INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 2018/04/20 16:16:50 fuzzer started 2018/04/20 16:16:51 dialing manager at 10.128.0.26:40315 2018/04/20 16:16:57 kcov=true, comps=false 2018/04/20 16:17:01 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @dev={0xac, 0x14, 0xc}}, {0x2, 0x0, @broadcast=0xffffffff}}) 2018/04/20 16:17:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/20 16:17:01 executing program 7: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000780)='./file0/file0\x00', &(0x7f00000007c0)='./file0/\x00', &(0x7f0000000800)='cgroup2\x00', 0x0, 0x0) 2018/04/20 16:17:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f0000447ff0)=[{&(0x7f00008889ff)="b6b23ebe2094b6c296b7f43c2ff9cec9a414ac8ab00820fbde9a0f4a1bd2773a23ca881cb2b8f6f7676ec3e23411c9a7b90c0d98413505ae48a6f9680b3b1c7d9d2083981adb57cc49d7c44eb888269d5ddad8a8ece4937a8c1bd5f6d54eb2fee4344a60a71f21a02b71241caa5bfb30ef20735987815557dd0712275e1cab0562f6e71d00f07d832fff291844ad8c73a6", 0x91}], 0x1) 2018/04/20 16:17:01 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916a8eacc2f96e0000a8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xfa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x6, 0xfffffffb, 0x20000000, &(0x7f0000000000)) 2018/04/20 16:17:01 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/20 16:17:01 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(r0, &(0x7f0000000340)=@pppoe, &(0x7f0000000240)=0x80) syzkaller login: [ 49.585313] ip (3765) used greatest stack depth: 54688 bytes left [ 50.010806] ip (3804) used greatest stack depth: 54672 bytes left [ 50.943659] ip (3890) used greatest stack depth: 53960 bytes left [ 51.200683] ip (3912) used greatest stack depth: 53656 bytes left [ 51.371235] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.377792] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.415373] device bridge_slave_0 entered promiscuous mode [ 51.535875] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.542409] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.579216] device bridge_slave_0 entered promiscuous mode [ 51.601554] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.608179] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.637072] device bridge_slave_0 entered promiscuous mode [ 51.663809] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.670351] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.685587] device bridge_slave_1 entered promiscuous mode [ 51.696457] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.702966] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.726171] device bridge_slave_0 entered promiscuous mode [ 51.744246] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.750776] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.764515] device bridge_slave_0 entered promiscuous mode [ 51.779122] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.785628] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.813402] device bridge_slave_0 entered promiscuous mode [ 51.827458] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.833966] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.854742] device bridge_slave_0 entered promiscuous mode [ 51.869564] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.876138] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.886847] device bridge_slave_1 entered promiscuous mode [ 51.897666] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.904241] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.913127] device bridge_slave_0 entered promiscuous mode [ 51.929965] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.936515] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.960342] device bridge_slave_1 entered promiscuous mode [ 51.982350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.994729] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.001264] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.028816] device bridge_slave_1 entered promiscuous mode [ 52.046644] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.053185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.067875] device bridge_slave_1 entered promiscuous mode [ 52.076593] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.083541] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.096655] device bridge_slave_1 entered promiscuous mode [ 52.114848] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.121420] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.138533] device bridge_slave_1 entered promiscuous mode [ 52.152472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.159921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.167724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.175111] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.181588] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.224345] device bridge_slave_1 entered promiscuous mode [ 