INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2018/04/26 17:51:14 fuzzer started 2018/04/26 17:51:14 dialing manager at 10.128.0.26:38541 syzkaller login: [ 54.444897] can: request_module (can-proto-0) failed. [ 54.457309] can: request_module (can-proto-0) failed. 2018/04/26 17:51:22 kcov=true, comps=false 2018/04/26 17:51:26 executing program 0: 2018/04/26 17:51:26 executing program 1: 2018/04/26 17:51:26 executing program 7: 2018/04/26 17:51:26 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'gre0\x00', @ifru_data=&(0x7f0000000080)="e54247bbd6e5285a5767de1787a7578b8cb305b5b5a396098a3abfe5e08b518c"}}) 2018/04/26 17:51:26 executing program 2: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x9, 0x0) 2018/04/26 17:51:26 executing program 3: 2018/04/26 17:51:26 executing program 5: 2018/04/26 17:51:26 executing program 6: [ 59.943718] IPVS: ftp: loaded support on port[0] = 21 [ 60.064918] IPVS: ftp: loaded support on port[0] = 21 [ 60.110391] IPVS: ftp: loaded support on port[0] = 21 [ 60.191588] IPVS: ftp: loaded support on port[0] = 21 [ 60.331555] IPVS: ftp: loaded support on port[0] = 21 [ 60.466245] IPVS: ftp: loaded support on port[0] = 21 [ 60.604731] IPVS: ftp: loaded support on port[0] = 21 [ 60.755363] IPVS: ftp: loaded support on port[0] = 21 [ 61.388535] ip (4717) used greatest stack depth: 54312 bytes left [ 62.235248] ip (4781) used greatest stack depth: 54184 bytes left [ 63.160456] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.166972] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.202262] device bridge_slave_0 entered promiscuous mode [ 63.272813] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.279455] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.310394] device bridge_slave_0 entered promiscuous mode [ 63.448340] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.454903] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.499358] device bridge_slave_1 entered promiscuous mode [ 63.584517] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.591130] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.608211] device bridge_slave_1 entered promiscuous mode [ 63.735908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.800308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.869936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.876509] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.919121] device bridge_slave_0 entered promiscuous mode [ 63.942495] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.949173] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.974323] device bridge_slave_0 entered promiscuous mode [ 63.997876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.034932] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.042393] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.087992] device bridge_slave_0 entered promiscuous mode [ 64.117698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.130790] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.137304] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.193647] device bridge_slave_1 entered promiscuous mode [ 64.243234] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.249763] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.265229] device bridge_slave_0 entered promiscuous mode [ 64.276659] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.283193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.308591] device bridge_slave_1 entered promiscuous mode [ 64.350988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.358501] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.364959] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.384984] device bridge_slave_1 entered promiscuous mode [ 64.406923] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.413454] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.433413] device bridge_slave_1 entered promiscuous mode [ 64.498507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.543313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.559459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.640940] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.647466] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.689411] device bridge_slave_0 entered promiscuous mode [ 64.737774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.746393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.760682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.767905] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.774441] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.802715] device bridge_slave_0 entered promiscuous mode [ 64.833551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.854208] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.860859] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.909936] device bridge_slave_1 entered promiscuous mode [ 64.962600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.975854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.019624] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.026209] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.067628] device bridge_slave_1 entered promiscuous mode [ 65.090355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.160134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.227849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.308660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 65.352991] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.370467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.377510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.392859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.445347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.452418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.506689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 65.531525] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.593401] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.644496] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.723343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.730335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.794666] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.806726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.818374] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.904179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.921934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.017391] ip (5033) used greatest stack depth: 53640 bytes left [ 66.028160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.035314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.057933] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.068759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.079018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.126975] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.171633] team0: Port device team_slave_0 added [ 66.200492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.212218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.228433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 66.243007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 66.272309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.279711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.315988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.323965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.380566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.387613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.400409] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.422530] team0: Port device team_slave_1 added [ 66.505772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.533943] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 66.551619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.583456] team0: Port device team_slave_0 added [ 66.607206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.618872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.675511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.682557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.697788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.799992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.808825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 66.815918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.834157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.899758] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.913668] team0: Port device team_slave_1 added [ 66.941558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.949232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.966759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.006843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.033714] team0: Port device team_slave_0 added [ 67.047926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.060406] team0: Port device team_slave_0 added [ 67.071969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 67.082788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.113138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 67.123589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.141845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.150577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.163329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.202447] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.224318] team0: Port device team_slave_0 added [ 67.243799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.253819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.276382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.370336] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.389539] team0: Port device team_slave_1 added [ 67.399556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.419195] team0: Port device team_slave_1 added [ 67.438354] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.461389] team0: Port device team_slave_1 added [ 67.485802] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.503422] team0: Port device team_slave_0 added [ 67.513224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.531926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.543272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.554372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.598441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.625168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.670263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.682837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.700122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.717624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.738117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.745974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.775269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.799260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.821930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.832820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.841554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.860873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.870443] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.879355] team0: Port device team_slave_1 added [ 67.902739] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.930347] team0: Port device team_slave_0 added [ 67.948830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.956613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.970516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.999599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.019122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.044443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.060805] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 68.069987] team0: Port device team_slave_0 added [ 68.082138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 68.089601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.098659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.125136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 68.133371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.161367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.181407] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.192569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 