:33 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x2000000028801) write$evdev(r1, &(0x7f0000a16000)=[{{}, 0x14}], 0x18) 2018/05/11 09:58:34 executing program 1: r0 = socket(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/05/11 09:58:34 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 2018/05/11 09:58:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045439, 0x707000) 2018/05/11 09:58:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000281000)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000005000)={&(0x7f0000000000/0x3000)=nil, 0x3000}) 2018/05/11 09:58:34 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x2000000028801) write$evdev(r1, &(0x7f0000a16000)=[{{}, 0x14}], 0x18) 2018/05/11 09:58:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0x20, &(0x7f0000000040)) 2018/05/11 09:58:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x2000000028801) write$evdev(r1, &(0x7f0000a16000)=[{{}, 0x1, 0x64, 0x2}, {}], 0xe8) 2018/05/11 09:58:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x84001) 2018/05/11 09:58:34 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 2018/05/11 09:58:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000eac000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000021ff0)={0x1, &(0x7f0000016000)=[{0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b40)}, {&(0x7f0000000e40)='G', 0x1}], 0x2, 0x0, 0x0, 0x4}, 0x200}], 0x1, 0x8000) 2018/05/11 09:58:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045439, 0x707000) 2018/05/11 09:58:34 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x2000000028801) write$evdev(r1, &(0x7f0000a16000)=[{{}, 0x14}], 0x18) 2018/05/11 09:58:34 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x90) 2018/05/11 09:58:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0), 0x20) 2018/05/11 09:58:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x2000000028801) write$evdev(r1, &(0x7f0000a16000)=[{{}, 0x1, 0x64, 0x2}, {}], 0xe8) 2018/05/11 09:58:34 executing program 2: socket(0xa, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x84001) [ 104.685154] ================================================================== [ 104.692605] BUG: KMSAN: uninit-value in __sctp_v6_cmp_addr+0x49a/0x850 [ 104.699291] CPU: 1 PID: 6731 Comm: syz-executor1 Not tainted 4.17.0-rc3+ #88 [ 104.706484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.715853] Call Trace: [ 104.718473] [ 104.720669] dump_stack+0x185/0x1d0 [ 104.724313] ? __sctp_v6_cmp_addr+0x49a/0x850 [ 104.728820] kmsan_report+0x142/0x240 [ 104.732633] __msan_warning_32+0x6c/0xb0 [ 104.736705] __sctp_v6_cmp_addr+0x49a/0x850 [ 104.741044] sctp_inet6_cmp_addr+0x3dc/0x400 [ 104.745462] ? sctp_inet6_af_supported+0xf0/0xf0 [ 104.750209] sctp_bind_addr_match+0x18b/0x2f0 [ 104.754695] sctp_addrs_lookup_transport+0x904/0xa20 [ 104.759799] sctp_rcv+0x15e6/0x4d30 [ 104.763416] ? raw_local_deliver+0x63/0x1660 [ 104.767818] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 104.773202] ? raw_local_deliver+0xe2/0x1660 [ 104.777600] ? iptable_nat_ipv4_fn+0xb0/0xb0 [ 104.781996] ? kmsan_set_origin_inline+0x6b/0x120 [ 104.786829] ? sctp_v4_cmp_addr+0x250/0x250 [ 104.791144] ? sctp_csum_combine+0xa0/0xa0 [ 104.795367] ip_local_deliver_finish+0x874/0xec0 [ 104.800129] ip_local_deliver+0x43c/0x4e0 [ 104.804268] ? ip_local_deliver+0x4e0/0x4e0 [ 104.808581] ? ip_call_ra_chain+0x7c0/0x7c0 [ 104.812891] ip_rcv_finish+0xa36/0x1d00 [ 104.816852] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 104.822217] ? nf_hook_slow+0x36f/0x3d0 [ 104.826181] ip_rcv+0x118f/0x16d0 [ 104.829618] ? ip_rcv+0x16d0/0x16d0 [ 104.833236] __netif_receive_skb_core+0x47df/0x4a90 [ 104.838243] ? kmsan_set_origin_inline+0x40/0x120 [ 