INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. 2018/04/27 21:42:22 fuzzer started 2018/04/27 21:42:22 dialing manager at 10.128.0.26:34871 syzkaller login: [ 48.113153] can: request_module (can-proto-0) failed. [ 48.124082] can: request_module (can-proto-0) failed. 2018/04/27 21:42:29 kcov=true, comps=false 2018/04/27 21:42:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/82, 0x52) 2018/04/27 21:42:33 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:42:33 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000f4fc8)={&(0x7f0000005000)={0x10}, 0xc, &(0x7f00000edff0)={&(0x7f0000063a70)=ANY=[@ANYBLOB="280000001e00210a000000000000000007000000", @ANYBLOB="0000000a00ffff000011000000000000"], 0x2}, 0x1}, 0x0) 2018/04/27 21:42:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/27 21:42:33 executing program 5: 2018/04/27 21:42:33 executing program 4: 2018/04/27 21:42:33 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) 2018/04/27 21:42:33 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x42a42b, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) [ 53.022847] IPVS: ftp: loaded support on port[0] = 21 [ 53.179883] IPVS: ftp: loaded support on port[0] = 21 [ 53.236718] IPVS: ftp: loaded support on port[0] = 21 [ 53.308165] IPVS: ftp: loaded support on port[0] = 21 [ 53.442269] IPVS: ftp: loaded support on port[0] = 21 [ 53.577150] IPVS: ftp: loaded support on port[0] = 21 [ 53.734385] IPVS: ftp: loaded support on port[0] = 21 [ 53.882883] IPVS: ftp: loaded support on port[0] = 21 [ 54.437319] ip (4663) used greatest stack depth: 54408 bytes left [ 55.274347] ip (4732) used greatest stack depth: 54200 bytes left [ 55.833416] ip (4777) used greatest stack depth: 53944 bytes left [ 55.873888] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.880640] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.912424] device bridge_slave_0 entered promiscuous mode [ 56.162745] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.169267] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.190712] device bridge_slave_1 entered promiscuous mode [ 56.221742] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.228279] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.266247] device bridge_slave_0 entered promiscuous mode [ 56.379425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.525951] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.532472] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.544573] device bridge_slave_0 entered promiscuous mode [ 56.563350] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.569811] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.587638] device bridge_slave_0 entered promiscuous mode [ 56.657701] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.664197] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.681497] device bridge_slave_1 entered promiscuous mode [ 56.700365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.753936] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.760433] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.797638] device bridge_slave_1 entered promiscuous mode [ 56.858337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.889939] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.896449] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.917261] device bridge_slave_1 entered promiscuous mode [ 56.948747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.973915] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.980414] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.023817] device bridge_slave_0 entered promiscuous mode [ 57.094230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.118548] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.125140] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.169237] device bridge_slave_0 entered promiscuous mode [ 57.217801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.226017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.256887] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.263395] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.286409] device bridge_slave_1 entered promiscuous mode [ 57.383801] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.417571] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.424156] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.460696] device bridge_slave_1 entered promiscuous mode [ 57.522394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.542414] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.548953] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.578746] device bridge_slave_0 entered promiscuous mode [ 57.604641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.615468] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.665424] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.671955] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.707459] device bridge_slave_0 entered promiscuous mode [ 57.737807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.748997] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.795224] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.801717] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.835517] device bridge_slave_1 entered promiscuous mode [ 57.867607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.876201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.892270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.904268] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.921858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.936618] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.943207] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.984748] device bridge_slave_1 entered promiscuous mode [ 58.014520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.029190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.090941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.097968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.148918] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.205980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.240392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.259907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.269528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.276478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.408477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.415449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.436296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.468079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.516402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.523396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.564735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.607665] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.620433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.628202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.775081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.782756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.816257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.846873] ip (4983) used greatest stack depth: 53640 bytes left [ 58.861639] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.875720] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.891802] team0: Port device team_slave_0 added [ 58.932107] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.014228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.026712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.119580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.126597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.142953] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.154202] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.188506] team0: Port device team_slave_1 added [ 59.220945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.254406] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.277376] team0: Port device team_slave_0 added [ 59.290730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.314515] team0: Port device team_slave_0 added [ 59.328935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.338711] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.346795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.353988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.375308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.414858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.421863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.442426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.481895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.499537] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.507845] team0: Port device team_slave_1 added [ 59.534760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.555872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.562947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.582369] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.609310] team0: Port device team_slave_1 added [ 59.646977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.654016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.692821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.707147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.735069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.766128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.773719] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.783262] team0: Port device team_slave_0 added [ 59.794827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.813523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.838564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.845566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.867445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.878131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.891132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.954622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.968479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.984358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.036767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.059940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.092585] team0: Port device team_slave_1 added [ 60.125514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.132579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.144753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.184006] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.207154] team0: Port device team_slave_0 added [ 60.230154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.237901] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.258218] team0: Port device team_slave_0 added [ 60.280410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.306582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.322427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.335701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.352198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.400240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.408993] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.417644] team0: Port device team_slave_1 added [ 60.430899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.440432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.450119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.468927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.496374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.529729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.541979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.559400] team0: Port device team_slave_0 added [ 60.565089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.581424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.591334] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.599020] team0: Port device team_slave_1 added [ 60.617698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.625111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.637853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.652952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.681701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.710236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.731773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.738941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.747192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.757565] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.765385] team0: Port device team_slave_0 added [ 60.793746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.813553] team0: Port device team_slave_1 added [ 60.821116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.836454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.846974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.879493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.893608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.929263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.967793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.974766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.985320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.018822] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.030022] team0: Port device team_slave_1 added [ 61.063646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.071099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.080392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.112467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.122152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.136107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.171702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.189706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.200623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.234925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.244235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.251663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.285460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.306391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.321433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.369962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.385864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.395602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.418887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.450516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.474142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.497216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.505317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.513803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.556420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.577117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.594213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.627942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.644151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.659356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.688627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.713827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.738311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.769537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.789452