68.205726] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 68.243432] team0: Port device team_slave_1 added [ 68.262565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.280875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.307727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.334221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.353768] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 68.362645] team0: Port device team_slave_1 added [ 68.385737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.394111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.407291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.428467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 68.437988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.454393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 68.466351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.491153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.527878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.555362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.573508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.589189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.601387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.636282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.653376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.675472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 68.684808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.692901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 68.705164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.712520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.739726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.758122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.787512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.811493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.834184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.854840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.863199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.872118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.879523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.888749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.916415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.929500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.958851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.973679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.003748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.034975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.065561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 69.074259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.117175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.193224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.200670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.219342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.314014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 69.321673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.339479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.588147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 69.598011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.618736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.759661] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.766166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.773201] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.779659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.816996] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.826335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.849005] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.855557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.862432] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.868919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.901852] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.323714] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.330271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.337330] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.343886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.367661] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.399712] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.406239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.413264] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.419779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.445498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.600690] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.607236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.614248] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.620846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.639509] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.718118] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.724631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.731578] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.738132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.821356] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.840433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.851423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.863096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.878549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.887760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.899532] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.906126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.913008] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.919614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.952794] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 72.219554] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.226135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.233105] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.239580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.317436] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 72.863419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.874873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.452371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.520514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.037573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.151350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.264433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.336732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.435635] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.447014] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.497507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.857821] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.077598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.093193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.158658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.202015] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.344128] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.350545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.360573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.385443] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.391868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.421540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.455937] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.871577] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.918594] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.924997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.934535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.989190] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.995532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.012677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.137311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.143635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.154849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.198353] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.205969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.218277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.262768] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.313987] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.460257] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.468920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.493392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.808717] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.842665] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.848996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.865187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.020823] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.039906] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.129874] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.424933] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.779646] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/26 17:51:55 executing program 5: 2018/04/26 17:51:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0xffffffffffffffc6) creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0xfe48) pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)="ba", 0x1}], 0x1, 0x0) fsync(r0) 2018/04/26 17:51:56 executing program 5: 2018/04/26 17:51:56 executing program 1: 2018/04/26 17:51:56 executing program 3: 2018/04/26 17:51:56 executing program 7: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x402473, {0xffffffffffffffe1}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)="6e65742f69a756785f1b") 2018/04/26 17:51:56 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000140)="6c7802556a52afd7fe4144896fe4d77e73f47fad5b1352c7962566a7d85572c95fe357be279da60ffcad3f7551849150a0daf2863bf677b5c56e8e9edac8180823ee2dabe0d99d612ac831f7a5b1743327959b1c5a2c343f1081d30ab96273b98ab6cd76bf29e82324cbe82e0ff062f99447751414cda2388a862aa432677fc4f623971ead66dbf402825ae4338abf22822d89af56c425dd931496921c7f5a4bf90cc3710a056518514ecfdec30bd4e04fca5ed4f8bfcee35636b0447ac75ad5b8d8b2a619f20a407ac12e73a26def09f3216511", &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) 2018/04/26 17:51:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 2018/04/26 17:51:56 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "84eef8", 0x0, 0x0, 0x0, @dev={0xfe, 0x80}, @loopback={0x0, 0x1}}}}}}}}, 0x0) [ 89.787144] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 2018/04/26 17:51:56 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xef) read(r0, &(0x7f0000004f45)=""/187, 0xbb) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000080)=0x4000002, 0x222) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/26 17:51:56 executing program 1: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = open(&(0x7f0000000140)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000500)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00000000c0)='./control/file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000640)='./control\x00', 0x0) renameat2(r1, &(0x7f000003aff6)='./control\x00', r0, &(0x7f0000000180)='./control/file0\x00', 0x2) 2018/04/26 17:51:56 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team_slave_1\x00'}, 0x18) [ 90.011809] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 0, id = 0 2018/04/26 17:51:57 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/04/26 17:51:57 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x2dc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0xffffffffffffffdd) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/26 17:51:57 executing program 6: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x93}) 2018/04/26 17:51:57 executing program 1: 2018/04/26 17:51:57 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x310) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [], 0xa}, 0xb) 2018/04/26 17:51:57 executing program 4: 2018/04/26 17:51:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x1) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x4}) ioctl(r0, 0x1, &(0x7f0000007000)) 2018/04/26 17:51:57 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team_slave_1\x00'}, 