[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.348575] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.571709] random: sshd: uninitialized urandom read (32 bytes read) [ 33.872484] random: sshd: uninitialized urandom read (32 bytes read) [ 35.097992] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. [ 40.600956] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/16 22:36:03 fuzzer started 2018/05/16 22:36:04 dialing manager at 10.128.0.26:41335 [ 62.695953] can: request_module (can-proto-0) failed. [ 62.707198] can: request_module (can-proto-0) failed. 2018/05/16 22:36:27 kcov=true, comps=false 2018/05/16 22:36:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x10008000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 2018/05/16 22:36:31 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000200)) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) utime(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 2018/05/16 22:36:31 executing program 7: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00007d1000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x0, 0x0) 2018/05/16 22:36:31 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback=0x7f000001, @dev={0xac, 0x14, 0x14}}, 0xc) 2018/05/16 22:36:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0xff21) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 2018/05/16 22:36:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) 2018/05/16 22:36:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000240)={0xa, 0xfffffffffffffffd, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x1c) 2018/05/16 22:36:31 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) [ 69.669563] IPVS: ftp: loaded support on port[0] = 21 [ 69.739153] IPVS: ftp: loaded support on port[0] = 21 [ 69.744979] IPVS: ftp: loaded support on port[0] = 21 [ 69.780762] IPVS: ftp: loaded support on port[0] = 21 [ 69.803292] IPVS: ftp: loaded support on port[0] = 21 [ 69.825236] IPVS: ftp: loaded support on port[0] = 21 [ 69.829539] IPVS: ftp: loaded support on port[0] = 21 [ 69.864476] IPVS: ftp: loaded support on port[0] = 21 [ 71.895817] ip (4727) used greatest stack depth: 54456 bytes left [ 72.360324] ip (4761) used greatest stack depth: 54072 bytes left [ 72.707332] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.714683] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.759868] device bridge_slave_0 entered promiscuous mode [ 72.925433] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.931972] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.979273] device bridge_slave_1 entered promiscuous mode [ 73.035982] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.042495] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.063550] device bridge_slave_0 entered promiscuous mode [ 73.171699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.292323] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.298819] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.329243] device bridge_slave_1 entered promiscuous mode [ 73.359367] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.365852] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.382362] device bridge_slave_0 entered promiscuous mode [ 73.390605] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.397113] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.410081] device bridge_slave_0 entered promiscuous mode [ 73.421824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.434018] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.440538] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.454139] device bridge_slave_0 entered promiscuous mode [ 73.466320] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.472792] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.508976] device bridge_slave_0 entered promiscuous mode [ 73.529311] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.535848] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.553451] device bridge_slave_0 entered promiscuous mode [ 73.566167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.573678] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.580155] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.609143] device bridge_slave_0 entered promiscuous mode [ 73.628269] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.634745] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.656110] device bridge_slave_1 entered promiscuous mode [ 73.667711] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.674320] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.694131] device bridge_slave_1 entered promiscuous mode [ 73.714258] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.720755] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.748984] device bridge_slave_1 entered promiscuous mode [ 73.781619] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.788104] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.796455] device bridge_slave_1 entered promiscuous mode [ 73.808070] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.814592] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.832079] device bridge_slave_1 entered promiscuous mode [ 73.847765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.856080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.866810] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.873765] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.893237] device bridge_slave_1 entered promiscuous mode [ 73.941469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.953690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.964424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.026655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.075173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.133347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.141655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.159990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.169181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.180211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.210155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.384009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.392774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.440216] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.640777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.648644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.677244] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.767601] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.779810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.858468] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.872801] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.923393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.942203] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.950802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.959498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.979347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.990533] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.103252] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.130383] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.153939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.163167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.191703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.199438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.226538] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.243593] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.252682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.259694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.308685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.318243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.359641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.366710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.424225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.452745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.459825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.471400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.502844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.511074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.518132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.534960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.568342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.577845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.600110] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.619241] team0: Port device team_slave_0 added [ 75.655898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.664177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.691703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.698752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.741851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.762439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.797223] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.820235] team0: Port device team_slave_1 added [ 75.901148] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.919944] team0: Port device team_slave_0 added [ 76.012393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.019439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.044936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.160753] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.176125] team0: Port device team_slave_0 added [ 76.185887] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.202887] team0: Port device team_slave_0 added [ 76.226873] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.247437] team0: Port device team_slave_1 added [ 76.268308] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.295092] team0: Port device team_slave_0 added [ 76.320514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.340412] team0: Port device team_slave_0 added [ 76.348863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.356230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.375591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.388354] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.402777] team0: Port device team_slave_0 added [ 76.422851] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.434200] team0: Port device team_slave_1 added [ 76.458178] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.469911] team0: Port device team_slave_1 added [ 76.476629] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.487272] team0: Port device team_slave_0 added [ 76.504434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.517228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.530556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.556961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.565004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.576931] team0: Port device team_slave_1 added [ 76.610636] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.634871] team0: Port device team_slave_1 added [ 76.643715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.666136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.685628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.696404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.708871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.739978] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.748594] team0: Port device team_slave_1 added [ 76.756902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.764474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.772320] team0: Port device team_slave_1 added [ 76.782235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.798537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.808616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.830595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.864085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.895675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.909548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.923738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.932097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.939182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.947618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.961295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.985783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.995349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.019648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.058323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.088447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.122861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.158724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.177530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.186764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.194981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.202903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.231267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.241164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.248649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.256111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.266077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.298558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.313913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.329629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.337856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.348220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.355892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.365460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.375892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.387249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.397760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.406627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.415719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.443003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.474420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.483641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.495827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.504178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.521125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.541761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.561135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.580695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.595414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.606204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.613570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.622724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.647402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.658327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.670207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.685088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.695429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.703332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.728183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.754204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.787960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.811177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.824256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.832369