INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. 2018/04/13 15:45:24 fuzzer started 2018/04/13 15:45:24 dialing manager at 10.128.0.26:33379 2018/04/13 15:45:30 kcov=true, comps=false 2018/04/13 15:45:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvfrom(r1, &(0x7f0000000140)=""/76, 0x4c, 0x0, &(0x7f00000001c0)=@nfc={0x27}, 0x80) poll(&(0x7f0000000000)=[{r1, 0xc1a6}], 0x20000000000000ac, 0x0) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:45:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001040)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001080), &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) fstatfs(r0, &(0x7f0000000040)=""/4096) 2018/04/13 15:45:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000bf4000)={&(0x7f000068f000)={0x10}, 0xc, &(0x7f0000197000)={&(0x7f00003f8000)=ANY=[@ANYBLOB="6c010000170015030000000000000000ac14ffaa0000000000000000000000000000000000000000ac14ffbb000000000200000000000000ff010000000000000000000000000001ac14ffaa00000000000000000000000000000000000000000000000000000008", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500e0000002000000000000000000000000000000000000000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000"], 0x5}, 0x1}, 0x0) 2018/04/13 15:45:33 executing program 2: unshare(0x6000000) unshare(0x2000000) 2018/04/13 15:45:33 executing program 3: setitimer(0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2018/04/13 15:45:33 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x40000008001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa1ff}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)=0x1) write$tun(r1, &(0x7f0000000100)={@void, @hdr={0x0, 0x0, 0x0, 0xc1}, @eth={@empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "e84006d06944fedec8d1962f979a4a005ef88ec16c9a22fc2aa385bfaaee5fabfb56e26ebdcfd0f784888811bdbd6b9f4e4973833c8d3c9e878dabd5784aa95d"}}}}}, 0x60) 2018/04/13 15:45:33 executing program 5: unshare(0x40000000) r0 = socket$inet(0x2, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) 2018/04/13 15:45:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000690ffc)=0x77, 0xfc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00007f3ffb)='lp\x00', 0x3) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) syzkaller login: [ 45.733819] ip (3822) used greatest stack depth: 54312 bytes left [ 46.540211] ip (3902) used greatest stack depth: 54200 bytes left [ 46.603211] ip (3907) used greatest stack depth: 53960 bytes left [ 46.862548] ip (3924) used greatest stack depth: 53640 bytes left [ 46.925105] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.931631] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.978999] device bridge_slave_0 entered promiscuous mode [ 47.020881] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.027409] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.051449] device bridge_slave_0 entered promiscuous mode [ 47.084973] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.091467] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.121790] device bridge_slave_0 entered promiscuous mode [ 47.134317] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.140828] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.154202] device bridge_slave_0 entered promiscuous mode [ 47.176551] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.183082] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.200472] device bridge_slave_0 entered promiscuous mode [ 47.209191] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.215659] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.239519] device bridge_slave_0 entered promiscuous mode [ 47.258782] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.265247] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.281959] device bridge_slave_1 entered promiscuous mode [ 47.289308] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.295761] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.315925] device bridge_slave_1 entered promiscuous mode [ 47.324830] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.331278] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.343009] device bridge_slave_0 entered promiscuous mode [ 47.354736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.361188] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.368842] device bridge_slave_0 entered promiscuous mode [ 47.379086] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.385582] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.413064] device bridge_slave_1 entered promiscuous mode [ 47.428776] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.435240] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.461849] device bridge_slave_1 entered promiscuous mode [ 47.471176] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.477628] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.492615] device bridge_slave_1 entered promiscuous mode [ 47.499330] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.505783] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.529315] device bridge_slave_1 entered promiscuous mode [ 47.541724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.551811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.559925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.567531] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.574011] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.608163] device bridge_slave_1 entered promiscuous mode [ 47.614948] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.621473] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.655392] device