52.233216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.243078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.328641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.338479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.383912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.418601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.428791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.440766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.450557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.559642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.575668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.692980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.186813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.377208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.400100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.434806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.450698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.468211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.609457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.626115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.639534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.679408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.687112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.716595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.741959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.853934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.920004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.977953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.538772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.694123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.704421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.776832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.793768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.802595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.863838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.913905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.926470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.004843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.015192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.030088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.069552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.077617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.084889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.097103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.105994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.114466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.122466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.140170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.187873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.195528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.213129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.279927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.288003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.295399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.306851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.351262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.360562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.383699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.401512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.410202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.420921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.428840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.436197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.465201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.492919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.529761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.559680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.568588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.584317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.598213] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.616715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.629098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.649366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.670631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.681457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.694968] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.705331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.717579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.727966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.784863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.810684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.835660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.853869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.866435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.899886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.917754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.945222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.952693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.004551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.050731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.065131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.080844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.881641] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.888303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.895313] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.901853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.943107] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.956518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.982566] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.989163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.996136] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.002678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.053088] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.145066] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.151623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.158687] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.165353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.218009] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.234901] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.241512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.248625] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.255307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.270936] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.284578] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.291492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.298416] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.305817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.358101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.365560] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.372175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.379598] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.386167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.396966] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.578745] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.585452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.592400] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.598977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.615587] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.685813] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.692391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.699553] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.706104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.777358] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.975221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.986748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.032858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.050004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.067857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.078009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.086008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.943828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.000224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.040564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.262890] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.478880] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.503150] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.571620] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.688129] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 68.785086] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.791506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.802203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.837448] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.855331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.880303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.912722] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 68.919199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.938723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.183293] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 69.190232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.204817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.338254] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 69.344849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.355710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.462259] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 69.468748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.481679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.518171] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 69.527439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.555304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.585590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 69.596140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.608544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 16:17:30 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00000004c0)) 2018/04/20 16:17:30 executing program 5: mkdir(&(0x7f0000002a00)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) mq_getsetattr(r0, &(0x7f0000000080), 0x0) 2018/04/20 16:17:30 executing program 2: r0 = msgget$private(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0xfff}], 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/04/20 16:17:30 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:30 