[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.543672] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 30.262171] random: sshd: uninitialized urandom read (32 bytes read) [ 30.682515] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.997825] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. [ 37.500631] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/06 11:00:10 fuzzer started [ 38.813630] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/06 11:00:12 dialing manager at 10.128.0.26:33811 [ 62.842356] can: request_module (can-proto-0) failed. [ 62.853145] can: request_module (can-proto-0) failed. 2018/06/06 11:00:37 kcov=true, comps=false 2018/06/06 11:00:43 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 2018/06/06 11:00:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2, 0x1ff}, [{}]}, 0x78) 2018/06/06 11:00:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 2018/06/06 11:00:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r0, &(0x7f000000d600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)="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", 0x5c1}], 0x1, &(0x7f0000002940)=ANY=[]}}], 0x1, 0x0) 2018/06/06 11:00:43 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x9) 2018/06/06 11:00:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) 2018/06/06 11:00:43 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x200031, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) 2018/06/06 11:00:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)="646374637000d3c221b7a734beb26bffb3c3f07ac167cda9fab4947dc493331d35f6f2035f5cdff72458fff24a17802e7b5e406572239195a596615ac2cc3783b9aaff42433f800e401c1c9f9830da9ad044294cbf3efe0c2a2fc699124233b70f2148c967ffea44f21262eaf3bbcc084295fef55e63935469338be8eeed967da16f0a46ff8550fd9a510fabf6305599048981fc265b58c4e179de7433a7e292d458eed10056b66c41dbf3c7428a86759807c35e6393c7813d5b40c061327414aa36", 0x46) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007fd, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0) sendto$inet(r0, &(0x7f00000001c0)="a0", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 71.131784] IPVS: ftp: loaded support on port[0] = 21 [ 71.135372] IPVS: ftp: loaded support on port[0] = 21 [ 71.172745] IPVS: ftp: loaded support on port[0] = 21 [ 71.185159] IPVS: ftp: loaded support on port[0] = 21 [ 71.186779] IPVS: ftp: loaded support on port[0] = 21 [ 71.237563] IPVS: ftp: loaded support on port[0] = 21 [ 71.239491] IPVS: ftp: loaded support on port[0] = 21 [ 71.273482] IPVS: ftp: loaded support on port[0] = 21 [ 73.092255] ip (4706) used greatest stack depth: 54536 bytes left [ 73.163512] ip (4713) used greatest stack depth: 54520 bytes left [ 73.634882] ip (4749) used greatest stack depth: 54376 bytes left [ 73.776335] ip (4758) used greatest stack depth: 54280 bytes left [ 73.809622] ip (4764) used greatest stack depth: 53768 bytes left [ 74.371931] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.378408] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.424195] device bridge_slave_0 entered promiscuous mode [ 74.552773] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.559233] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.611386] device bridge_slave_0 entered promiscuous mode [ 74.634520] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.640972] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.657751] device bridge_slave_1 entered promiscuous mode [ 74.671553] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.678086] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.685607] device bridge_slave_0 entered promiscuous mode [ 74.696424] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.702893] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.740507] device bridge_slave_0 entered promiscuous mode [ 74.751374] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.757828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.765679] device bridge_slave_0 entered promiscuous mode [ 74.776134] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.782623] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.802981] device bridge_slave_0 entered promiscuous mode [ 74.839820] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.846276] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.855954] device bridge_slave_1 entered promiscuous mode [ 74.868146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.875915] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.882371] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.908682] device bridge_slave_1 entered promiscuous mode [ 74.923101] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.929524] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.954194] device bridge_slave_1 entered promiscuous mode [ 74.973259] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.979745] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.000980] device bridge_slave_0 entered promiscuous mode [ 75.019277] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.025736] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.043732] device bridge_slave_1 entered promiscuous mode [ 75.066441] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.072869] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.082660] device bridge_slave_1 entered promiscuous mode [ 75.089756] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.096229] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.112822] device bridge_slave_0 entered promiscuous mode [ 75.121571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.129609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.149341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.163168] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.169580] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.203654] device bridge_slave_1 entered promiscuous mode [ 75.234885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.245700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.278922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.295733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.310829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.355652] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.362118] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.389095] device bridge_slave_1 entered promiscuous mode [ 75.412468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.420761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.490605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.549302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.595388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.625811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.747172] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 75.825772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.965272] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.988766] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 