bridge_slave_1 entered promiscuous mode [ 47.680952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.695240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.707535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.733203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.741921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.752132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.871958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.882372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.889952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.916478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.923836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.081817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.089803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.734193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.779236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.820299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.942083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.950886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.980114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.994166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.002893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.017001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.039940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.056131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.158105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.227372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.237085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.247927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.255877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.954397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.984962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.092002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.157776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.171420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.187641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.229501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.244850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.283471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.298763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.376570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.385489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.400838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.425171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.438534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.449017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.456837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.467785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.499183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.518157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.536462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.543633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.554809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.564695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.574925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.584249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.611824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.642740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.654126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.661751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.679193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.730088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.737263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.767313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.792226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.802801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.818825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.838293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.846395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.859292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.868306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.885622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.898963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.922152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.929281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.951618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.960695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.985219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.992377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.027993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.059783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.083872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.105869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.113987] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.121605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.135720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.151625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.167995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.188523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.195805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.208665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.228529] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.280650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.307307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.160590] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.167135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.174129] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.180623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.223357] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.229917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.263641] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.270122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.276937] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.283412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.292564] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.318341] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.324844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.331757] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.338223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.405902] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.447298] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.453794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.460671] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.467169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.507103] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.520671] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.527134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.533989] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.540465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.552151] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.561933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.568589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.575459] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.581902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.618929] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.632068] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.638516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.645335] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.651769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.663186] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.686958] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.693481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.700429] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.706906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.771003] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.239178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.252798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.290700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.317706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.328691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.338430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.345986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.507534] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.662956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.847813] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.941778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.961679] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.083091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.179779] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.280234] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.315165] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.321478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.334718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.589142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.595399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.608714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.656784] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.663153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.681334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.835930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.844022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.860692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.909979] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.916599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.928589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.960024] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.968386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.984948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.026893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.041556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.059801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.089436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.095944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.109750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 15:46:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x3, 0x8, 0x2, 0x0, 0x0, @in={0x2, 0x0, @multicast2=0xe0000002}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x88}, 0x1}, 0x0) 2018/04/13 15:46:00 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x10, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) [ 69.691698] sctp: [Deprecated]: syz-executor3 (pid 5747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.691698] Use struct sctp_sack_info instead 2018/04/13 15:46:00 executing program 5: unshare(0x40000000) r0 = socket$inet(0x2, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) 2018/04/13 15:46:00 executing program 1: unshare(0x40000000) r0 = socket$inet(0x2, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) 