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x1) 2018/04/20 16:17:30 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916a8eacc2f96e0000a8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xfa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0xb, 0xfffffffb, 0x20000000, &(0x7f0000000000)) 2018/04/20 16:17:30 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916a8eacc2f96e0000a8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xfa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x6, 0xfffffffb, 0x20000000, &(0x7f0000000000)) 2018/04/20 16:17:30 executing program 1: r0 = socket$packet(0x11, 0x840000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001600)={0x4, &(0x7f00000015c0)=[{0x6, 0x7, 0x1}, {0x4de, 0x0, 0x8, 0x5}, {0x0, 0x1}, {0x0, 0xfffffffffffffff7, 0x0, 0x400}]}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000018c0)='net/icmp\x00') getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000001900)=""/3, &(0x7f0000001940)=0x3) recvmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000000100)=@hci, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/124, 0x7c}], 0x7, &(0x7f0000001540)=""/51, 0x33, 0xfffffffffffffffb}, 0x20) sendmsg$alg(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001640)="fa23c16cbdc770058ff134388e736f730e3ef79e7dfff01319e2aae82d93a6b2203ef99db2ef6a3db6b6814b05e1255d0e675dac8827ab2fc34b1e45d334cbf669c2ed3cd69f6c8d143819be0a3c917b057138a5c802278ca8f464b04e4abfd6064e0f92d2f5d907a0e8bde77b9bd6fd66197ca32d4ac63c7f9c1e782f60f1fc7d959c222b5ea0e675e6f5c7ff94ae7cf796ad22056a8b3826f6589867b4e05791fff8e48b76230b", 0xa8}, {&(0x7f00000017c0)="65ba47e27406ce903cd8a54d77530f4994407cbf9b205f1a272f1af43fb25fd1c45b0ca99c1952b4f2c36e1825c89a241ba9f9dbca3fd68039f910f6127e81904c84da", 0x43}], 0x2, &(0x7f0000002980)=[@op={0x18, 0x117, 0x3}, @iv={0x18, 0x117, 0x2}, @op={0x18, 0x117, 0x3}, @iv={0x18, 0x117, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x78}, 0x40000) fcntl$addseals(r0, 0x409, 0x0) 2018/04/20 16:17:30 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916a8eacc2f96e0000a8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xfa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x11, 0xfffffffb, 0x20000000, &(0x7f0000000000)) 2018/04/20 16:17:30 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916a8eacc2f96e0000a8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xfa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x12, 0xfffffffb, 0x20000000, &(0x7f0000000000)) 2018/04/20 16:17:30 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) unshare(0x40600) signalfd(r0, &(0x7f0000000700), 0x8) 2018/04/20 16:17:30 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:30 executing program 5: 2018/04/20 16:17:30 executing program 6: 2018/04/20 16:17:30 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:31 executing program 1: r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r0, &(0x7f0000fb2000), &(0x7f0000ded000)) 2018/04/20 16:17:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f000034c000), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 2018/04/20 16:17:31 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:31 executing program 6: 2018/04/20 16:17:31 executing program 2: r0 = msgget$private(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0xfff}], 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/04/20 16:17:31 executing program 0: bind(0xffffffffffffffff, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000000)=0x76, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x115) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x1) 2018/04/20 16:17:31 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) unshare(0x40600) signalfd(r0, &(0x7f0000000700), 0x8) 2018/04/20 16:17:31 executing program 5: 2018/04/20 16:17:31 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000006fc8)={0x0, 0x0, &(0x7f000000e000), 0x0, &(0x7f0000011000)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000440)="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", 0x53e}], 0x1, &(0x7f000001f000), 0x0, 0xfffffffffffffffe}, 0x0) 2018/04/20 16:17:31 executing program 5: 2018/04/20 16:17:31 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:31 executing program 7: 2018/04/20 16:17:31 executing program 4: 2018/04/20 16:17:32 executing program 5: 2018/04/20 16:17:32 executing program 1: 2018/04/20 16:17:32 executing program 6: 2018/04/20 16:17:32 executing program 4: 2018/04/20 16:17:32 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:32 executing program 7: 2018/04/20 16:17:32 executing program 2: r0 = msgget$private(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0xfff}], 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/04/20 16:17:32 executing program 0: 2018/04/20 16:17:32 executing program 5: 2018/04/20 16:17:32 executing program 1: 2018/04/20 16:17:32 executing program 7: 2018/04/20 16:17:32 executing program 0: 2018/04/20 16:17:32 executing program 6: 2018/04/20 16:17:32 executing program 4: 2018/04/20 16:17:32 executing program 5: 2018/04/20 16:17:32 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x11, &(0x7f0000000000), 0x3d6) 2018/04/20 16:17:32 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/20 