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.840837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.848887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.857488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.895539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.903929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.914356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.935908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.962928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.007485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.689609] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.696100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.702925] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.709363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.738686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.754015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.928101] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.934577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.941535] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.947977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.960882] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.975317] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.981859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.988663] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.995105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.002714] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.030324] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.036830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.043696] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.050169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.112155] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.172161] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.178623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.185414] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.191861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.260907] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.284909] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.291399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.298257] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.304721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.342949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.352470] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.358927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.365747] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.372199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.391408] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.426863] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.433336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.440179] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.446648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.511075] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.800275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.811208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.834985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.851713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.859377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.867159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.874786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.356862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.440344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.472573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.690369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.740309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.798164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.959328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.082352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.222540] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.252608] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.391576] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.471330] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.519648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.570216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.767624] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.876336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.028730] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.035322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.046838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.073709] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.083248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.113307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.165545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.172072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.186961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.315939] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.322269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.336904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.392388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.398765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.416933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.461555] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.468570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.487308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.738356] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.744726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.755856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.814648] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.834845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.841890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.853324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.900988] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.948087] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.123325] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.280633] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.320496] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.610598] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.648934] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/16 22:36:58 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 96.087680] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.990165] mmap: syz-executor7 (6612) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/05/16 22:37:00 executing program 0: open(&(0x7f0000000000)='../file0\x00', 0x40, 0x0) 2018/05/16 22:37:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f00000000c0), 0x100000000) 2018/05/16 22:37:00 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6c6f002b19d21000"}) 2018/05/16 22:37:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 2018/05/16 22:37:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) 2018/05/16 22:37:00 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000200)) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) utime(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 2018/05/16 22:37:00 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5336, &(0x7f000021af98)) 2018/05/16 22:37:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 2018/05/16 22:37:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000003c0)) 2018/05/16 22:37:00 executing program 3: syz_fuseblk_mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/16 22:37:00 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff3c, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/05/16 22:37:00 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)) 