2018/04/13 15:46:00 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x10c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) [ 69.960860] device ifb0 entered promiscuous mode 2018/04/13 15:46:01 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x800000000000009, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) write$eventfd(r0, &(0x7f000000aff8)=0xfffffffffffffffa, 0x8) read$eventfd(r0, &(0x7f0000f3c000), 0x8) 2018/04/13 15:46:01 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x40000008001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa1ff}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)=0x1) write$tun(r1, &(0x7f0000000100)={@void, @hdr={0x0, 0x0, 0x0, 0xc1, 0x52}, @eth={@empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "e84006d06944fedec8d1962f979a4a005ef88ec16c9a22fc2aa385bfaaee5fabfb56e26ebdcfd0f784888811bdbd6b9f4e4973833c8d3c9e878dabd5784aa95d"}}}}}, 0x60) 2018/04/13 15:46:01 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x1c, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) [ 70.310806] device ifb0 entered promiscuous mode 2018/04/13 15:46:02 executing program 2: unshare(0x40000000) r0 = socket$inet(0x2, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) 2018/04/13 15:46:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvfrom(r1, &(0x7f0000000140)=""/76, 0x4c, 0x0, &(0x7f00000001c0)=@nfc={0x27}, 0x80) poll(&(0x7f0000000000)=[{r1, 0xc1a6}], 0x20000000000000ac, 0x0) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:46:02 executing program 7: r0 = socket$inet(0x2, 0x80003, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x2, 0x394, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000580), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x15, 0x0, 0x0, 'syzkaller0\x00', 'ipddp0\x00', '\x00', 'bcsf0\x00', @empty, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xc0, 0xe8}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}, {{{0x9, 0x0, 0x0, 'veth0\x00', 'sit0\x00', "69847c2e6e300000008000e6561b74fb", 'sit0\x00', @empty, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x1c0, 0x1c0, 0x1ec, [@cpu={'cpu\x00', 0x8}, @comment={'comment\x00', 0x100}]}}, @common=@mark={'mark\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x438) 2018/04/13 15:46:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000003b40)}, 0x0) 2018/04/13 15:46:02 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x72, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) 2018/04/13 15:46:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000900)={&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000000800)}, 0x0) 2018/04/13 15:46:02 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000010000000000060012009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$MAP_CREATE(0xf, &(0x7f0000000040), 0xd) 2018/04/13 15:46:02 executing program 1: unshare(0x40000000) r0 = socket$inet(0x2, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) 2018/04/13 15:46:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d298ed236687") 2018/04/13 15:46:02 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0xd, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) 2018/04/13 15:46:02 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000005, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/13 15:46:02 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='\x00', 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 2018/04/13 15:46:02 executing program 6: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x1d, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) [ 71.511744] device lo entered promiscuous mode 2018/04/13 15:46:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/04/13 15:46:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="acecbbaf6f7d3c3b641496c0932f8fbb80686269cd7962b854941b2db401574ba5f20ff219c3dd7ec4eaff6fab0d5e003f7bfdfed4e92253e2b3070d0d9d11940300004000000000c1e44f660800000000000000ef82bd233d56575b35fe2ef7235eb344dd551508fbc0e7c268ee2556196ca45ab1d0e88faf315422dfaf9c976485a025587e68108097720c111dabefd3aa6968b07a3df83f50c902652caa96e171adbdecf318cff7bc5a07ec85a7b0de0e740b49f0c983b1fc7363d449958bb9592a5b5e2f64d6f68d9ebf81d58de8afea748afdcff03d3608fab2140df236d765c2f4a587179ae398cbef1413f72f58a9bd262a6d91dffc970fffccd36df618072d3532189e5dfd0e8a3aabb8fb5b0893e11bbb546297e08abbb2b07603193300888957f54b5087e3fac678cf1279ce0969f48a2251a45cd77f3654fc3941538243dc26237ac0a08aad60087f00b8a32cf38f9ce69d96a740c6482b1b70270000000000000101bf3cb5320b7ff6e93844dde2e9549613385ed2a2d50624f55227ac946250111d4b0200000060190e9f206675ddf31057a55368d41fc2e344092cb9adc6bd00bec0130e7fd48c74e1f089f1f6e8b7f82d8120b4412c9ad9265e5ae0633dd3e7213edc07b514671c42a7de44440d5e6669c813dcaa68149485735fb38b9740db93b471de9bcf86ecab9f72b8943ea1513f23bec6ef32b1f87f1c3158fdd0a47033b68ec20602afca7ac87dae4dfeede323c97e886acdd7082bd65469e4767747e9bb536c67a41af256449100834a0c835358bea8680fb7aeb587880d3ae9dd78e89a6aa4d02cc084e395a2b0514ca020766c033d2eb8985cfbe9d116ac9aa64a9d802574c17ecd174155a91766b2696a85768e8652988198cc7bec1a9f43d87cb3d9c2c96726c6fda6d9ad5e52cea655a6b83a4240c86ebefd0bd30eaa996aa16084c4ae853038e0d1f13b2c5fddc0dac2c7cfcdb619e414013d07419d635e4f87e632affb1c6c5f04dc2fc97ad4ccea4d251fcbb31f64d7ed44340bb1a874967296c2119abc172f1e6f1cd2", 0x2f3) 2018/04/13 15:46:02 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0xa, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) 2018/04/13 15:46:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvfrom(r1, &(0x7f0000000140)=""/76, 0x4c, 0x0, &(0x7f00000001c0)=@nfc={0x27}, 