INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. 2018/04/20 16:56:30 fuzzer started 2018/04/20 16:56:30 dialing manager at 10.128.0.26:40315 2018/04/20 16:56:37 kcov=true, comps=false 2018/04/20 16:56:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000040)) 2018/04/20 16:56:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') sendfile(r0, r0, &(0x7f0000014000)=0x400000, 0x4bea) 2018/04/20 16:56:40 executing program 2: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002000)="0d576a5a500f28c131f2477eaf87125e", 0x10) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x3a) sendmmsg(r0, &(0x7f00004d2f80)=[{{&(0x7f0000236ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x80, &(0x7f0000622fd8)}}], 0x1, 0x0) 2018/04/20 16:56:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000006c0)) 2018/04/20 16:56:40 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f000011adf8)={0x14, 0x0, 0xd, 0x101}, 0x14}, 0x1}, 0x0) 2018/04/20 16:56:40 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="000000cd8dec00000000000000000000000000000000800fcaa2d15c7d357f6b9cc632c9931d05bc2bcb519fa2618dc29e"]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 2018/04/20 16:56:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x40000000000006, 0x20, &(0x7f00000000c0)="0200080000000000d9005462fa01a55eaf0d2cf653f13cc379ed80eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c070000000000000098fc74e81b1058d02f8001732017e2466a9fc43aea71263335960415e40000f9695da601fffff9001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) dup2(r0, r1) 2018/04/20 16:56:40 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) syzkaller login: [ 45.642654] ip (3803) used greatest stack depth: 54672 bytes left [ 45.685341] ip (3804) used greatest stack depth: 54408 bytes left [ 46.527472] ip (3890) used greatest stack depth: 54200 bytes left [ 46.703270] ip (3902) used greatest stack depth: 53656 bytes left [ 46.889702] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.896231] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.933540] device bridge_slave_0 entered promiscuous mode [ 46.998646] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.005177] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.030971] device bridge_slave_0 entered promiscuous mode [ 47.125788] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.132353] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.170078] device bridge_slave_1 entered promiscuous mode [ 47.177538] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.184096] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.214959] device bridge_slave_0 entered promiscuous mode [ 47.235965] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.242502] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.263950] device bridge_slave_0 entered promiscuous mode [ 47.280832] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.287367] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.296854] device bridge_slave_0 entered promiscuous mode [ 47.304782] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.311273] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.338460] device bridge_slave_0 entered promiscuous mode [ 47.353385] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.359898] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.373674] device bridge_slave_1 entered promiscuous mode [ 47.382978] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.389479] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.402969] device bridge_slave_0 entered promiscuous mode [ 47.413197] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.419689] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.439954] device bridge_slave_0 entered promiscuous mode [ 47.468111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.475934] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.482474] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.495250] device bridge_slave_1 entered promiscuous mode [ 47.504465] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.511021] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.524137] device bridge_slave_1 entered promiscuous mode [ 47.530796] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.537296] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.560089] device bridge_slave_1 entered promiscuous mode [ 47.580178] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.586695] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.612721] device bridge_slave_1 entered promiscuous mode [ 47.622283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.632107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.641079] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.647553] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.656843] device bridge_slave_1 entered promiscuous mode [ 47.663521] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.670100] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.695522] device bridge_slave_1 entered promiscuous mode [ 47.724093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.749649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.762104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.823281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.833873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.904187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.916641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.929309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.961666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.977253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.019635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.101477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.119842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.724112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.844938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.959971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.971532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.980168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.988988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.008975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.028163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.056705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.172113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.181218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.215578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.223210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.234200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.241719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.405980] ip (4095) used greatest stack depth: 53640 bytes left [ 49.422103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.931852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.097833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.177577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.195256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.203858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.229684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.262808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.292810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.305109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.406829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.420869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.431424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.452784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.477019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.490258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.503680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.518010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.526303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.537198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.546364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.563834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.614240] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.624503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.669799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.701484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.708716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.722810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.746769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.759756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.767512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.778738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.798942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.814219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.833307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.843623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.854300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.863093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.877748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.887565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.904954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.947711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.977799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.999664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.026751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.039710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.048006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.057894] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.070770] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.085417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.097772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.110729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.132894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.157276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.174123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.184837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.197749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.222886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.239421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.252401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.273920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.317964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.374189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.381473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.392734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.940126] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.946637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.953559] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.960112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.005476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.014549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.272427] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.278936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.285860] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.292353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.329523] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.447246] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.453761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.460649] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.467163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.521604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.537443] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.543926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.550738] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.557206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.575441] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.588128] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.594640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.601542] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.608111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.664307] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.671597] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.678148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.684985] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.691496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.699588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.725515] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.732092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.738988] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.745479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.860932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.876818] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.883308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.890188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.896666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.956771] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.048699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.058978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.096737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.130809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.161630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.193452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.200627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.366235] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.882413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.992957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.032881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.083108] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.175941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.182264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.196647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.234016] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.418156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.436281] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.752007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.758446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.772228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.833973] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.841174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.852715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.901283] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.909472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.926387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.966250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.974196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.984602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.173648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.179994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.190124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.224153] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.230459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.243092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.316140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.322479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.335103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 16:57:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="4c000000000000000000000000000002"]}) 2018/04/20 16:57:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') sendfile(r0, r0, &(0x7f0000014000)=0x400000, 0x4bea) 2018/04/20 16:57:09 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) exit(0x0) 2018/04/20 16:57:09 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="000000cd8dec00000000000000000000000000000000800fcaa2d15c7d357f6b9c"]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 2018/04/20 16:57:09 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @empty, '\x00\x00\x00\b'}}}}}, &(0x7f00003b5000)={0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) 2018/04/20 16:57:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) dup2(r1, r0) 2018/04/20 16:57:09 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/20 16:57:09 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/20 16:57:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e86", 0x2}], 0x1, &(0x7f0000002000)}, 0x8000) sendto$inet6(r1, &(0x7f0000000480)="43cb33b105c595aaf1a4ee148a0c878e1ff4947fcc99f7724c872e5ec40a7fe5fd785025182bcec301f39b66bc43dd6c81046dff389354dee9362f67003085fe50603b", 0x43, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/20 16:57:09 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f0000000080)=[{0x7f, 0x2, 0x3, 0x1, @tick=0x6, {0x4ef6, 0x2}, {0x4a62}, @addr={0x3f, 0x397d}}, {0xe3b, 0xfa3, 0x100000000, 0x0, @tick=0x3, {0x3, 0x7f}, {0x5, 0x6}, @raw8={"6674ef7d85ca0c85b93f024e"}}, {0x9, 0x0, 0x6, 0x81, @tick=0x40, {0x9, 0x14000000}, {0x9, 0x100000000}, @control={0x10001, 0x1f2, 0x9f8c}}, {0x1, 0x8, 0xed, 0x26, @tick=0x9, {0x4, 0x5}, {0x9, 0x5}, @queue={0x1f, {0x81, 0x3ff}}}, {0x5, 0x8, 0x40, 0x1, @tick, {0x1000, 0xfff}, {0x0, 0x1}, @result={0xffff, 0x2}}, {0xde, 0x7fffffff, 0x9, 0x313e, @time={0x0, 0x989680}, {0x10001, 0x8}, {0x7, 0x9}, @raw32={[0x6, 0x1, 0x1]}}, {0x3, 0x1cb, 0x6, 0x3ff, @time={0x0, 0x1c9c380}, {0x2126, 0x6}, {0x10001, 0x7}, @result={0x4, 0x7c1b}}, {0x7, 0x4, 0x8, 0x4, @time, {0x20, 0x81}, {0x9, 0x20}, @raw32={[0x3, 0x0, 0x3]}}], 