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.821682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.871516] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.883314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.906149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.086993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.094674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.113176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.078576] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.085136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.091990] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.098466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.143075] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.151372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.350807] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.357302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.364194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.370637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.401108] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.417091] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.423538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.430348] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.436802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.453256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 63.886244] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.892744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.899627] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.906110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.928133] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.013602] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.020118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.026992] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.033424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.069901] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.159205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.174179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.208860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.247829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.269989] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.276482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.283323] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.289748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.297815] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.340458] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.346942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.353793] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.360260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.453012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.478256] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.484738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.491610] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.498112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.514421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.183947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.211895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.241288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.936708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.231458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.662956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.837699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.849598] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 72.950132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.029800] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.293008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.445697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.491776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.522299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.584292] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.590578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.599383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.750229] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.758179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.818165] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.825860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.840197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.156241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.293393] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.319819] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.384898] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.391184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.405852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.503104] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.608619] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.614944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.623117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.653525] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.691462] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.698410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.714867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.985872] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.992276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.001406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.095575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.101909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.115339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.176132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.182664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.200401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.268477] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.479775] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.626550] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.875915] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.893701] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.120581] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/27 21:43:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='//file0/../..\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6a6f76726e616c5f636865636b782414"]) mkdir(&(0x7f0000000080)="2e2f66696c65302f66696c6530fe", 0x0) 2018/04/27 21:43:01 executing program 7: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000080)=""/174) 2018/04/27 21:43:01 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:01 executing program 4: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/27 21:43:01 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x42a42b, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/27 21:43:01 executing program 6: 2018/04/27 21:43:01 executing program 5: 2018/04/27 21:43:01 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7003) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x4e22, 0x80000001, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 2018/04/27 21:43:01 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2715, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x3e3) 2018/04/27 21:43:01 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x42a42b, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/27 21:43:02 executing program 0: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f00006d8fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 2018/04/27 21:43:02 executing program 4: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:02 executing program 