0x80) poll(&(0x7f0000000000)=[{r1, 0xc1a6}], 0x20000000000000ac, 0x0) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:46:03 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/04/13 15:46:03 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x11, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) 2018/04/13 15:46:03 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x1, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x3, 0x8, 0x2, 0x0, 0x0, @in={0x2, 0x0, @multicast2=0xe0000002}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x88}, 0x1}, 0x0) 2018/04/13 15:46:03 executing program 1: r0 = syz_open_dev$tun(&(0x7f00000000c0)="2f6465762f6e6574c874756e00", 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2002002012, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x9, &(0x7f00000b7ff8), &(0x7f0000000000)=0x8) 2018/04/13 15:46:03 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x3, [{}, {0x8}, {0x0, 0x0, 0x8}]}}) 2018/04/13 15:46:03 executing program 2: unshare(0x40000000) r0 = socket$inet(0x2, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) 2018/04/13 15:46:03 executing program 3: 2018/04/13 15:46:03 executing program 3: 2018/04/13 15:46:03 executing program 1: 2018/04/13 15:46:03 executing program 6: 2018/04/13 15:46:03 executing program 7: 2018/04/13 15:46:03 executing program 5: 2018/04/13 15:46:03 executing program 4: 2018/04/13 15:46:03 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/13 15:46:03 executing program 1: 2018/04/13 15:46:04 executing program 5: 2018/04/13 15:46:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvfrom(r1, &(0x7f0000000140)=""/76, 0x4c, 0x0, &(0x7f00000001c0)=@nfc={0x27}, 0x80) poll(&(0x7f0000000000)=[{r1, 0xc1a6}], 0x20000000000000ac, 0x0) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:46:04 executing program 7: 2018/04/13 15:46:04 executing program 6: 2018/04/13 15:46:04 executing program 1: 2018/04/13 15:46:04 executing program 2: 2018/04/13 15:46:04 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/04/13 15:46:04 executing program 4: 2018/04/13 15:46:04 executing program 1: 2018/04/13 15:46:04 executing program 5: 2018/04/13 15:46:04 executing program 7: 2018/04/13 15:46:04 executing program 6: 2018/04/13 15:46:04 executing program 4: 2018/04/13 15:46:04 executing program 2: 2018/04/13 15:46:04 executing program 1: 2018/04/13 15:46:04 executing program 5: 2018/04/13 15:46:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvfrom(r1, &(0x7f0000000140)=""/76, 0x4c, 0x0, &(0x7f00000001c0)=@nfc={0x27}, 0x80) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:46:05 executing program 6: 2018/04/13 15:46:05 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) 2018/04/13 15:46:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/04/13 15:46:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 2018/04/13 15:46:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000686ff4)={0x10}, 0xc) close(r0) 2018/04/13 15:46:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x8) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f000009ffa8)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x80, &(0x7f0000398000)=[{&(0x7f0000697000)="8015b27a0d9e2bd88efb1e7c6b4ef9d1bec8550b7ca1f4b2af2b0c9c0c376391fe4e3a7957eb2f6ff408c4a21ad0f2475c0047e61f7ee239a37eb76740424a2030fe1c954d3c451a827400a096863b226c1fd65bc96c698be9cea658fa7a55e8116f3e01062c48892c0d777fa7ab11939b5d55105ac393532322a292c70e0b417d139220ce63a652665b135b1d9d13c080e685ba0f7b8765c168f873094036ef6fb2f267c3b445c5607a5751afbaeb451600ff96f81469b49a5261b0f24af3684b2c7515fc45c29831da47bad34cb22fcda7fa3a8285d63f591c412a06", 0xdd}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x10001}) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001080)="30de661fa549cf74e3267553707815da24c64ecd52be99f0e539a377fab7d2ef799176ad983374c9a72cad62c2b29e5fc9884914c9725c6150c0e3ee617cacd25378c6b3efa221d4d45ef08f72333302efcafbd3d754c6e77c64b8b68c3718a18fde18e9875d40c5a9583cb8e796fc038e1c76ed087ac98921be8f6c6bac6c1438a68390cf80a1ab77c407b6ade1beee32da7231f709699f4250f9d107f9e501a1d33136e6061d3c5f0081374edb059aeb735c5820e88a0860403f9421afd12778578bd087179311e2380464dabc6b127b6d966a7abc3ecefd956a5d12ae08", 0xdf}], 0x1, &(0x7f0000000340), 0x0, 0x81}, 0x4008001) 2018/04/13 15:46:05 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x40000008001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa1ff}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)=0x1) write$tun(r1, &(0x7f0000000280)={@void, @hdr={0x0, 0x0, 0x0, 0xc1}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}, 0x200002a6) [ 74.564962] device ifb0 entered promiscuous mode 2018/04/13 15:46:05 executing program 6: 2018/04/13 15:46:05 executing program 7: 2018/04/13 15:46:05 executing program 2: 2018/04/13 15:46:05 executing program 1: 2018/04/13 15:46:05 executing program 4: 2018/04/13 15:46:05 executing program 5: 2018/04/13 15:46:05 executing program 3: 2018/04/13 15:46:05 executing program 6: 2018/04/13 15:46:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvfrom(r1, &(0x7f0000000140)=""/76, 0x4c, 0x0, &(0x7f00000001c0)=@nfc={0x27}, 0x80) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:46:06 executing program 4: 2018/04/13 15:46:06 executing program 7: 2018/04/13 15:46:06 executing program 1: 2018/04/13 15:46:06 executing program 2: 2018/04/13 15:46:06 executing program 5: 2018/04/13 15:46:06 executing program 3: 2018/04/13 15:46:06 executing program 6: 2018/04/13 15:46:06 executing program 7: 2018/04/13 15:46:06 executing program 1: 2018/04/13 15:46:06 executing program 2: 2018/04/13 15:46:06 