0x180) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe, &(0x7f000079bffc), &(0x7f0000000000)=0x4) 2018/04/20 16:57:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f6465765f736e6d703600ece981c98072e874947e6827cbfd3d08cb54118f5f694d4e9df902fbd86e8f049b39c106c3af8f7b9a73ec8cf6ed47f3867261c64190fc613951f9814c8a836948610b8c569879f768c9d95006a40dd0f2950f1351a6ffe5f28b611e0ff1530b1ab500b746104cb3eecaecfb3970ce7de17da7d46c291f2960c087cf4ccd2090072de458a4cdd0a025ca34a11509a8a94b6c377c0757b8cb5727645ede660af177db9f3be26d582a21655512e596d8ef19a3916c1d5484000000000000000000000000000000") utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}, 0x0) signalfd4(r0, &(0x7f00000001c0)={0x5}, 0x8, 0x80000) truncate(&(0x7f0000000080)='./file0\x00', 0x8) 2018/04/20 16:57:09 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{}, {r1, r2/1000+10000}}) mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') inotify_add_watch(r0, &(0x7f0000000140)='../file0\x00', 0x20000000) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') chroot(&(0x7f00000000c0)='../file0\x00') chroot(&(0x7f0000000240)='../file0\x00') statfs(&(0x7f0000000180)='../file0\x00', &(0x7f00000001c0)=""/111) 2018/04/20 16:57:09 executing program 0: r0 = socket(0xa, 0x802, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f0000ba3ffc)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x48f, 0x8, 0x4}) 2018/04/20 16:57:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x80, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x9, 0x6, 0x0, 0x20000000009, 0xc5e}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r2, 0x8}, &(0x7f0000000240)=0x8) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa}, 0x1c) 2018/04/20 16:57:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) dup2(r1, r0) 2018/04/20 16:57:09 executing program 6: r0 = socket$unix(0x1, 0x801, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r1, &(0x7f0000000000)=""/30, 0x1e, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'bond0\x00', 0x4}, 0x18) 2018/04/20 16:57:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020d000010000000000000000000000003000600000000000200000031ebf8c70000000000000000030005000000000002000000bc8a90d88fa2ce28e4a3d391d6cb0000000008001200020001000000000000000000100000de020300000012000000dbea001d00000121000000000000000000ffffe0000001000000000000"], 0x80}, 0x1}, 0x0) 2018/04/20 16:57:09 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) r3 = fcntl$dupfd(r0, 0x406, r1) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x49, r1, &(0x7f0000000100)="a40c5da79afc0809ea582313ffe47869a16322b7569915056de09572d0d5a14f241231566c0686f5c3068dc01a66e76ac2e1c154469e768c8d0dd520746bec12709c8e0fd9b6f569bed0a324f307613b05477f9d5356703342e14719a44c7b4a5a7446e93e42ccf303466db1f173b7cb4aacd66da7cb471d0b80a243e5a34ff83a35bae935f93be419b33b15f6a61510f1f3edff2aeb033f8b7cedbf83b7f20c059becd7a4024a8555130e3adfe31ac03706c718ba8ff66f15cbec8bea201ab2bfdbc4b204d4991176c9987cdf8b20d70003df9b42a6fc8f41bb0b69ca8eb0bf6bd4ab794e95edd5372711f6bfd7954efbb14e21a53a29074c3fbd", 0xfb, 0x8001, 0x0, 0x1, r3}, &(0x7f0000000240)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) dup3(r0, r1, 0x0) [ 72.105960] ================================================================== [ 72.113392] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 72.120654] CPU: 0 PID: 5796 Comm: syz-executor1 Not tainted 4.16.0+ #84 [ 72.127477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.136820] Call Trace: [ 72.139420] dump_stack+0x185/0x1d0 [ 72.143038] ? csum_partial_copy_to_user+0x450/0x500 [ 72.148129] kmsan_report+0x142/0x240 [ 72.151923] __msan_warning_32+0x6c/0xb0 [ 72.155969] csum_partial_copy_to_user+0x450/0x500 [ 72.160899] csum_and_copy_to_iter+0x3dc/0x2140 [ 72.165564] ? kmsan_set_origin_inline+0x6b/0x120 [ 72.170392] ? __msan_poison_alloca+0x15c/0x1d0 [ 72.175058] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 72.180167] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 72.185552] udpv6_recvmsg+0xc65/0x29e0 [ 72.189539] ? udp6_lib_lookup_skb+0x240/0x240 [ 72.194118] inet_recvmsg+0x4c2/0x5f0 [ 72.197928] ? inet_sendpage+0x8c0/0x8c0 [ 72.201981] sock_read_iter+0x405/0x480 [ 72.205961] ? kernel_sock_ip_overhead+0x350/0x350 [ 72.210887] do_iter_readv_writev+0x7bb/0x970 [ 72.215396] ? kernel_sock_ip_overhead+0x350/0x350 [ 72.220331] do_iter_read+0x303/0xd70 [ 72.224142] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 72.229601] do_readv+0x295/0x5f0 [ 72.233051] ? syscall_return_slowpath+0xe9/0x700 [ 72.237890] SYSC_readv+0x9b/0xb0 [ 72.241351] SyS_readv+0x56/0x80 [ 72.244712] do_syscall_64+0x309/0x430 [ 72.248600] ? vfs_readv+0x260/0x260 [ 72.252300] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.257482] RIP: 0033:0x455379 [ 72.260663] RSP: 002b:00007f8524a18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 72.268357] RAX: ffffffffffffffda RBX: 00007f8524a196d4 RCX: 0000000000455379 [ 72.275625] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000013 [ 72.282877] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 72.290134] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.297394] R13: 0000000000000495 R14: 00000000006f9e98 R15: 0000000000000000 [ 72.304649] [ 72.306265] Uninit was created at: [ 72.309793] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 72.314796] kmsan_alloc_page+0x82/0xe0 [ 72.318756] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 72.323496] alloc_pages_current+0x6b5/0x970 [ 72.327888] skb_page_frag_refill+0x3ba/0x5e0 [ 72.332369] sk_page_frag_refill+0xa4/0x340 [ 72.336686] __ip6_append_data+0x1a20/0x4bb0 [ 72.341091] ip6_append_data+0x40e/0x6b0 [ 72.345139] udpv6_sendmsg+0xfd5/0x45b0 [ 72.349109] inet_sendmsg+0x48d/0x740 [ 72.352901] SYSC_sendto+0x6c3/0x7e0 [ 72.356602] SyS_sendto+0x8a/0xb0 [ 72.360046] do_syscall_64+0x309/0x430 [ 