0x18) 2018/04/26 17:51:57 executing program 1: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000021ff4)) getpeername$ax25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r4 = dup3(r3, r2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000080)="d823c8bafc7f9723c387dae58adfa7a8", 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) fdatasync(r1) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r5, 0x40086602, &(0x7f00000011c0)={0x4000}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3}) 2018/04/26 17:51:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000008c0)=ANY=[]) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x3, &(0x7f0000000240)="7af9b021ed29fbe0d613162a5b5e240a902bb896007e30ef881f5dc34c75e72c53d06ff7c737b9dd6cecbaf5fdbd4ec125e3e7451451f8d8d9cdf486a531f3149c6704bcdd3ec8a64672a02e10d13f4b4d9e5283296c618678a09733492ba79a8ab5379adc3e9a38156c37db5a6435b09d1bd8990eb35fb27d204b016ac3093a7903603c0d36fec1a28f4a730eb97d85806e58663fde9f12febb9663b2a8e07f308ca0df6c9480f9c6f5d963a59df6658ae67882875d6e7f0fbb") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1000000000001) getdents(r0, &(0x7f0000000140)=""/34, 0x22) 2018/04/26 17:51:58 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team_slave_1\x00'}, 0x18) 2018/04/26 17:51:58 executing program 6: clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) 2018/04/26 17:51:58 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000462ff4)='/dev/autofs\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 2018/04/26 17:51:58 executing program 2: io_setup(0x4, &(0x7f00000000c0)=0x0) io_destroy(r0) 2018/04/26 17:51:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x1) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x4}) ioctl(r0, 0x1, &(0x7f0000007000)) 2018/04/26 17:51:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000f8ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) 2018/04/26 17:51:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000008c0)=ANY=[]) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x3, &(0x7f0000000240)="7af9b021ed29fbe0d613162a5b5e240a902bb896007e30ef881f5dc34c75e72c53d06ff7c737b9dd6cecbaf5fdbd4ec125e3e7451451f8d8d9cdf486a531f3149c6704bcdd3ec8a64672a02e10d13f4b4d9e5283296c618678a09733492ba79a8ab5379adc3e9a38156c37db5a6435b09d1bd8990eb35fb27d204b016ac3093a7903603c0d36fec1a28f4a730eb97d85806e58663fde9f12febb9663b2a8e07f308ca0df6c9480f9c6f5d963a59df6658ae67882875d6e7f0fbb") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1000000000001) getdents(r0, &(0x7f0000000140)=""/34, 0x22) 2018/04/26 17:51:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x200e000, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_aout(r0, &(0x7f0000000840)={{}, "", [[]]}, 0x120) r1 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x7, 0x11, r1, 0x0) write$binfmt_aout(r0, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x366}}, 0x20) 2018/04/26 17:51:58 executing program 4: syz_emit_ethernet(0x76, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60589", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000ea3000)) 2018/04/26 17:51:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x1) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x4}) ioctl(r0, 0x1, &(0x7f0000007000)) 2018/04/26 17:51:58 executing program 1: 2018/04/26 17:51:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040)="5e88a3c6", 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/26 17:51:58 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x2dc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0xffffffffffffffdd) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/26 17:51:58 executing program 2: 2018/04/26 17:51:58 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'team_slave_1\x00'}, 0x18) 2018/04/26 17:51:58 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a09ff1)='net/ipv6_route\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e37ff4)={0x20000005}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 2018/04/26 17:51:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f000051f000)='./file0\x00', 0x40, 0x40) execveat(r0, &(0x7f0000001ff8)='./file0\x00', &(0x7f0000000ff0), &(0x7f0000001fe4)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000001000)="747275737465641e00", &(0x7f0000001fff)='\x00'], 0x1000) 2018/04/26 17:51:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x1) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x4}) ioctl(r0, 0x1, &(0x7f0000007000)) 2018/04/26 17:51:58 executing program 3: clone(0x0, &(0x7f0000a43000), &(0x7f00004c4000), &(0x7f000052c15e), &(0x7f0000a07000)) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/04/26 17:51:58 executing program 4: 2018/04/26 17:51:59 executing program 0: 2018/04/26 17:51:59 executing program 6: 2018/04/26 17:51:59 executing program 4: 2018/04/26 17:51:59 executing program 0: 2018/04/26 17:51:59 executing program 6: 2018/04/26 17:51:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f000051f000)='./file0\x00', 0x40, 0x40) execveat(r0, &(0x7f0000001ff8)='./file0\x00', &(0x7f0000000ff0), &(0x7f0000001fe4)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000001000)="747275737465641e00", &(0x7f0000001fff)='\x00'], 0x1000) 2018/04/26 17:51:59 executing program 2: 2018/04/26 17:51:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x1) ioctl(r0, 0x1, &(0x7f0000007000)) 2018/04/26 17:51:59 executing program 3: 2018/04/26 17:51:59 executing program 4: 2018/04/26 17:51:59 executing program 0: 2018/04/26 17:51:59 executing program 2: 2018/04/26 17:51:59 executing program 6: 2018/04/26 17:51:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f000051f000)='./file0\x00', 0x40, 0x40) execveat(r0, &(0x7f0000001ff8)='./file0\x00', &(0x7f0000000ff0), &(0x7f0000001fe4)=[&(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000001000)="747275737465641e00", &(0x7f0000001fff)='\x00'], 0x1000) 2018/04/26 17:51:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x1) ioctl(r0, 0x1, &(0x7f0000007000)) 2018/04/26 17:51:59 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x2dc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0xffffffffffffffdd) sendto$inet(r0, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/26 