75.999141] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.014212] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.094018] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.162886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.191027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.201866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.219553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.262187] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.280708] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.289863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.335234] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.376413] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.421430] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.469693] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.490688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.497922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.512951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.526797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.541898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.553740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.560706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.601346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.642074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.652150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.662210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.679581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.705548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.712527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.744971] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.770277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.777490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.790163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.798164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.834644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.841651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.857534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.872360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.962456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.969386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.000894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.009332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.158560] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.185672] team0: Port device team_slave_0 added [ 77.223728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.239520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.254853] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.273803] team0: Port device team_slave_0 added [ 77.373960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.404182] team0: Port device team_slave_1 added [ 77.469228] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.495556] team0: Port device team_slave_0 added [ 77.523198] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.539282] team0: Port device team_slave_0 added [ 77.546820] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.555355] team0: Port device team_slave_0 added [ 77.562294] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.578421] team0: Port device team_slave_0 added [ 77.585358] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.592952] team0: Port device team_slave_1 added [ 77.615829] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.637460] team0: Port device team_slave_0 added [ 77.654336] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.672621] team0: Port device team_slave_1 added [ 77.698339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 77.705458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.736231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.786595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.803302] team0: Port device team_slave_1 added [ 77.815884] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.826984] team0: Port device team_slave_1 added [ 77.834456] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.849756] team0: Port device team_slave_1 added [ 77.862093] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.872679] team0: Port device team_slave_1 added [ 77.892888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 77.900436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.907805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 77.914680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.952340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.983788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.010922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.030677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.039519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.047603] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.054997] team0: Port device team_slave_0 added [ 78.066546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.078927] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.095788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.116823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.142366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.159621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.169800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.178873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.186397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.193951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.206097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.226386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.245935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.260851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.272572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.285858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.299639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.310737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.319241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.327653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.342191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.356815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.375647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.384261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.403181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.425751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.450596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.464705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.472622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.480615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.489594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.498646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.508407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.517785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.535326] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.544901] team0: Port device team_slave_1 added [ 