16:17:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="16"]}) 2018/04/20 16:17:32 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/20 16:17:33 executing program 6: 2018/04/20 16:17:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)}, {&(0x7f0000000300)}, {&(0x7f0000000400)}], 0x3, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2}, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x2, 0x7, 0x0, &(0x7f00000000c0)='vlan0\x00'}) sendto$inet(r0, &(0x7f0000fa0fff), 0x28d94023f883e8ad, 0x20020003, &(0x7f0000385ff0)={0x2, 0x400000000004e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0xfe5d) shutdown(r0, 0x1) 2018/04/20 16:17:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write(r0, &(0x7f00005f1fe3)="c6", 0x1) 2018/04/20 16:17:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0) 2018/04/20 16:17:33 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:33 executing program 2: r0 = msgget$private(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0xfff}], 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/04/20 16:17:33 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10040, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000002c0)=0xffffffffffff8001, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0xfffffffffffffe91, 0xfffffffffffffffd) 2018/04/20 16:17:33 executing program 5: 2018/04/20 16:17:33 executing program 6: 2018/04/20 16:17:33 executing program 5: 2018/04/20 16:17:33 executing program 7: 2018/04/20 16:17:33 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:33 executing program 0: 2018/04/20 16:17:33 executing program 6: 2018/04/20 16:17:34 executing program 5: 2018/04/20 16:17:34 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10040, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000002c0)=0xffffffffffff8001, 0x4) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0xfffffffffffffe91, 0x0) getpeername(r0, &(0x7f0000000340)=@rc, &(0x7f00000003c0)=0x80) 2018/04/20 16:17:34 executing program 0: 2018/04/20 16:17:34 executing program 1: 2018/04/20 16:17:34 executing program 6: 2018/04/20 16:17:34 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) 2018/04/20 16:17:34 executing program 4: 2018/04/20 16:17:34 executing program 2: r0 = msgget$private(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0xfff}], 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) 2018/04/20 16:17:34 executing program 1: 2018/04/20 16:17:34 executing program 5: 2018/04/20 16:17:34 executing program 4: 2018/04/20 16:17:34 executing program 0: 2018/04/20 16:17:34 executing program 6: [ 80.799125] ================================================================== [ 80.806889] BUG: KMSAN: uninit-value in ipv6_skip_exthdr+0x796/0x900 [ 80.813447] CPU: 0 PID: 5797 Comm: udevd Not tainted 4.16.0+ #84 [ 80.819689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.829079] Call Trace: [ 80.831682] [ 80.834015] dump_stack+0x185/0x1d0 [ 80.837648] ? ipv6_skip_exthdr+0x796/0x900 [ 80.841976] kmsan_report+0x142/0x240 [ 80.845780] __msan_warning_32+0x6c/0xb0 [ 80.849865] ipv6_skip_exthdr+0x796/0x900 [ 80.854111] icmp6_send+0xec1/0x3460 [ 80.858008] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 80.863666] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 80.869308] ? ndisc_error_report+0x40/0x1a0 [ 80.873712] ? icmpv6_param_prob+0xc0/0xc0 [ 80.877955] icmpv6_send+0xe0/0x110 [ 80.881594] ? ndisc_error_report+0x101/0x1a0 [ 80.886101] ip6_link_failure+0x8f/0x580 [ 80.890165] ? ip6_negative_advice+0x350/0x350 [ 80.894736] ndisc_error_report+0x101/0x1a0 [ 80.899055] ? ndisc_solicit+0x5c0/0x5c0 [ 80.903124] neigh_invalidate+0x385/0x930 [ 80.907309] neigh_timer_handler+0xd85/0x12d0 [ 80.911834] call_timer_fn+0x26a/0x5a0 [ 80.915817] ? neigh_blackhole+0x60/0x60 [ 80.919955] __run_timers+0xda7/0x11c0 [ 80.923854] ? neigh_blackhole+0x60/0x60 [ 80.927925] ? irq_exit+0x202/0x240 [ 80.931898] ? run_timer_softirq+0x14/0x70 [ 80.936213] ? timers_dead_cpu+0x1010/0x1010 [ 80.940610] run_timer_softirq+0x43/0x70 [ 80.944676] __do_softirq+0x56d/0x93d [ 80.948560] irq_exit+0x202/0x240 [ 80.952016] exiting_irq+0xe/0x10 [ 80.955492] smp_apic_timer_interrupt+0x64/0x90 [ 80.960242] apic_timer_interrupt+0xf/0x20 [ 80.964460] [ 80.966705] RIP: 0010:kmsan_kmalloc+0xc6/0x100 [ 80.971300] RSP: 0018:ffff88016647f8b8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 [ 80.978998] RAX: 0000000000000246 RBX: ffff880167877540 RCX: 0000000000000011 [ 80.986275] RDX: 0000000000000010 RSI: ffffea00086d2ce8 RDI: ffff880167877540 [ 80.993558] RBP: ffff88016647f8f8 R08: 00000000010000c0 R09: 0000000000000002 [ 81.000916] R10: 0000000000000000 R11: ffff880166470000 R12: ffff88021f00d980 [ 81.008263] R13: ffff880168dfbb00 R14: 0000000000000040 R15: 00000000014000c0 [ 81.015549] kmem_cache_alloc+0xaab/0xb90 [ 81.019708] ? anon_vma_fork+0x347/0xb20 [ 81.023799] anon_vma_fork+0x347/0xb20 [ 81.027696] copy_process+0x655d/0x9b30 [ 81.031679] _do_fork+0x311/0xf00 [ 81.035125] ? prepare_exit_to_usermode+0x149/0x3a0 [ 81.040132] SYSC_clone+0xf6/0x110 [ 81.043664] SyS_clone+0x77/0xa0 [ 81.047027] do_syscall_64+0x309/0x430 [ 81.050911] ? sys_vfork+0x70/0x70 [ 81.054447] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 81.060071] RIP: 0033:0x7fe9c7ca0f46 [ 81.063957] RSP: 