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/13 15:46:06 executing program 4: r0 = socket$nl_generic(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000003c0)=""/48, 0x30}, 0x40010000) 2018/04/13 15:46:06 executing program 3: 2018/04/13 15:46:06 executing program 6: 2018/04/13 15:46:06 executing program 1: 2018/04/13 15:46:07 executing program 3: 2018/04/13 15:46:07 executing program 6: 2018/04/13 15:46:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvfrom(r1, &(0x7f0000000140)=""/76, 0x4c, 0x0, &(0x7f00000001c0)=@nfc={0x27}, 0x80) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:46:07 executing program 7: 2018/04/13 15:46:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x6, 0x4a, &(0x7f0000000000)={{{@in, @in6=@local={0xfe, 0x80, [], 0xaa}}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in=@broadcast=0xffffffff}}, 0x3) 2018/04/13 15:46:07 executing program 4: mmap(&(0x7f0000000000/0xb6e000)=nil, 0xb6e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2, &(0x7f0000a0c000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@broadcast=0xffffffff}}, {{@in6}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0x3) 2018/04/13 15:46:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x209, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 2018/04/13 15:46:07 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0xfffffff5, 0x1}}}}, 0x108) 2018/04/13 15:46:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f0000000840)={0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000000b80)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast=0xffffffff}}, [@migrate={0x5c, 0x11, [{@in, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {@in=@dev={0xac, 0x14, 0x14}, @in6=@empty={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}, 0x1}, 0x0) 2018/04/13 15:46:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="240000000104f500000000000000060020200af80900010002e800600700000000ab001f", 0x24}], 0x1}, 0x0) [ 76.777249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 76.800262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/13 15:46:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020d00001000000000000000000000000300060000000000020000007f00000100000000000000000300050000000000020000000000000000000000000000000800120002000100000000000000000430000000030100000000000000000000ff010000000000000000000000000001ca0a8194000000000000ffffe0000001"], 0x80}, 0x1}, 0x0) 2018/04/13 15:46:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x0) 2018/04/13 15:46:08 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000b4efab)="5500000018007fafb7a41cb22da280000206000000a843096c37236939000900210003004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de4411006827c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/13 15:46:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000187ff4)={0x10, 0x34000}, 0xc, &(0x7f00000b4ff0)={&(0x7f0000d03f5c)={0x18, 0x23, 0x82d, 0x0, 0x0, {0xd}, [@nested={0x4, 0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/13 15:46:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/13 15:46:08 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000002400030007fffd0000000000000005e10300000000002000fffffffffffff5fc", 0x24}], 0x1}, 0x0) 2018/04/13 15:46:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000000000)=[{r1, 0xc1a6}], 0x20000000000000ac, 0x0) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f0000008600), 0x0, &(0x7f0000008640)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f00000088c0)) 2018/04/13 15:46:08 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000013fe4)=@in6={0x2, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000013000), 0x0, &(0x7f0000000040)=[{0x20, 0x84, 0x2, "004401e01b00020030"}], 0x20}, 0x0) [ 77.609372] ================================================================== [ 77.616804] BUG: KMSAN: uninit-value in fib_create_info+0x554/0x8d20 [ 77.623299] CPU: 0 PID: 6091 Comm: syz-executor5 Not tainted 4.16.0+ #83 [ 77.630134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.639483] Call Trace: [ 77.642077] dump_stack+0x185/0x1d0 [ 77.645710] ? fib_create_info+0x554/0x8d20 [ 77.650041] kmsan_report+0x142/0x240 [ 77.653853] __msan_warning_32+0x6c/0xb0 [ 77.657922] fib_create_info+0x554/0x8d20 [ 77.662086] ? save_stack_trace+0xa5/0xf0 [ 77.666238] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 77.671698] ? kmsan_set_origin_inline+0x6b/0x120 [ 77.676548] ? __msan_poison_alloca+0x15c/0x1d0 [ 77.681225] ? inet_rtm_newroute+0x210/0x340 [ 77.685645] ? fib_table_insert+0xbc/0x2820 [ 77.689974] fib_table_insert+0x3b6/0x2820 [ 77.694220] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 77.699588] ? fib_new_table+0x247/0x670 [ 77.703656] inet_rtm_newroute+0x210/0x340 [ 77.707901] ? fib_del_ifaddr+0x35c0/0x35c0 [ 77.712224] rtnetlink_rcv_msg+0xa32/0x1560 [ 77.716554] ? SyS_sendmsg+0x54/0x80 [ 77.720273] ? netlink_sendmsg+0x9a6/0x1310 [ 77.724598] ? ___sys_sendmsg+0xec0/0x1310 [ 77.728834] ? SYSC_sendmsg+0x2a3/0x3d0 [ 77.732809] ? SyS_sendmsg+0x54/0x80 [ 77.736528] ? do_syscall_64+0x309/0x430 [ 77.740597] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 77.745960] ? __msan_poison_alloca+0x15c/0x1d0 [ 77.750629] ? _raw_spin_unlock_bh+0x57/0x70 [ 77.755051] ? __local_bh_enable_ip+0x3b/0x140 2018/04/13 15:46:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x11, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x813, r0, 0x0) 2018/04/13 15:46:08 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000007000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000bfe4)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000016fa0)=[{&(0x7f000001df22)="cb", 