104.843079] ? ip_local_deliver_finish+0xec0/0xec0 [ 104.848000] ? svc_rdma_get_rw_ctxt+0x41d/0x5b0 [ 104.852663] process_backlog+0x62d/0xe20 [ 104.856719] ? rps_trigger_softirq+0x2f0/0x2f0 [ 104.861291] net_rx_action+0x7c1/0x1a70 [ 104.865262] ? net_tx_action+0xab0/0xab0 [ 104.869311] __do_softirq+0x56d/0x93d [ 104.873109] do_softirq_own_stack+0x2a/0x40 [ 104.877423] [ 104.879651] __local_bh_enable_ip+0x114/0x140 [ 104.884139] local_bh_enable+0x36/0x40 [ 104.888018] ip_finish_output2+0x135a/0x1470 [ 104.892431] ip_finish_output+0xcb2/0xff0 [ 104.896574] ip_output+0x505/0x5d0 [ 104.900108] ? ip_mc_finish_output+0x3b0/0x3b0 [ 104.904681] ? ip_finish_output+0xff0/0xff0 [ 104.908993] ip_queue_xmit+0x1a1e/0x1d10 [ 104.913050] ? __msan_poison_alloca+0x15c/0x1d0 [ 104.917706] ? sctp_chunk_put+0x29d/0x460 [ 104.921845] sctp_v4_xmit+0x188/0x210 [ 104.925633] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 104.931082] ? sctp_addr_wq_timeout_handler+0x840/0x840 [ 104.936435] sctp_packet_transmit+0x3eaa/0x4350 [ 104.941112] sctp_outq_flush+0x11e6/0x6320 [ 104.945339] ? __mod_timer+0x350/0x2c40 [ 104.949305] ? process_slab+0x830/0x1f20 [ 104.953366] sctp_outq_uncork+0xd2/0xf0 [ 104.957510] sctp_do_sm+0x8707/0x8d20 [ 104.961303] ? __msan_poison_alloca+0x15c/0x1d0 [ 104.965965] ? _raw_spin_unlock_bh+0x57/0x70 [ 104.970364] ? __local_bh_enable_ip+0x3b/0x140 [ 104.974943] ? _raw_spin_unlock_bh+0x57/0x70 [ 104.979346] ? __local_bh_enable_ip+0x3b/0x140 [ 104.983927] ? _raw_spin_unlock_bh+0x57/0x70 [ 104.988338] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 104.993178] __sctp_connect+0x1655/0x1b00 [ 104.997327] ? security_sctp_bind_connect+0x70/0x210 [ 105.002426] sctp_setsockopt+0x26e9/0x11600 [ 105.006746] ? kmsan_set_origin_inline+0x6b/0x120 [ 105.011575] ? __msan_poison_alloca+0x15c/0x1d0 [ 105.016231] ? __fdget+0x4e/0x60 [ 105.019583] ? __fget_light+0x56/0x710 [ 105.023460] ? sctp_shutdown+0x270/0x270 [ 105.027513] sock_common_setsockopt+0x136/0x170 [ 105.032174] ? sock_common_recvmsg+0x270/0x270 [ 105.036743] __sys_setsockopt+0x4af/0x560 [ 105.040885] __x64_sys_setsockopt+0x15c/0x1c0 [ 105.045371] do_syscall_64+0x154/0x220 [ 105.049252] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 105.054429] RIP: 0033:0x455979 [ 105.057604] RSP: 002b:00007f6d3218cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.065559] RAX: ffffffffffffffda RBX: 00007f6d3218d6d4 RCX: 0000000000455979 [ 105.072835] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000013 [ 105.080097] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 105.087352] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 105.097215] R13: 000000000000061a R14: 00000000006fd310 R15: 0000000000000000 [ 105.104487] [ 105.106108] Local variable description: ----dest@sctp_rcv [ 105.111632] Variable was created at: [ 105.115333] sctp_rcv+0x13d/0x4d30 [ 105.118861] ip_local_deliver_finish+0x874/0xec0 [ 105.123594] ================================================================== [ 105.130931] Disabling lock debugging due to kernel taint [ 105.136376] Kernel panic - not syncing: panic_on_warn set ... [ 105.136376] [ 105.143729] CPU: 1 PID: 6731 Comm: syz-executor1 Tainted: G B 4.17.0-rc3+ #88 [ 105.152302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.161656] Call Trace: [ 105.164227] [ 105.166368] dump_stack+0x185/0x1d0 [ 105.169986] panic+0x39d/0x940 [ 105.173195] ? __sctp_v6_cmp_addr+0x49a/0x850 [ 105.177688] kmsan_report+0x238/0x240 [ 105.181489] __msan_warning_32+0x6c/0xb0 [ 105.185554] __sctp_v6_cmp_addr+0x49a/0x850 [ 105.189867] sctp_inet6_cmp_addr+0x3dc/0x400 [ 105.194266] ? sctp_inet6_af_supported+0xf0/0xf0 [ 105.199012] sctp_bind_addr_match+0x18b/0x2f0 [ 105.203508] sctp_addrs_lookup_transport+0x904/0xa20 [ 