7: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000080)=""/174) 2018/04/27 21:43:02 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:02 executing program 3: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000080)=""/174) 2018/04/27 21:43:02 executing program 6: 2018/04/27 21:43:02 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:02 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000007c0)='./file0/bus\x00') 2018/04/27 21:43:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x20b}, 0x1}, 0x0) 2018/04/27 21:43:02 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x42a42b, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/27 21:43:02 executing program 4: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:02 executing program 3: 2018/04/27 21:43:02 executing program 7: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000080)=""/174) [ 81.486216] netlink: 224 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/27 21:43:02 executing program 6: 2018/04/27 21:43:02 executing program 5: 2018/04/27 21:43:02 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x42a42b, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/27 21:43:02 executing program 3: 2018/04/27 21:43:02 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:02 executing program 6: r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_ifreq(r0, 0x80000089a3, &(0x7f0000000080)={'bridge0\x00', @ifru_flags=0x2}) fsync(r0) 2018/04/27 21:43:02 executing program 3: 2018/04/27 21:43:02 executing program 7: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000080)=""/174) 2018/04/27 21:43:02 executing program 4: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) 2018/04/27 21:43:02 executing program 0: 2018/04/27 21:43:02 executing program 5: 2018/04/27 21:43:02 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:02 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x42a42b, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/27 21:43:03 executing program 0: io_setup(0x7, &(0x7f0000000080)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000d83f60)=[{}, {}], &(0x7f0000000000)={0x4000000000001, 0x7}) r1 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)}]) 2018/04/27 21:43:03 executing program 5: accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x80000) recvfrom$llc(r0, &(0x7f0000000100)=""/246, 0xf6, 0x2000, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 2018/04/27 21:43:03 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x8000, &(0x7f00000001c0)) 2018/04/27 21:43:03 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x42a42b, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/27 21:43:03 executing program 4: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, &(0x7f000082ef0a)=""/246) 2018/04/27 21:43:03 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="1004000000100000cc000000490b0000ec0300ed00000000000000000000000000200000002000000004000000000000e95dbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)=ANY=[]) r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/21, 0x15}], 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0) memfd_create(&(0x7f0000000180)="70707031247573ff0100", 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x8) 2018/04/27 21:43:03 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:03 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000700)) 2018/04/27 21:43:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)) 2018/04/27 21:43:04 executing program 1: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/27 21:43:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040), 0x3bd, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe00003e8}, 0x10) 2018/04/27 21:43:04 executing program 4: unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f000082ef0a)=""/246) 2018/04/27 21:43:04 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, &(0x7f00000003c0)=""/174) 2018/04/27 21:43:04 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a490002000000000000181058ee00d407995372209a5519be6fc02d636396ad5a6b22bb67a938495a9651908ed5c2185b6f46162d95c6b3a34003c7e21e5ec82266c56c06fbae35c72bbcbe155fdc24035693eba015209185c4b1c99ec01871d06e5cff3278838155fec5314ec00e8fe8873d6efe7fb3c17b8005452dcfec535a56220100e76ce73674c9516a2f2241b4eaa2100a75094a082d9d1d6777891ae78e5181020053cd28bf7c0496cd70573911f3de5b861a2110b478bb916f11e5e965d2eecf92c4bd9efadf6bc9d6ddbe8bdff96ce0bb8c83d7c0"], 0xdb}, 0x1}, 0x0) dup3(r0, r1, 0x0) 2018/04/27 21:43:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) dup3(r0, r1, 0x0) 2018/04/27 21:43:04 executing program 7: r0 = open(&(0x7f0000fde000)='./file0\x00', 0x400000080040, 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/04/27 21:43:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001480)="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", 0x281}], 0x1, &(0x7f0000002480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 83.342149] ================================================================== [ 83.349566] BUG: KMSAN: uninit-value in memcmp+0x119/0x180 [ 83.355190] CPU: 0 PID: 4791 Comm: kworker/0:3 Not tainted 4.16.0+ #87 [ 83.361841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.371196] Workqueue: ipv6_addrconf addrconf_dad_work [ 83.376465] Call Trace: [ 83.379053] dump_stack+0x185/0x1d0 [ 83.382683] ? memcmp+0x119/0x180 [ 83.386132] kmsan_report+0x142/0x240 2018/04/27 21:43:04 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r0) [ 83.389936] __msan_warning_32+0x6c/0xb0 [ 83.393997] memcmp+0x119/0x180 [ 83.397277] __dev_mc_add+0x1c2/0x8e0 [ 83.401079] ? ndisc_mc_map+0x59f/0x8c0 [ 83.405051] dev_mc_add+0x6d/0x80 [ 83.408505] igmp6_group_added+0x2db/0xa00 [ 83.412748] ipv6_dev_mc_inc+0xe9e/0x1130 [ 83.416903] addrconf_dad_work+0x462/0x2a20 [ 83.421231] ? ipv6_get_saddr_eval+0x1450/0x1450 [ 83.425990] process_one_work+0x12c6/0x1f60 [ 83.430321] worker_thread+0x113c/0x24f0 [ 83.434388] ? process_one_work+0x1f60/0x1f60 [ 83.438881] kthread+0x539/0x720 [ 83.442246] ? process_one_work+0x1f60/0x1f60 [ 83.446742] ? kthread_blkcg+0xf0/0xf0 [ 83.450628] ret_from_fork+0x35/0x40 [ 83.454331] [ 83.455952] Local variable description: ----buf@igmp6_group_added [ 83.462172] Variable was created at: [ 83.465895] igmp6_group_added+0x4a/0xa00 [ 83.470041] ipv6_dev_mc_inc+0xe9e/0x1130 [ 83.474176] ================================================================== [ 83.481521] Disabling lock debugging due to kernel taint [ 83.486963] Kernel panic - not syncing: panic_on_warn set ... 2018/04/27 21:43:04 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) [ 83.486963] [ 83.494324] CPU: 0 PID: 4791 Comm: kworker/0:3 Tainted: G B 4.16.0+ #87 [ 83.502277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.511630] Workqueue: ipv6_addrconf addrconf_dad_work [ 83.516918] Call Trace: [ 83.519504] dump_stack+0x185/0x1d0 [ 83.523134] panic+0x39d/0x940 [ 83.526344] ? memcmp+0x119/0x180 [ 83.529796] kmsan_report+0x238/0x240 [ 83.533599] __msan_warning_32+0x6c/0xb0 [ 83.537655] memcmp+0x119/0x180 [ 83.540943] __dev_mc_add+0x1c2/0x8e0 [ 83.544747] ? ndisc_mc_map+0x59f/0x8c0 [ 83.548722] dev_mc_add+0x6d/0x80 [ 83.552170] igmp6_group_added+0x2db/0xa00 [ 83.556411] ipv6_dev_mc_inc+0xe9e/0x1130 [ 83.560567] addrconf_dad_work+0x462/0x2a20 [ 83.564901] ? ipv6_get_saddr_eval+0x1450/0x1450 [ 83.569660] process_one_work+0x12c6/0x1f60 [ 83.573997] worker_thread+0x113c/0x24f0 [ 83.578064] ? process_one_work+0x1f60/0x1f60 [ 83.582558] kthread+0x539/0x720 [ 83.585922] ? process_one_work+0x1f60/0x1f60 [ 83.590417] ? kthread_blkcg+0xf0/0xf0 [ 83.594303] ret_from_fork+0x35/0x40 [ 83.598540] Dumping ftrace buffer: [ 83.602061] (ftrace buffer empty) [ 83.605743] Kernel Offset: disabled [ 83.609343] Rebooting in 86400 seconds..