002b:00007ffcaa0c3b40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 81.071685] RAX: ffffffffffffffda RBX: 00007ffcaa0c3b40 RCX: 00007fe9c7ca0f46 [ 81.078956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 81.086222] RBP: 00007ffcaa0c3ba0 R08: 00000000000016a5 R09: 00000000000016a5 [ 81.093585] R10: 00007fe9c85bda70 R11: 0000000000000246 R12: 0000000000000000 [ 81.100851] R13: 00007ffcaa0c3b60 R14: 0000000000000005 R15: 0000000000000005 [ 81.108120] [ 81.109734] Uninit was stored to memory at: [ 81.114323] kmsan_internal_chain_origin+0x12b/0x210 [ 81.119541] kmsan_memcpy_origins+0x11d/0x170 [ 81.124053] __msan_memcpy+0x19f/0x1f0 [ 81.127945] skb_copy_bits+0x63a/0xdb0 [ 81.131848] ipv6_skip_exthdr+0x472/0x900 [ 81.136005] icmp6_send+0xec1/0x3460 [ 81.139723] icmpv6_send+0xe0/0x110 [ 81.143376] ip6_link_failure+0x8f/0x580 [ 81.147428] ndisc_error_report+0x101/0x1a0 [ 81.151755] neigh_invalidate+0x385/0x930 [ 81.155993] neigh_timer_handler+0xd85/0x12d0 [ 81.160505] call_timer_fn+0x26a/0x5a0 [ 81.164409] __run_timers+0xda7/0x11c0 [ 81.168411] run_timer_softirq+0x43/0x70 [ 81.172469] __do_softirq+0x56d/0x93d [ 81.176261] Uninit was created at: [ 81.179792] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 81.184804] kmsan_alloc_page+0x82/0xe0 [ 81.188783] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 81.193535] alloc_pages_current+0x6b5/0x970 [ 81.197929] skb_page_frag_refill+0x3ba/0x5e0 [ 81.202410] sk_page_frag_refill+0xa4/0x340 [ 81.206730] __ip6_append_data+0x1a20/0x4bb0 [ 81.211250] ip6_append_data+0x40e/0x6b0 [ 81.215398] rawv6_sendmsg+0x2787/0x4cc0 [ 81.219451] inet_sendmsg+0x48d/0x740 [ 81.223240] ___sys_sendmsg+0xec0/0x1310 [ 81.227294] SYSC_sendmsg+0x2a3/0x3d0 [ 81.231105] SyS_sendmsg+0x54/0x80 [ 81.234646] do_syscall_64+0x309/0x430 [ 81.238646] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 81.243992] ================================================================== [ 81.251355] Disabling lock debugging due to kernel taint [ 81.256812] Kernel panic - not syncing: panic_on_warn set ... [ 81.256812] [ 81.264185] CPU: 0 PID: 5797 Comm: udevd Tainted: G B 4.16.0+ #84 [ 81.271630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.281079] Call Trace: [ 81.283859] [ 81.286016] dump_stack+0x185/0x1d0 [ 81.289670] panic+0x39d/0x940 [ 81.293084] ? ipv6_skip_exthdr+0x796/0x900 [ 81.297403] kmsan_report+0x238/0x240 [ 81.301438] __msan_warning_32+0x6c/0xb0 [ 81.305494] ipv6_skip_exthdr+0x796/0x900 [ 81.309634] icmp6_send+0xec1/0x3460 [ 81.313365] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 81.318839] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 81.324319] ? ndisc_error_report+0x40/0x1a0 [ 81.328748] ? icmpv6_param_prob+0xc0/0xc0 [ 81.332990] icmpv6_send+0xe0/0x110 [ 81.336639] ? ndisc_error_report+0x101/0x1a0 [ 81.341130] ip6_link_failure+0x8f/0x580 [ 81.345359] ? ip6_negative_advice+0x350/0x350 [ 81.349937] ndisc_error_report+0x101/0x1a0 [ 81.354435] ? ndisc_solicit+0x5c0/0x5c0 [ 81.358505] neigh_invalidate+0x385/0x930 [ 81.362669] neigh_timer_handler+0xd85/0x12d0 [ 81.367188] call_timer_fn+0x26a/0x5a0 [ 81.371075] ? neigh_blackhole+0x60/0x60 [ 81.375161] __run_timers+0xda7/0x11c0 [ 81.379062] ? neigh_blackhole+0x60/0x60 [ 81.383140] ? irq_exit+0x202/0x240 [ 81.386768] ? run_timer_softirq+0x14/0x70 [ 81.390994] ? timers_dead_cpu+0x1010/0x1010 [ 81.395402] run_timer_softirq+0x43/0x70 [ 81.399559] __do_softirq+0x56d/0x93d [ 81.403362] irq_exit+0x202/0x240 [ 81.406801] exiting_irq+0xe/0x10 [ 81.410243] smp_apic_timer_interrupt+0x64/0x90 [ 81.414988] apic_timer_interrupt+0xf/0x20 [ 81.419209] [ 81.421446] RIP: 0010:kmsan_kmalloc+0xc6/0x100 [ 81.426011] RSP: 0018:ffff88016647f8b8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 [ 81.433721] RAX: 0000000000000246 RBX: ffff880167877540 RCX: 0000000000000011 [ 81.440994] RDX: 0000000000000010 RSI: ffffea00086d2ce8 RDI: ffff880167877540 [ 81.448270] RBP: ffff88016647f8f8 R08: 00000000010000c0 R09: 0000000000000002 [ 81.455546] R10: 0000000000000000 R11: ffff880166470000 R12: ffff88021f00d980 [ 81.462860] R13: ffff880168dfbb00 R14: 0000000000000040 R15: 00000000014000c0 [ 81.470138] kmem_cache_alloc+0xaab/0xb90 [ 81.474279] ? anon_vma_fork+0x347/0xb20 [ 81.478337] anon_vma_fork+0x347/0xb20 [ 81.482212] copy_process+0x655d/0x9b30 [ 81.486188] _do_fork+0x311/0xf00 [ 81.489628] ? prepare_exit_to_usermode+0x149/0x3a0 [ 81.494644] SYSC_clone+0xf6/0x110 [ 81.498186] SyS_clone+0x77/0xa0 [ 81.501557] do_syscall_64+0x309/0x430 [ 81.505432] ? sys_vfork+0x70/0x70 [ 81.508962] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 81.514135] RIP: 0033:0x7fe9c7ca0f46 [ 81.517841] RSP: 002b:00007ffcaa0c3b40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 81.525577] RAX: ffffffffffffffda RBX: 00007ffcaa0c3b40 RCX: 00007fe9c7ca0f46 [ 81.532854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 81.540114] RBP: 00007ffcaa0c3ba0 R08: 00000000000016a5 R09: 00000000000016a5 [ 81.547433] R10: 00007fe9c85bda70 R11: 0000000000000246 R12: 0000000000000000 [ 81.554790] R13: 00007ffcaa0c3b60 R14: 0000000000000005 R15: 0000000000000005 [ 81.562623] Dumping ftrace buffer: [ 81.566259] (ftrace buffer empty) [ 81.569957] Kernel Offset: disabled [ 81.573582] Rebooting in 86400 seconds..