72.363929] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.369098] ================================================================== [ 72.376453] Disabling lock debugging due to kernel taint [ 72.381891] Kernel panic - not syncing: panic_on_warn set ... [ 72.381891] [ 72.389266] CPU: 0 PID: 5796 Comm: syz-executor1 Tainted: G B 4.16.0+ #84 [ 72.397391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.406731] Call Trace: [ 72.409312] dump_stack+0x185/0x1d0 [ 72.412934] panic+0x39d/0x940 [ 72.416142] ? csum_partial_copy_to_user+0x450/0x500 [ 72.421244] kmsan_report+0x238/0x240 [ 72.425049] __msan_warning_32+0x6c/0xb0 [ 72.429118] csum_partial_copy_to_user+0x450/0x500 [ 72.434056] csum_and_copy_to_iter+0x3dc/0x2140 [ 72.438739] ? kmsan_set_origin_inline+0x6b/0x120 [ 72.443582] ? __msan_poison_alloca+0x15c/0x1d0 [ 72.448264] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 72.453365] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 72.458739] udpv6_recvmsg+0xc65/0x29e0 [ 72.462725] ? udp6_lib_lookup_skb+0x240/0x240 [ 72.467299] inet_recvmsg+0x4c2/0x5f0 [ 72.471105] ? inet_sendpage+0x8c0/0x8c0 [ 72.475163] sock_read_iter+0x405/0x480 [ 72.479133] ? kernel_sock_ip_overhead+0x350/0x350 [ 72.484061] do_iter_readv_writev+0x7bb/0x970 [ 72.488556] ? kernel_sock_ip_overhead+0x350/0x350 [ 72.493488] do_iter_read+0x303/0xd70 [ 72.497282] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 72.502747] do_readv+0x295/0x5f0 [ 72.506207] ? syscall_return_slowpath+0xe9/0x700 [ 72.511069] SYSC_readv+0x9b/0xb0 [ 72.514523] SyS_readv+0x56/0x80 [ 72.517874] do_syscall_64+0x309/0x430 [ 72.521750] ? vfs_readv+0x260/0x260 [ 72.525463] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.530635] RIP: 0033:0x455379 [ 72.533814] RSP: 002b:00007f8524a18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 72.541528] RAX: ffffffffffffffda RBX: 00007f8524a196d4 RCX: 0000000000455379 [ 72.548804] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000013 2018/04/20 16:57:10 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) exit(0x0) 2018/04/20 16:57:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)) io_setup(0x22, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="ea", 0x1}]) 2018/04/20 16:57:10 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0xa, 0xff, 0xffffffdf00000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000000c0)="a5e4e426cbe30220af4684ce3ab446cf1e", &(0x7f0000000280)="a04e92f4da3b20292a7b70b7f0368eb6cd58411b1b734b0df6891ab2a200b28629020fedde66fbe6ca4325410b5d05f2f9c91b16c98ff94f6c74c2714d475296ef8bad5c7e94e59489b9393afb28c03c86d5c18865e0be00bf36571863cad2e011a7db80d58adf45cb86f49588e75b9ae986e11d1c3b38331907d9c7f801ea189e9213196f37f055b7678cb0e4c6372d"}, 0x3a4) recvfrom$inet6(r0, &(0x7f0000000340)=""/117, 0x75, 0x10042, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=""/231}, 0x18) 2018/04/20 16:57:10 executing program 6: unshare(0x60000000) r0 = socket$inet(0x2, 0x5, 0xfffffffffffffff7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000480)=0x54) r2 = accept(r1, 0x0, &(0x7f00000005c0)) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f0000000280)=0x54) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x44) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB="8a0000001f9b35a60200000000000000d5ea7e4ce688e0ec0e4bcca0cd92b400000007f4fb53aad808552d9b485cfe5400b854c43f9b94f914673c3d632017a5ee954c651e59cc02dea39ad378e1976707ce79c7370c2540ddfb5ca92dd3b3a61313914f78f712d4b04f6e149804025679ea793f8a6e5a8c00000000006d5c000000006b3f068afa146d6db2e13bdd6945c63337b3dee38612a99689c65403e176ed1665632d1f74236aeb49be62dbd9ca162278178f7b1be790755f4d7ce7cc93d2bc4d74fbf2aa8b8118bf6fc5b2fc2588ebe6dddb8ffd3b41617d7af1110f978af48f"], &(0x7f0000000240)=0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast2, @broadcast}, &(0x7f0000000540)=0xc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='cmdline\x00') ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000007c0)=""/43) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000002c0)={r2, 0x464}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000400)={0x100000000, 0x200, 0x0, 0x81}, &(0x7f0000000440)=0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000004c0)=0x4, 0x4) getsockname$packet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000340)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f0000000200)=0x54) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000580)=0xa, 0x4) 2018/04/20 16:57:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002880)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002900)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002a40)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000002b40)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002c40)={0x0, @rand_addr, @loopback}, &(0x7f0000002c80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002cc0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000002dc0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x304000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002e00)={0x15c, r1, 0x7, 0x70bd29, 0x25dfdbfc, {0x2}, [{{0x8, 0x1, r2}, {0x4, 0x2}}, {{0x8, 0x1, r3}, {0xec, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xec08c52969f950a0}, 0x4) 2018/04/20 16:57:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr}, 0xff13) sendmsg$rds(r0, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @rand_addr=0x31a00dfb}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000002c0)=""/217, 0xd9}, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/5, 0x5}], 0x1}}], 0x48}, 0x0) [ 72.556081] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 72.563360] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.570647] R13: 0000000000000495 R14: 00000000006f9e98 R15: 0000000000000000 [ 72.578444] Dumping ftrace buffer: [ 72.581989] (ftrace buffer empty) [ 72.585676] Kernel Offset: disabled [ 72.589279] Rebooting in 86400 seconds..