105.208599] sctp_rcv+0x15e6/0x4d30 [ 105.212215] ? raw_local_deliver+0x63/0x1660 [ 105.216620] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 105.221985] ? raw_local_deliver+0xe2/0x1660 [ 105.226742] ? iptable_nat_ipv4_fn+0xb0/0xb0 [ 105.231141] ? kmsan_set_origin_inline+0x6b/0x120 [ 105.235969] ? sctp_v4_cmp_addr+0x250/0x250 [ 105.240281] ? sctp_csum_combine+0xa0/0xa0 [ 105.244508] ip_local_deliver_finish+0x874/0xec0 [ 105.249269] ip_local_deliver+0x43c/0x4e0 [ 105.253406] ? ip_local_deliver+0x4e0/0x4e0 [ 105.257717] ? ip_call_ra_chain+0x7c0/0x7c0 [ 105.262039] ip_rcv_finish+0xa36/0x1d00 [ 105.266000] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 105.271354] ? nf_hook_slow+0x36f/0x3d0 [ 105.275315] ip_rcv+0x118f/0x16d0 [ 105.278755] ? ip_rcv+0x16d0/0x16d0 [ 105.282386] __netif_receive_skb_core+0x47df/0x4a90 [ 105.287391] ? kmsan_set_origin_inline+0x40/0x120 [ 105.292227] ? ip_local_deliver_finish+0xec0/0xec0 [ 105.297146] ? svc_rdma_get_rw_ctxt+0x41d/0x5b0 [ 105.301798] process_backlog+0x62d/0xe20 [ 105.305848] ? rps_trigger_softirq+0x2f0/0x2f0 [ 105.310411] net_rx_action+0x7c1/0x1a70 [ 105.314378] ? net_tx_action+0xab0/0xab0 [ 105.318426] __do_softirq+0x56d/0x93d [ 105.322218] do_softirq_own_stack+0x2a/0x40 [ 105.326531] [ 105.328756] __local_bh_enable_ip+0x114/0x140 [ 105.333237] local_bh_enable+0x36/0x40 [ 105.337125] ip_finish_output2+0x135a/0x1470 [ 105.341528] ip_finish_output+0xcb2/0xff0 [ 105.345664] ip_output+0x505/0x5d0 [ 105.349196] ? ip_mc_finish_output+0x3b0/0x3b0 [ 105.353765] ? ip_finish_output+0xff0/0xff0 [ 105.358074] ip_queue_xmit+0x1a1e/0x1d10 [ 105.362120] ? __msan_poison_alloca+0x15c/0x1d0 [ 105.366773] ? sctp_chunk_put+0x29d/0x460 [ 105.370912] sctp_v4_xmit+0x188/0x210 [ 105.374697] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 105.380133] ? sctp_addr_wq_timeout_handler+0x840/0x840 [ 105.385481] sctp_packet_transmit+0x3eaa/0x4350 [ 105.390154] sctp_outq_flush+0x11e6/0x6320 [ 105.394378] ? __mod_timer+0x350/0x2c40 [ 105.398339] ? process_slab+0x830/0x1f20 [ 105.402394] sctp_outq_uncork+0xd2/0xf0 [ 105.406353] sctp_do_sm+0x8707/0x8d20 [ 105.410147] ? __msan_poison_alloca+0x15c/0x1d0 [ 105.414803] ? _raw_spin_unlock_bh+0x57/0x70 [ 105.419198] ? __local_bh_enable_ip+0x3b/0x140 [ 105.424587] ? _raw_spin_unlock_bh+0x57/0x70 [ 105.428987] ? __local_bh_enable_ip+0x3b/0x140 [ 105.433554] ? _raw_spin_unlock_bh+0x57/0x70 [ 105.437956] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 105.442784] __sctp_connect+0x1655/0x1b00 [ 105.446934] ? security_sctp_bind_connect+0x70/0x210 [ 105.452029] sctp_setsockopt+0x26e9/0x11600 [ 105.456339] ? kmsan_set_origin_inline+0x6b/0x120 [ 105.461166] ? __msan_poison_alloca+0x15c/0x1d0 [ 105.465819] ? __fdget+0x4e/0x60 [ 105.469168] ? __fget_light+0x56/0x710 [ 105.473046] ? sctp_shutdown+0x270/0x270 [ 105.477099] sock_common_setsockopt+0x136/0x170 [ 105.481818] ? sock_common_recvmsg+0x270/0x270 [ 105.486382] __sys_setsockopt+0x4af/0x560 [ 105.490524] __x64_sys_setsockopt+0x15c/0x1c0 [ 105.495006] do_syscall_64+0x154/0x220 [ 105.498889] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 105.504061] RIP: 0033:0x455979 [ 105.507235] RSP: 002b:00007f6d3218cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.514926] RAX: ffffffffffffffda RBX: 00007f6d3218d6d4 RCX: 0000000000455979 [ 105.522181] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000013 [ 105.529434] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 105.536687] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 105.543939] R13: 000000000000061a R14: 00000000006fd310 R15: 0000000000000000 [ 105.551744] Dumping ftrace buffer: [ 105.555273] (ftrace buffer empty) [ 105.558958] Kernel Offset: disabled [ 105.562563] Rebooting in 86400 seconds..