0x1}], 0x1, &(0x7f000000d000)}, 0x0) 2018/04/13 15:46:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x6, 0x1d, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f0000000140), &(0x7f0000000c40)=""/4096}, &(0x7f0000000000)=0x78) 2018/04/13 15:46:08 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001a00033207fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) [ 77.759639] ? _raw_spin_unlock_bh+0x57/0x70 [ 77.764062] ? kmsan_set_origin_inline+0x6b/0x120 [ 77.768916] ? kmsan_set_origin+0x9e/0x160 [ 77.773159] netlink_rcv_skb+0x355/0x5f0 [ 77.777224] ? rtnetlink_bind+0x120/0x120 [ 77.781382] rtnetlink_rcv+0x50/0x60 [ 77.785108] netlink_unicast+0x1672/0x1750 [ 77.789354] ? rtnetlink_net_exit+0xa0/0xa0 [ 77.793683] netlink_sendmsg+0x1048/0x1310 [ 77.797926] ? netlink_getsockopt+0xc80/0xc80 [ 77.802427] ___sys_sendmsg+0xec0/0x1310 [ 77.806497] ? __fdget+0x4e/0x60 [ 77.809863] ? __fget_light+0x56/0x710 [ 77.813750] ? __fdget+0x4e/0x60 [ 77.817120] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 77.822485] ? __fget_light+0x6b9/0x710 [ 77.826473] SYSC_sendmsg+0x2a3/0x3d0 [ 77.830284] SyS_sendmsg+0x54/0x80 [ 77.833825] do_syscall_64+0x309/0x430 [ 77.837725] ? ___sys_sendmsg+0x1310/0x1310 [ 77.842062] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 77.847353] RIP: 0033:0x455319 [ 77.850540] RSP: 002b:00007fb24d140c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.858246] RAX: ffffffffffffffda RBX: 00007fb24d1416d4 RCX: 0000000000455319 [ 77.865515] RDX: 0000000000000000 RSI: 000000002000bfc8 RDI: 0000000000000013 [ 77.872788] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 77.880066] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 77.887337] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 77.894609] [ 77.896230] Uninit was created at: [ 77.899782] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 77.904885] kmsan_kmalloc+0x94/0x100 2018/04/13 15:46:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1}]}, 0x30}, 0x1}, 0x0) [ 77.908684] kmsan_slab_alloc+0x11/0x20 [ 77.912662] __kmalloc_node_track_caller+0xaed/0x11c0 [ 77.917853] __alloc_skb+0x2cf/0x9f0 [ 77.921572] netlink_sendmsg+0x9a6/0x1310 [ 77.925723] ___sys_sendmsg+0xec0/0x1310 [ 77.929787] SYSC_sendmsg+0x2a3/0x3d0 [ 77.933587] SyS_sendmsg+0x54/0x80 [ 77.937126] do_syscall_64+0x309/0x430 [ 77.941013] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 77.946193] ================================================================== [ 77.953540] Disabling lock debugging due to kernel taint [ 77.958985] Kernel panic - not syncing: panic_on_warn set ... [ 77.958985] [ 77.966349] CPU: 0 PID: 6091 Comm: syz-executor5 Tainted: G B 4.16.0+ #83 [ 77.974485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.983835] Call Trace: [ 77.986428] dump_stack+0x185/0x1d0 [ 77.990070] panic+0x39d/0x940 [ 77.993290] ? fib_create_info+0x554/0x8d20 [ 77.997612] kmsan_report+0x238/0x240 [ 78.001417] __msan_warning_32+0x6c/0xb0 [ 78.005491] fib_create_info+0x554/0x8d20 [ 78.009654] ? save_stack_trace+0xa5/0xf0 [ 78.013806] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 78.019280] ? kmsan_set_origin_inline+0x6b/0x120 [ 78.024130] ? __msan_poison_alloca+0x15c/0x1d0 [ 78.028812] ? inet_rtm_newroute+0x210/0x340 [ 78.033226] ? fib_table_insert+0xbc/0x2820 [ 78.037555] fib_table_insert+0x3b6/0x2820 [ 78.041806] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 78.047174] ? fib_new_table+0x247/0x670 [ 78.051245] inet_rtm_newroute+0x210/0x340 [ 78.055493] ? fib_del_ifaddr+0x35c0/0x35c0 [ 78.059817] rtnetlink_rcv_msg+0xa32/0x1560 [ 78.064146] ? SyS_sendmsg+0x54/0x80 [ 78.067859] ? netlink_sendmsg+0x9a6/0x1310 [ 78.072184] ? ___sys_sendmsg+0xec0/0x1310 [ 78.076419] ? SYSC_sendmsg+0x2a3/0x3d0 [ 78.080399] ? SyS_sendmsg+0x54/0x80 [ 78.084118] ? do_syscall_64+0x309/0x430 [ 78.088184] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 78.093550] ? __msan_poison_alloca+0x15c/0x1d0 [ 78.098225] ? _raw_spin_unlock_bh+0x57/0x70 [ 78.102638] ? __local_bh_enable_ip+0x3b/0x140 [ 78.107220] ? _raw_spin_unlock_bh+0x57/0x70 [ 78.111629] ? kmsan_set_origin_inline+0x6b/0x120 [ 78.116739] ? kmsan_set_origin+0x9e/0x160 [ 78.120977] netlink_rcv_skb+0x355/0x5f0 [ 78.125048] ? rtnetlink_bind+0x120/0x120 [ 78.129203] rtnetlink_rcv+0x50/0x60 [ 78.132920] netlink_unicast+0x1672/0x1750 [ 78.137163] ? rtnetlink_net_exit+0xa0/0xa0 [ 78.141498] netlink_sendmsg+0x1048/0x1310 [ 78.145741] ? netlink_getsockopt+0xc80/0xc80 [ 78.150236] ___sys_sendmsg+0xec0/0x1310 [ 78.154303] ? __fdget+0x4e/0x60 [ 78.157669] ? __fget_light+0x56/0x710 [ 78.161556] ? __fdget+0x4e/0x60 [ 78.164926] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 78.170293] ? __fget_light+0x6b9/0x710 [ 78.174273] SYSC_sendmsg+0x2a3/0x3d0 [ 78.178087] SyS_sendmsg+0x54/0x80 [ 78.181623] do_syscall_64+0x309/0x430 [ 78.185513] ? ___sys_sendmsg+0x1310/0x1310 [ 78.189834] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 78.195014] RIP: 0033:0x455319 [ 78.198202] RSP: 002b:00007fb24d140c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.205908] RAX: ffffffffffffffda RBX: 00007fb24d1416d4 RCX: 0000000000455319 [ 78.213169] RDX: 0000000000000000 RSI: 000000002000bfc8 RDI: 0000000000000013 [ 78.220434] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 78.227697] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 78.234961] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 78.242713] Dumping ftrace buffer: [ 78.246246] (ftrace buffer empty) [ 78.249927] Kernel Offset: disabled [ 78.253527] Rebooting in 86400 seconds..