78.551851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.571929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.581948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.598999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.619145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.637867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.646910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.654469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.661718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.681142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.714803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.739771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.756819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.766491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.793778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.807459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.814836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.832339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.849725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.866087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.874672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.883047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.891557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.901897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.915065] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.923460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.932909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.958996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.981634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.005374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.018326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.032749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.042105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.049095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.057739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.107515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.114969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.126101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.161142] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.176919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.211655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.255218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.262428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.289628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.401069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.408488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.420440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.637504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.645009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.662068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.072963] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.079412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.086245] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.092667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.117480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.130246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.301245] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.307691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.314434] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.320856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.335812] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.364385] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.370821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.377611] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.384094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.421942] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.428498] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.434946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.441714] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.448166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.457688] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.465751] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.472169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.478922] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.485331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.501101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.509403] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.515796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.522543] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.528948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.539681] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.583421] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.589854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.596634] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.603068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.660903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.059325] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.065773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.072568] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.079005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.093977] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.143459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.155302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.198218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.228887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.250707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.272775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.295365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.406899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.797869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.880789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.910131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.929097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.967347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.219201] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.278878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.533829] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.629396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.681343] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.720755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.736292] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.778814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.931922] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.938287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.948730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.127625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.382836] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.399641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.405853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.437268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.477251] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.483595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.517195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.553294