2018/05/16 22:37:00 executing program 0: setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000200), 0x8) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)) 2018/05/16 22:37:00 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3634a0f6}, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000000020000000000000000000600000000000000000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000003000500000000000200e8ffdf0000010000000000000000"], 0x80}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0213000002000000000000fff0400000"], 0x10}, 0x1}, 0x0) 2018/05/16 22:37:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={"6c6f000000000400000000000000db5c", 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) 2018/05/16 22:37:00 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sched_setparam(0x0, &(0x7f0000000000)) 2018/05/16 22:37:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f00000000c0), 0x100000000) 2018/05/16 22:37:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 97.773366] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 97.784450] bond0: lo is up - this may be due to an out of date ifenslave 2018/05/16 22:37:00 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), 0x8) 2018/05/16 22:37:00 executing program 4: socketpair$inet6(0xa, 0x80000, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r4, 0x3, 0x0, 0xffff) 2018/05/16 22:37:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f000021af98)) 2018/05/16 22:37:00 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x3006}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/05/16 22:37:00 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff3c, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/05/16 22:37:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={"6c6f000000000400000000000000db5c", 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) 2018/05/16 22:37:01 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), 0x8) [ 98.043425] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 98.054569] bond0: lo is up - this may be due to an out of date ifenslave 2018/05/16 22:37:01 executing program 1: syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1820000) 2018/05/16 22:37:01 executing program 5: getrandom(&(0x7f00000004c0)=""/249, 0xfffffee5, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x3}) 2018/05/16 22:37:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)}], 0x1) 2018/05/16 22:37:01 executing program 6: r0 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r0, &(0x7f0000000cc0), 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 2018/05/16 22:37:01 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x3006}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) [ 98.331856] raw_sendmsg: syz-executor6 forgot to set AF_INET. Fix it! 2018/05/16 22:37:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={"6c6f000000000400000000000000db5c", 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) 2018/05/16 22:37:01 executing program 3: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f0000001d0000000007000000", @ANYBLOB="6800ff000a000200aaaaaaaaaaaa0000"], 0x2}, 0x1}, 0x0) 2018/05/16 22:37:01 executing program 1: socketpair$inet6(0xa, 0x0, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0xb4cd, 0x5) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r4, 0x3, 0x0, 0xffff) 2018/05/16 22:37:01 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000b42d87402c5286dd6006f52600303afffe0000000000000000ff0200000000000000000000000000018600903800000000600a07ec00000000fe8000000000000000000000000000ff00e4ffffff0000000002ffffac14000032cc7d2ef174be32e7e728ec64df3d9a5222e6163dfae405ee1d425723142a0dc2c72543a33a385b86fded4f63ba661a897c5e2d42e0b4425391badca0f72ed39201f7231c2b9c7176a2b4a470a0d5f3f7edaef53d5d18abcf9649b346bfa9a55694bf0b7f500adfe8d0781beb2e3d50dbd893ce027e229cec5a8d43f36ffe867c1fa4cba268fe1c217d3546028866890f0d554349cc5aadeb0cc65df37ca3727131d39d1aeebcad2915db1f2c79c2267530a73567c95e6df55448bccf5997ad95b5a0390140566c36d259089a66b27bcdbafdadf32706c50529772dff936cf9109dcbe14cdf2cac56479aa34d79e50110cbf7449de34f9beb07b84e16a597467bcb353110b61fd9099e3fe14709d7fa40c3331805f1b861458f"], &(0x7f00000016c0)) 2018/05/16 22:37:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)={[0x30]}, 0x1) 2018/05/16 22:37:01 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x3006}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/05/16 22:37:01 executing program 6: uname(&(0x7f0000000040)=""/187) 2018/05/16 22:37:01 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [{[], {0x8100, 0x0, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "d52a28", 0x44, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000540)) [ 98.550649] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 98.561724] bond0: lo is up - this may be due to an out of date ifenslave 2018/05/16 22:37:01 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2018/05/16 22:37:01 executing program 5: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) r0 = syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000640), 0x3) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)=""/213) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x0, 0x17, 0x0, 0x7, "02b58aed68b0eceffb0a01b9f07240e40ae9342bfdc3752040f2c59d6c007b7b"}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="23bf152cf24f000000") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x201, 0x0) close(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001dc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001a40)=0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000019c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast1, @in=@local}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000500)=0xe8) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000340)=0x7fffffff) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000700)={0x0, 0x9}, &(0x7f0000000740)=0x8) stat(&(0x7f0000001a00)='./file1\x00', &(0x7f0000000580)) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) ftruncate(0xffffffffffffffff, 0x280080) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/16 22:37:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f000021af98)) 2018/05/16 22:37:01 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000202ffd59487eab6e0d09f9a770889c06c2021cb07110000f30501", 0x1f) 2018/05/16 22:37:01 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/16 22:37:01 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x3006}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) 2018/05/16 22:37:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={"6c6f000000000400000000000000db5c", 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) 2018/05/16 22:37:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2}, 0xd1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='veth0_to_bond\x00', 0x8001}) 2018/05/16 22:37:01 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}, {0x0, 0x2710}}) [ 98.860761] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. 