17:51:59 executing program 6: 2018/04/26 17:51:59 executing program 3: [ 93.181248] ================================================================== [ 93.182041] BUG: KMSAN: uninit-value in tcp_ack+0x6eb3/0x8800 [ 93.182041] CPU: 1 PID: 6879 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 93.182041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.182041] Call Trace: [ 93.182041] dump_stack+0x185/0x1d0 [ 93.182041] ? tcp_ack+0x6eb3/0x8800 [ 93.182041] kmsan_report+0x142/0x240 [ 93.182041] __msan_warning_32+0x6c/0xb0 [ 93.182041] tcp_ack+0x6eb3/0x8800 [ 93.182041] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 93.182041] ? tcp_parse_options+0x1be9/0x1c70 [ 93.182041] ? is_console_locked+0x14/0x50 [ 93.182041] ? kmsan_report+0x4c/0x240 [ 93.182041] tcp_rcv_established+0xfc1/0x2bb0 [ 93.182041] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 93.182041] tcp_v4_do_rcv+0x6cd/0xd90 [ 93.182041] ? inet_sk_rx_dst_set+0x2c0/0x2c0 [ 93.182041] __release_sock+0x2d6/0x680 [ 93.182041] __sk_flush_backlog+0x52/0x70 [ 93.182041] ? tcp_v4_init_sock+0xc0/0xc0 [ 93.182041] tcp_sendmsg_locked+0xcbc/0x6cf0 [ 93.182041] tcp_sendmsg+0xb2/0x100 [ 93.182041] ? tcp_sendmsg_locked+0x6cf0/0x6cf0 [ 93.182041] inet_sendmsg+0x48d/0x740 [ 93.182041] ? security_socket_sendmsg+0x9e/0x210 [ 93.182041] ? inet_getname+0x500/0x500 [ 93.182041] SYSC_sendto+0x6c3/0x7e0 [ 93.182041] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 93.182041] ? prepare_exit_to_usermode+0x149/0x3a0 [ 93.182041] SyS_sendto+0x8a/0xb0 [ 93.182041] do_syscall_64+0x309/0x430 [ 93.182041] ? SYSC_getpeername+0x560/0x560 [ 93.182041] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 93.182041] RIP: 0033:0x455389 [ 93.182041] RSP: 002b:00007fd13dda4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 93.182041] RAX: ffffffffffffffda RBX: 00007fd13dda56d4 RCX: 0000000000455389 [ 93.182041] RDX: 000000000000fda0 RSI: 0000000020fd0000 RDI: 0000000000000013 [ 93.182041] RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000010 [ 93.182041] R10: 0000000020000800 R11: 0000000000000246 R12: 00000000ffffffff [ 93.182041] R13: 0000000000000500 R14: 00000000006fa8a0 R15: 0000000000000000 [ 93.182041] [ 93.182041] Uninit was stored to memory at: [ 93.182041] kmsan_internal_chain_origin+0x12b/0x210 [ 93.182041] kmsan_memcpy_origins+0x11d/0x170 [ 93.182041] __msan_memcpy+0x109/0x160 [ 93.182041] pskb_expand_head+0x3a6/0x1a70 [ 93.182041] ___pskb_trim+0x2e8/0x1ae0 [ 93.182041] sk_filter_trim_cap+0x50f/0xa00 [ 93.182041] tcp_v4_rcv+0x510f/0x6af0 [ 93.182041] ip_local_deliver_finish+0x874/0xec0 [ 93.182041] ip_local_deliver+0x43c/0x4e0 [ 93.182041] ip_rcv_finish+0xa36/0x1d00 [ 93.182041] ip_rcv+0x118f/0x16d0 [ 93.182041] __netif_receive_skb_core+0x47df/0x4a90 [ 93.182041] process_backlog+0x62d/0xe20 [ 93.182041] net_rx_action+0x7c1/0x1a70 [ 93.182041] __do_softirq+0x56d/0x93d [ 93.182041] Uninit was created at: [ 93.182041] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 93.182041] kmsan_kmalloc+0x94/0x100 [ 93.182041] kmsan_slab_alloc+0x11/0x20 [ 93.182041] __kmalloc_node_track_caller+0xaed/0x11c0 [ 93.182041] __alloc_skb+0x2cf/0x9f0 [ 93.182041] sk_stream_alloc_skb+0x17c/0xcf0 [ 93.182041] tcp_write_xmit+0x1d78/0xb920 [ 93.182041] __tcp_push_pending_frames+0x124/0x3f0 [ 93.182041] tcp_data_snd_check+0x184/0xe30 [ 93.182041] tcp_rcv_established+0x1977/0x2bb0 [ 93.182041] tcp_v4_do_rcv+0x6cd/0xd90 [ 93.182041] __release_sock+0x2d6/0x680 [ 93.182041] __sk_flush_backlog+0x52/0x70 [ 93.182041] tcp_sendmsg_locked+0xcbc/0x6cf0 [ 93.182041] tcp_sendmsg+0xb2/0x100 [ 93.182041] inet_sendmsg+0x48d/0x740 [ 93.182041] SYSC_sendto+0x6c3/0x7e0 [ 93.182041] SyS_sendto+0x8a/0xb0 [ 93.182041] do_syscall_64+0x309/0x430 [ 93.182041] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 93.182041] ================================================================== [ 93.182041] Disabling lock debugging due to kernel taint [ 93.182041] Kernel panic - not syncing: panic_on_warn set ... [ 93.182041] [ 93.182041] CPU: 1 PID: 6879 Comm: syz-executor7 Tainted: G B 4.16.0+ #87 [ 93.182041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.182041] Call Trace: [ 93.182041] dump_stack+0x185/0x1d0 [ 93.182041] panic+0x39d/0x940 [ 93.182041] ? tcp_ack+0x6eb3/0x8800 [ 93.182041] kmsan_report+0x238/0x240 [ 93.182041] __msan_warning_32+0x6c/0xb0 [ 93.182041] tcp_ack+0x6eb3/0x8800 [ 93.182041] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 93.182041] ? tcp_parse_options+0x1be9/0x1c70 [ 93.182041] ? is_console_locked+0x14/0x50 [ 93.182041] ? kmsan_report+0x4c/0x240 [ 93.182041] tcp_rcv_established+0xfc1/0x2bb0 [ 93.182041] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 93.182041] tcp_v4_do_rcv+0x6cd/0xd90 [ 93.182041] ? inet_sk_rx_dst_set+0x2c0/0x2c0 [ 93.182041] __release_sock+0x2d6/0x680 [ 93.182041] __sk_flush_backlog+0x52/0x70 [ 93.182041] ? tcp_v4_init_sock+0xc0/0xc0 [ 93.182041] tcp_sendmsg_locked+0xcbc/0x6cf0 [ 93.182041] tcp_sendmsg+0xb2/0x100 [ 93.182041] ? tcp_sendmsg_locked+0x6cf0/0x6cf0 [ 93.182041] inet_sendmsg+0x48d/0x740 [ 93.182041] ? security_socket_sendmsg+0x9e/0x210 [ 93.182041] ? inet_getname+0x500/0x500 [ 93.182041] SYSC_sendto+0x6c3/0x7e0 [ 93.182041] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 93.182041] ? prepare_exit_to_usermode+0x149/0x3a0 [ 93.182041] SyS_sendto+0x8a/0xb0 [ 93.182041] do_syscall_64+0x309/0x430 [ 93.182041] ? SYSC_getpeername+0x560/0x560 [ 93.182041] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 93.182041] RIP: 0033:0x455389 [ 93.182041] RSP: 002b:00007fd13dda4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 93.182041] RAX: ffffffffffffffda RBX: 00007fd13dda56d4 RCX: 0000000000455389 [ 93.182041] RDX: 000000000000fda0 RSI: 0000000020fd0000 RDI: 0000000000000013 [ 93.182041] RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000010 [ 93.182041] R10: 0000000020000800 R11: 0000000000000246 R12: 00000000ffffffff [ 93.182041] R13: 0000000000000500 R14: 00000000006fa8a0 R15: 0000000000000000 [ 93.182041] Dumping ftrace buffer: [ 93.182041] (ftrace buffer empty) [ 93.182041] Kernel Offset: disabled [ 93.182041] Rebooting in 86400 seconds..