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.565189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.577719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.608945] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.621374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.642751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.673510] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.681684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.689624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.735052] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.987493] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.993798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.009194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.262188] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.268448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.276950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.309509] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.331773] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.351246] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.375470] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.576678] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.810815] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.984278] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/06 11:01:09 executing program 7: accept4$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=0x6e, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2018/06/06 11:01:09 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)) 2018/06/06 11:01:10 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x9) 2018/06/06 11:01:10 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)) 2018/06/06 11:01:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x6, 0x0) getpgid(0xffffffffffffffff) wait4(0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 2018/06/06 11:01:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)) 2018/06/06 11:01:11 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000000), &(0x7f0000000480)=[{0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000340)='./file1/file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000600)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file1\x00', 0x0) umount2(&(0x7f0000000180)='../file0\x00', 0x2) mkdir(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='/\x00') 2018/06/06 11:01:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x6, 0x0) getpgid(0xffffffffffffffff) wait4(0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 2018/06/06 11:01:11 executing program 7: r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x170, [0x20000c00, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f00000004c0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'bpq0\x00', 'team0\x00', 'syz_tun\x00', @random="31b508d91ff4", [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}]}, 0x1e8) 2018/06/06 11:01:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)="646374637000d3c221b7a734beb26bffb3c3f07ac167cda9fab4947dc493331d35f6f2035f5cdff72458fff24a17802e7b5e406572239195a596615ac2cc3783b9aaff42433f800e401c1c9f9830da9ad044294cbf3efe0c2a2fc699124233b70f2148c967ffea44f21262eaf3bbcc084295fef55e63935469338be8eeed967da16f0a46ff8550fd9a510fabf6305599048981fc265b58c4e179de7433a7e292d458eed10056b66c41dbf3c7428a86759807c35e6393c7813d5b40c061327414aa36", 0x46) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007fd, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0) sendto$inet(r0, &(0x7f00000001c0)="a0", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/06 11:01:11 executing program 6: clone(0x0, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000300)}, 0x10) 2018/06/06 11:01:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'btrfs.', 'nodev%cgroup\x00'}) 2018/06/06 11:01:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") clock_gettime(0x0, &(0x7f0000000000)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) ioprio_set$uid(0x0, 0x0, 0x10001) 2018/06/06 11:01:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x3100000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 2018/06/06 11:01:11 executing program 2: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2={0xff, 0x2, [], 0x1}, 0x81, 0x0, 0x2, 0x2, 0x7cd6, 0x7f, 0x7}, &(0x7f0000000340)=0x20) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) epoll_pwait(r1, &(0x7f0000000440), 0x0, 0x40, &(0x7f0000000480)={0x6b6}, 0x8) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="ad", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x10001) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000400), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xcba7, 0x25, 0x8000}, &(0x7f0000000140)=0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x80602, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x0, 0x5, @local={0xfe, 0x80, [], 0xaa}}}, 0x7, 0x8000, 0x80, 0x9c, 0x8}, 0x98) 2018/06/06 11:01:11 executing program 5: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) 2018/06/06 11:01:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x3100000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20084}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90, 0x7}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 2018/06/06 11:01:12 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000000), &(0x7f0000000480)=[{0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000340)='./file1/file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000600)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file1\x00', 0x0) umount2(&(0x7f0000000180)='../file0\x00', 0x2) mkdir(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='/\x00') 2018/06/06 11:01:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{}, {}, {0x0, '\x00', 0x2}]}, 0x108) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x2, &(0x7f0000008000), &(0x7f0000000240)=ANY=[]}, 0x78) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in, @in6=@local}}, {{}, 0x0, @in6=@local}}, &(0x7f00000006c0)=0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000002c0)=""/196) listen(r1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x2, 0x4) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/218) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0), &(0x7f0000000140)=0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280), 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) r4 = dup2(r1, r2) dup2(r4, r3) 2018/06/06 11:01:12 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)) timer_gettime(0x0, &(0x7f00000002c0)) 2018/06/06 11:01:12 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) timer_getoverrun(0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) 2018/06/06 11:01:12 executing program 6: r0 = socket$inet(0x2, 0x4000000000000003, 0x3) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, &(0x7f0000000000), &(0x7f0000000180)=[{}, {}, {}]}, 0x108) 2018/06/06 11:01:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)="646374637000d3c221b7a734beb26bffb3c3f07ac167cda9fab4947dc493331d35f6f2035f5cdff72458fff24a17802e7b5e406572239195a596615ac2cc3783b9aaff42433f800e401c1c9f9830da9ad044294cbf3efe0c2a2fc699124233b70f2148c967ffea44f21262eaf3bbcc084295fef55e63935469338be8eeed967da16f0a46ff8550fd9a510fabf6305599048981fc265b58c4e179de7433a7e292d458eed10056b66c41dbf3c7428a86759807c35e6393c7813d5b40c061327414aa36", 