2018/05/16 22:37:01 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000200), 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x4000000031, 0xffffffffffffffff, 0x0) 2018/05/16 22:37:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000), 0x57, 0x0) [ 98.994262] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 99.005382] bond0: lo is up - this may be due to an out of date ifenslave 2018/05/16 22:37:02 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) r0 = syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000640), 0x3) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)=""/213) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x4, 0x17, 0x0, 0x7, "02b58aed68b0eceffb0a01b9f07240e40ae9342bfdc3752040f2c59d6c007b7b"}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="23bf152cf24f000000") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x201, 0x0) close(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001dc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001a40)=0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000019c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast1, @in=@local}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000500)=0xe8) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000340)=0x7fffffff) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000700)={0x0, 0x9}, &(0x7f0000000740)=0x8) stat(&(0x7f0000001a00)='./file1\x00', &(0x7f0000000580)) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) ftruncate(0xffffffffffffffff, 0x280080) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/16 22:37:02 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 2018/05/16 22:37:02 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x3006}) dup3(r0, r1, 0x0) 2018/05/16 22:37:02 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/220, 0xdc) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400), 0xc) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000200), 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) 2018/05/16 22:37:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={"6c6f000000000400000000000000db5c", 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) [ 99.471713] ================================================================== [ 99.479124] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e3/0x600 [ 99.485516] CPU: 0 PID: 6805 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #96 [ 99.492773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.502111] Call Trace: [ 99.504698] dump_stack+0x185/0x1d0 [ 99.508324] ? netlink_rcv_skb+0x3e3/0x600 [ 99.512555] kmsan_report+0x142/0x240 [ 99.516361] __msan_warning_32+0x6c/0xb0 [ 99.520431] netlink_rcv_skb+0x3e3/0x600 [ 99.524486] ? rtnetlink_bind+0x120/0x120 [ 99.528617] rtnetlink_rcv+0x50/0x60 [ 99.532316] netlink_unicast+0x166b/0x1740 [ 99.536542] ? rtnetlink_net_exit+0xa0/0xa0 [ 99.540851] netlink_sendmsg+0x1072/0x1370 [ 99.545080] kernel_sendmsg+0x228/0x2d0 [ 99.549042] ? netlink_getsockopt+0xc80/0xc80 [ 99.553533] sock_no_sendpage+0x1c8/0x250 [ 99.557666] ? sock_no_mmap+0x30/0x30 [ 99.561460] sock_sendpage+0x1de/0x2c0 [ 99.565339] pipe_to_sendpage+0x31b/0x430 [ 99.569486] ? sock_fasync+0x2b0/0x2b0 [ 99.573358] ? generic_pipe_buf_get+0xf0/0xf0 [ 99.577834] __splice_from_pipe+0x49a/0xf30 [ 99.582140] ? generic_splice_sendpage+0x2a0/0x2a0 [ 99.587059] generic_splice_sendpage+0x1c6/0x2a0 [ 99.591823] ? iter_file_splice_write+0x1710/0x1710 [ 99.596822] ? iter_file_splice_write+0x1710/0x1710 [ 99.601822] direct_splice_actor+0x19b/0x200 [ 99.606228] splice_direct_to_actor+0x764/0x1040 [ 99.610965] ? do_splice_direct+0x540/0x540 [ 99.615281] ? security_file_permission+0x269/0x490 [ 99.620296] do_splice_direct+0x335/0x540 [ 99.624434] do_sendfile+0x1067/0x1e40 [ 99.628317] __x64_sys_sendfile64+0x218/0x390 [ 99.632795] do_syscall_64+0x154/0x220 [ 99.636665] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.641835] RIP: 0033:0x455a09 [ 99.645020] RSP: 002b:00007f815dc27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 99.652718] RAX: ffffffffffffffda RBX: 00007f815dc286d4 RCX: 0000000000455a09 [ 99.659977] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 99.667230] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 99.674483] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 99.681735] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 99.688994] [ 99.690606] Uninit was stored to memory at: [ 99.694914] kmsan_internal_chain_origin+0x12b/0x210 [ 99.700013] kmsan_memcpy_origins+0x11d/0x170 [ 99.704519] __msan_memcpy+0x109/0x160 [ 99.708415] _copy_from_iter_full+0xdfc/0x1450 [ 99.712990] netlink_sendmsg+0xe1c/0x1370 [ 99.717146] kernel_sendmsg+0x228/0x2d0 [ 99.721102] sock_no_sendpage+0x1c8/0x250 [ 99.725239] sock_sendpage+0x1de/0x2c0 [ 99.729113] pipe_to_sendpage+0x31b/0x430 [ 99.733359] __splice_from_pipe+0x49a/0xf30 [ 99.737662] generic_splice_sendpage+0x1c6/0x2a0 [ 99.742401] direct_splice_actor+0x19b/0x200 [ 99.746799] splice_direct_to_actor+0x764/0x1040 [ 99.751536] do_splice_direct+0x335/0x540 [ 99.755675] do_sendfile+0x1067/0x1e40 [ 99.759555] __x64_sys_sendfile64+0x218/0x390 [ 99.764051] do_syscall_64+0x154/0x220 [ 99.768194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.773356] Uninit was created at: [ 99.776883] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 99.781886] kmsan_alloc_page+0x82/0xe0 [ 99.785848] __alloc_pages_nodemask+0xf8e/0x5dd0 [ 99.790584] alloc_pages_current+0x6b5/0x970 [ 99.794973] push_pipe+0x680/0xca0 [ 99.798510] iov_iter_get_pages+0x1357/0x1810 [ 99.802996] __blockdev_direct_IO+0x1a4d/0x6580 [ 99.807664] ext4_direct_IO+0xed8/0x27c0 [ 99.811710] generic_file_read_iter+0x3bd2/0x4440 [ 99.816535] ext4_file_read_iter+0x30f/0x520 [ 99.820934] generic_file_splice_read+0x5d2/0x900 [ 99.825768] splice_direct_to_actor+0x4c6/0x1040 [ 99.830515] do_splice_direct+0x335/0x540 [ 99.834673] do_sendfile+0x1067/0x1e40 [ 99.838552] __x64_sys_sendfile64+0x218/0x390 [ 99.843037] do_syscall_64+0x154/0x220 [ 99.846911] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.852086] ================================================================== [ 99.859428] Disabling lock debugging due to kernel taint [ 99.864857] Kernel panic - not syncing: panic_on_warn set ... [ 99.864857] [ 99.872204] CPU: 0 PID: 6805 Comm: syz-executor6 Tainted: G B 4.17.0-rc5+ #96 [ 99.880759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.890096] Call Trace: [ 99.892678] dump_stack+0x185/0x1d0 [ 99.896289] panic+0x39d/0x940 [ 99.899471] ? netlink_rcv_skb+0x3e3/0x600 [ 99.903688] kmsan_report+0x238/0x240 [ 99.907478] __msan_warning_32+0x6c/0xb0 [ 99.911518] netlink_rcv_skb+0x3e3/0x600 [ 99.915567] ? rtnetlink_bind+0x120/0x120 [ 99.919707] rtnetlink_rcv+0x50/0x60 [ 99.923440] netlink_unicast+0x166b/0x1740 [ 99.927674] ? rtnetlink_net_exit+0xa0/0xa0 [ 99.932069] netlink_sendmsg+0x1072/0x1370 [ 99.936379] kernel_sendmsg+0x228/0x2d0 [ 99.940343] ? netlink_getsockopt+0xc80/0xc80 [ 99.944829] sock_no_sendpage+0x1c8/0x250 [ 99.948962] ? sock_no_mmap+0x30/0x30 [ 99.952758] sock_sendpage+0x1de/0x2c0 [ 99.956633] pipe_to_sendpage+0x31b/0x430 [ 99.960762] ? sock_fasync+0x2b0/0x2b0 [ 99.964707] ? generic_pipe_buf_get+0xf0/0xf0 [ 99.969186] __splice_from_pipe+0x49a/0xf30 [ 99.973499] ? generic_splice_sendpage+0x2a0/0x2a0 [ 99.978427] generic_splice_sendpage+0x1c6/0x2a0 [ 99.983169] ? iter_file_splice_write+0x1710/0x1710 [ 99.988168] ? iter_file_splice_write+0x1710/0x1710 [ 99.993188] direct_splice_actor+0x19b/0x200 [ 99.997581] splice_direct_to_actor+0x764/0x1040 [ 100.002320] ? do_splice_direct+0x540/0x540 [ 100.006627] ? security_file_permission+0x269/0x490 [ 100.011650] do_splice_direct+0x335/0x540 [ 100.015792] do_sendfile+0x1067/0x1e40 [ 100.019689] __x64_sys_sendfile64+0x218/0x390 [ 100.024185] do_syscall_64+0x154/0x220 [ 100.028060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.033242] RIP: 0033:0x455a09 [ 100.036420] RSP: 002b:00007f815dc27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 100.044110] RAX: ffffffffffffffda RBX: 00007f815dc286d4 RCX: 0000000000455a09 [ 100.051372] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 100.058631] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.065894] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 100.073234] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 100.081230] Dumping ftrace buffer: [ 100.084754] (ftrace buffer empty) [ 100.088439] Kernel Offset: disabled [ 100.092040] Rebooting in 86400 seconds..