0x46) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007fd, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0) sendto$inet(r0, &(0x7f00000001c0)="a0", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/06 11:01:12 executing program 5: semget(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)={@rand_addr, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'irlan0\x00'}, 0x18) memfd_create(&(0x7f0000000a40)='vmnet1^wlan0mime_type\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'team_slave_1\x00'}, 0x18) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) [ 99.524671] kernel msg: ebtables bug: please report to author: bad policy 2018/06/06 11:01:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_mr_vif\x00') 2018/06/06 11:01:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff}, 0x1c) 2018/06/06 11:01:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_open_dev$mice(&(0x7f0000001b00)='/dev/input/mice\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x995ba2d8201dca0b}, 0xc) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000040)=""/73, 0x49}, {&(0x7f00000013c0)=""/131, 0x83}, {&(0x7f0000001480)=""/158, 0x9e}, {&(0x7f0000001540)=""/233, 0xe9}, {&(0x7f0000001640)=""/148, 0x94}], 0x5, &(0x7f00000017c0)=""/78, 0x4e, 0x401}}], 0x1, 0x0, &(0x7f0000001ac0)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) [ 99.609760] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 99.609852] IPVS: stopping master sync thread 6713 ... 2018/06/06 11:01:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="ad", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x10001) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3095ac6af14d2d6eb19007df8e1290a951871b18a113bb8e1ce02333"], 0x1f) 2018/06/06 11:01:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 99.672976] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 99.735088] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 99.744458] IPVS: stopping master sync thread 6725 ... [ 99.851364] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 100.585785] ================================================================== [ 100.593191] BUG: KMSAN: uninit-value in _copy_to_iter+0x1b14/0x2800 [ 100.599580] CPU: 0 PID: 6732 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 100.606832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.616163] Call Trace: [ 100.618737] dump_stack+0x185/0x1d0 [ 100.622391] ? kmsan_internal_check_memory+0x116/0x1e0 [ 100.627648] kmsan_report+0x149/0x260 [ 100.631431] kmsan_internal_check_memory+0x135/0x1e0 [ 100.636527] kmsan_copy_to_user+0x75/0x160 [ 100.640740] ? _copy_to_iter+0x92/0x2800 [ 100.644798] _copy_to_iter+0x1b14/0x2800 [ 100.648854] skb_copy_datagram_iter+0x443/0xf70 [ 100.653514] netlink_recvmsg+0x6f1/0x1900 [ 100.657661] sock_recvmsg+0x1d0/0x230 [ 100.661449] ? netlink_sendmsg+0x1350/0x1350 [ 100.665835] ___sys_recvmsg+0x3fb/0x810 [ 100.669792] ? __fget_light+0x57/0x700 [ 100.673669] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 100.679058] ? __fget_light+0x6a3/0x700 [ 100.683035] __sys_recvmmsg+0x58e/0xe30 [ 100.687010] ? kmsan_set_origin+0x9e/0x160 [ 100.691226] do_sys_recvmmsg+0x2a6/0x3e0 [ 100.695273] __x64_sys_recvmmsg+0x15d/0x1c0 [ 100.699578] do_syscall_64+0x152/0x230 [ 100.703461] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.708635] RIP: 0033:0x455a09 [ 100.711801] RSP: 002b:00007f9920bcbc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 100.719500] RAX: ffffffffffffffda RBX: 00007f9920bcc6d4 RCX: 0000000000455a09 [ 100.726753] RDX: 0000000000000001 RSI: 0000000020001a40 RDI: 0000000000000016 [ 100.734001] RBP: 000000000072bea0 R08: 0000000020001ac0 R09: 0000000000000000 [ 100.741258] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 100.748508] R13: 0000000000000574 R14: 00000000006fd380 R15: 0000000000000000 [ 100.755762] [ 100.757364] Uninit was stored to memory at: [ 100.761673] kmsan_internal_chain_origin+0x12b/0x210 [ 100.766761] kmsan_memcpy_origins+0x11d/0x170 [ 100.771236] __msan_memcpy+0x109/0x160 [ 100.775108] nla_put+0x276/0x340 [ 100.778457] xfrm_send_acquire+0x1068/0x1690 [ 100.782843] xfrm_state_find+0x3aae/0x4f70 [ 100.787063] xfrm_resolve_and_create_bundle+0xc31/0x5270 [ 100.792497] xfrm_lookup+0x606/0x39e0 [ 100.796277] xfrm_lookup_route+0xfa/0x360 [ 100.800418] ip_route_output_flow+0x35b/0x3b0 [ 100.804895] udp_sendmsg+0x2499/0x33d0 [ 100.808764] udpv6_sendmsg+0x1291/0x3f40 [ 100.812802] inet_sendmsg+0x3f7/0x750 [ 100.816587] ___sys_sendmsg+0xec0/0x1310 [ 100.820630] __x64_sys_sendmsg+0x331/0x460 [ 100.824853] do_syscall_64+0x152/0x230 [ 100.828725] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.833894] Local variable description: ----upt.i.i@xfrm_send_acquire [ 100.840453] Variable was created at: [ 100.844150] xfrm_send_acquire+0x73/0x1690 [ 100.848368] xfrm_state_find+0x3aae/0x4f70 [ 100.852575] [ 100.854179] Byte 7 of 14 is uninitialized [ 100.858302] Memory access starts at ffff88013a10316a [ 100.863379] ================================================================== [ 100.870713] Disabling lock debugging due to kernel taint [ 100.876139] Kernel panic - not syncing: panic_on_warn set ... [ 100.876139] [ 100.883489] CPU: 0 PID: 6732 Comm: syz-executor7 Tainted: G B 4.17.0-rc5+ #103 [ 100.892125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.901460] Call Trace: [ 100.904037] dump_stack+0x185/0x1d0 [ 100.907649] panic+0x39d/0x940 [ 100.910842] ? kmsan_internal_check_memory+0x116/0x1e0 [ 100.916100] kmsan_report+0x260/0x260 [ 100.919885] kmsan_internal_check_memory+0x135/0x1e0 [ 100.924972] kmsan_copy_to_user+0x75/0x160 [ 100.929191] ? _copy_to_iter+0x92/0x2800 [ 100.933233] _copy_to_iter+0x1b14/0x2800 [ 100.937284] skb_copy_datagram_iter+0x443/0xf70 [ 100.941941] netlink_recvmsg+0x6f1/0x1900 [ 100.946076] sock_recvmsg+0x1d0/0x230 [ 100.949857] ? netlink_sendmsg+0x1350/0x1350 [ 100.954249] ___sys_recvmsg+0x3fb/0x810 [ 100.958212] ? __fget_light+0x57/0x700 [ 100.962082] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 100.967424] ? __fget_light+0x6a3/0x700 [ 100.971382] __sys_recvmmsg+0x58e/0xe30 [ 100.975343] ? kmsan_set_origin+0x9e/0x160 [ 100.979563] do_sys_recvmmsg+0x2a6/0x3e0 [ 100.983604] __x64_sys_recvmmsg+0x15d/0x1c0 [ 100.987908] do_syscall_64+0x152/0x230 [ 100.991780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.996948] RIP: 0033:0x455a09 [ 101.000116] RSP: 002b:00007f9920bcbc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 101.007805] RAX: ffffffffffffffda RBX: 00007f9920bcc6d4 RCX: 0000000000455a09 [ 101.015059] RDX: 0000000000000001 RSI: 0000000020001a40 RDI: 0000000000000016 [ 101.022315] RBP: 000000000072bea0 R08: 0000000020001ac0 R09: 0000000000000000 [ 101.029565] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 101.036815] R13: 0000000000000574 R14: 00000000006fd380 R15: 0000000000000000 [ 101.044541] Dumping ftrace buffer: [ 101.048061] (ftrace buffer empty) [ 101.051747] Kernel Offset: disabled [ 101.055359] Rebooting in 86400 seconds..