INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2018/04/22 00:48:52 fuzzer started 2018/04/22 00:48:52 dialing manager at 10.128.0.26:42949 syzkaller login: [ 45.451171] can: request_module (can-proto-0) failed. [ 45.462076] can: request_module (can-proto-0) failed. 2018/04/22 00:48:59 kcov=true, comps=false 2018/04/22 00:49:01 executing program 0: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000208972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) io_setup(0x1, &(0x7f0000e4b000)) 2018/04/22 00:49:01 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1) 2018/04/22 00:49:01 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000100)="1ead7755d47bd6975c78c3765d6d736f918745774ce7ce945bfa9268d5eb6deb1fca6318a507beaec853f16e463ba20747330037ef4c09961231f637024afbc06f850dbcffe9890bb1fc7c89ca10a6af35038920fe8dae329e4cc489ed5abce0ab9fbf8ba64aa7f0eb726434dd18b3876d1dfd61b6ba66558ce0d57fd8acc7e36a629d2a865a3853ad85d8d65176c69f350cf73bea4e9f0d9c7eae26956690dea2c9d0a0e94f57c01f7c643ca78f819a28ae070aa400039889f3e25fec01ed47a5a5539494a1967a804ebe967a15d044050440652a060098024e102ec61f764e06fd3d4f748ff348e6ed0ab2569e545d5e56c78b2045dcc12a98c90cbb93f3bb6eb5b08a10374cec1923b8aeb1792605570b64bacca8024c3df83b5c45eed7d060db4442e004dd406a03182808482025ac0726894219b2e545781fff01a88e436c1d48321991481c699df7c6bba3fb8225a3842f2fd59cec0034aaeeed94786f2ac6fba63c9d06043a6c49d43ce276f0286acd4e6cf4c7e9abe1f2769a42ae1d95c067e6da327bcaba963afa09271e1ecfd51a53bffece0fee383aa70bec585311092199905948d7d55465ad0c57701e368d3363e5f42e7ebf6429fc1fd4f793fbad39a448d1f658dbc4a275ec285256c09f68cc3db4618de606ac9c967f4a454b76d527aaa49288c6f07d4e48b8e588703a9983149d79076cebda42e966669b0cf0dd94d0c0c1564b", 0x209, 0x0, &(0x7f0000000040)={0x2}, 0x10) shutdown(r0, 0x2) 2018/04/22 00:49:01 executing program 4: 2018/04/22 00:49:01 executing program 5: 2018/04/22 00:49:01 executing program 6: 2018/04/22 00:49:01 executing program 2: 2018/04/22 00:49:01 executing program 3: [ 49.666791] IPVS: ftp: loaded support on port[0] = 21 [ 49.763125] IPVS: ftp: loaded support on port[0] = 21 [ 49.823472] IPVS: ftp: loaded support on port[0] = 21 [ 49.874376] IPVS: ftp: loaded support on port[0] = 21 [ 49.981806] IPVS: ftp: loaded support on port[0] = 21 [ 50.067920] IPVS: ftp: loaded support on port[0] = 21 [ 50.220516] IPVS: ftp: loaded support on port[0] = 21 [ 50.395785] IPVS: ftp: loaded support on port[0] = 21 [ 51.825023] ip (4722) used greatest stack depth: 53944 bytes left [ 52.595561] ip (4787) used greatest stack depth: 53640 bytes left [ 52.801639] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.808168] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.834117] device bridge_slave_0 entered promiscuous mode [ 52.922909] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.929435] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.971912] device bridge_slave_0 entered promiscuous mode [ 53.003232] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.009748] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.026169] device bridge_slave_0 entered promiscuous mode [ 53.139578] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.146138] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.175150] device bridge_slave_1 entered promiscuous mode [ 53.191595] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.198144] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.212480] device bridge_slave_1 entered promiscuous mode [ 53.262771] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.269240] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.287621] device bridge_slave_1 entered promiscuous mode [ 53.308201] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.314650] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.338208] device bridge_slave_0 entered promiscuous mode [ 53.369749] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.376295] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.402404] device bridge_slave_0 entered promiscuous mode [ 53.419549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.444470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.452797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.524801] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.531325] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.598213] device bridge_slave_1 entered promiscuous mode [ 53.637776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.655106] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.661591] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.680686] device bridge_slave_1 entered promiscuous mode [ 53.688923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.697131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.704677] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.711164] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.725446] device bridge_slave_0 entered promiscuous mode [ 53.776784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.874211] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.880727] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.909222] device bridge_slave_0 entered promiscuous mode [ 53.948235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.956099] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.962537] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.980572] device bridge_slave_1 entered promiscuous mode [ 53.987700] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.994211] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.028437] device bridge_slave_0 entered promiscuous mode [ 54.056186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.163633] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.170141] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.202161] device bridge_slave_1 entered promiscuous mode [ 54.227334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.244111] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.250565] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.278338] device bridge_slave_1 entered promiscuous mode [ 54.293790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.323767] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.344511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.354977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.368832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.379424] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.478865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.536685] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.554610] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.578371] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.587434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.741778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.789336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.797995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.812389] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.923742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.930735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.945598] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.983010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.990018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.037018] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.060225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.068408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.075488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.140872] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.259994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.268606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.313638] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.355862] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.401801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.408806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.474080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.481130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.532687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.553986] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.588711] team0: Port device team_slave_0 added [ 55.605512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.620887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.651793] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.663429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.673295] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.691568] team0: Port device team_slave_0 added [ 55.707196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.727618] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.745550] team0: Port device team_slave_0 added [ 55.789636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.800608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.809563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.843300] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.871489] team0: Port device team_slave_1 added [ 55.892563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.900081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.943002] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.975132] team0: Port device team_slave_1 added [ 56.016856] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.029713] team0: Port device team_slave_1 added [ 56.065110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.072126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.085797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.093130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.106476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.134950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.162328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.219832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.241947] team0: Port device team_slave_0 added [ 56.252179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.259473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.276167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.325495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.334826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.351506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.359278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.377234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.420318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.448231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.467912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.499648] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.509210] team0: Port device team_slave_1 added [ 56.523784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.531188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.543832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.563404] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.575113] team0: Port device team_slave_0 added [ 56.603823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.617172] team0: Port device team_slave_0 added [ 56.626381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.640948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.666891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.693730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.714853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.730173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.744093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.756983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.766183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.801306] team0: Port device team_slave_0 added [ 56.812684] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.827601] team0: Port device team_slave_1 added [ 56.840291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.851896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.860175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.874957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.909800] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.917398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.930382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.939430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.948247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.965352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.003140] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.011962] team0: Port device team_slave_1 added [ 57.019255] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.036768] team0: Port device team_slave_1 added [ 57.047482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.057820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.070371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.082017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.102732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.130886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.163151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.171376] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.195266] team0: Port device team_slave_0 added [ 57.215116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.226921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.260655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.267592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.283446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.297014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.304505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.311999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.323342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.339681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.364239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.383332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.396663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.416892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.445843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.456907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.464368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.476427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.511144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.545534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.577327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.594680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.603530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.613854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.621476] team0: Port device team_slave_1 added [ 57.634794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.660438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.669462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.680202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.692957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.729854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.762567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.773855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.792491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.824774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.845959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.853787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.869188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.886371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.895302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.909207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.931524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.954293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.989807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.997227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.022345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.062282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.069219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.082778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.120888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.136535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.177458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.304383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.313634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.327000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.529423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.538788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.560069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.570193] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.576685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.583584] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.590080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.624224] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.636463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.660514] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.666960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.673778] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.680219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.702509] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.093179] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.099670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.106539] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.112988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.162849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.388300] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.394767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.401607] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.408064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.466157] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.473069] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.479537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.486380] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.492816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.532689] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.555157] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.561597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.568418] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.574884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.591983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.624090] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.630543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.637408] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.643846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.727175] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.734273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.746628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.766670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.783493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.796859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.804232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.015549] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.022093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.028897] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.035358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.043767] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 61.792594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.559456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.679503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.328711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.385785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.412460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.443876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 69.484153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.567973] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 69.722478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.936165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.100403] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.186936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.225741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.235970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.242271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.253375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.306832] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.381194] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.387445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.401211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.491818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.743270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.915369] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.921637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.929553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.007783] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.014111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.026003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.094658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.100907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.112351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.161167] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.192518] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.198750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.210819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.235913] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.450194] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.456635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.466421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.588874] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.595211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.605860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.684722] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.915754] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.993590] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.202284] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.321312] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.383524] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/22 00:49:29 executing program 7: 2018/04/22 00:49:29 executing program 7: 2018/04/22 00:49:29 executing program 7: r0 = socket$inet(0x2, 0x40000000000002, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 2018/04/22 00:49:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2ddc") accept$ax25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000030000400000000000000000020000000000000400000000093c"]) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xfe}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x20}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x29}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x8050) 2018/04/22 00:49:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fgetxattr(r0, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000100)=""/3, 0x3) 2018/04/22 00:49:30 executing program 0: 2018/04/22 00:49:30 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=""/97, 0x61}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 2018/04/22 00:49:30 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000380)={0x200, {{0x2, 0x4e22, @loopback=0x7f000001}}}, 0x88) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x3, 0x0, "568ba1532d9fa4a4a0b2ac7fed1ba5df6183c56aab4b149a87b45ecde423213c30734da7de0daefc4f85152077b0196e06e5a1d95840e8dc7eb18f5f2781abadec7c9d4ef97335343396d95c6c3a63db"}, 0xd8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20000080, &(0x7f0000000200)={0x2, 0x1000000000004e23}, 0x10) recvfrom$inet(r0, &(0x7f0000000240)=""/247, 0xf7, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000580)={r0}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000006c0)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/22 00:49:30 executing program 2: r0 = memfd_create(&(0x7f0000a91000)="e27c8d772891013143aad08f055ef6cbe2c8b7595b53b307c8ad49b98cbaa812ee7e100007815d9470e2245059b6584a1c209c8c8d9fdef59aa713388da8cd879da3c42db5618a11773c96e39b56", 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x2) 2018/04/22 00:49:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="007c15c8dd56d3b17456f449fcb3381c6b35fabfb94b02776e5ac81ea0749a35"}) 2018/04/22 00:49:30 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000017000)={0xa}, 0x1c) 2018/04/22 00:49:30 executing program 1: 2018/04/22 00:49:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000480)=""/4096, 0x11a7) 2018/04/22 00:49:30 executing program 0: 2018/04/22 00:49:31 executing program 2: 2018/04/22 00:49:31 executing program 3: 2018/04/22 00:49:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="007c15c8dd56d3b17456f449fcb3381c6b35fabfb94b02776e5ac81ea0749a35"}) 2018/04/22 00:49:31 executing program 0: 2018/04/22 00:49:31 executing program 6: 2018/04/22 00:49:31 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 2018/04/22 00:49:31 executing program 4: 2018/04/22 00:49:31 executing program 1: 2018/04/22 00:49:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x84000, 0x0) getdents64(r1, &(0x7f0000000140)=""/255, 0xfc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@dev}}, {{@in6=@local}}}, &(0x7f00000000c0)=0x1ee) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x74ba, 0xffffffffffffff81, 0x5, 0x6, 0x100000000, 0x6, 0x5, 0x10001, 0xcb3, 0xe8a, 0x7fffffff}, 0xb) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000380)=0xeb) signalfd4(r2, &(0x7f0000000040)={0x400}, 0x8, 0x800) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x2}}, 0x26) sendto(r4, &(0x7f00000003c0)="eb422176e5b5e1b853953e68c948b60eca231c7fa3d2508c44032b40d3817eb3277b50504541d444b572353d2939a7ae1d9510afcad66a557b4cf3b6cd2186f028fafd041791bbec24b1892df70499634ba1caad2f8924ab7e2787f0c134620b053283a7d9c75bf58031bf5261dde0ac0a5e2fd675e0b0645003ce0a9aa7bc49b7e2b9d0c0faab22c14e558802cf32bf1cd17ef7cc69f5e5ae261f2e654d62bd0683bcd6ae695b7a5372f9033363f863ab2a6b62d08066c488a97b0ba44fbed8f7df11b8a29b461bc23c280695161d3872146f5c535a0ab5214f581f", 0xdc, 0x0, &(0x7f00000004c0)=@l2={0x1f, 0x2, {0x2, 0x6, 0x8, 0x2, 0x8001, 0x8}, 0x7fff, 0x59d}, 0x80) 2018/04/22 00:49:31 executing program 2: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x852, r1, 0x0) 2018/04/22 00:49:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/04/22 00:49:31 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x9f) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000040)) 2018/04/22 00:49:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="007c15c8dd56d3b17456f449fcb3381c6b35fabfb94b02776e5ac81ea0749a35"}) 2018/04/22 00:49:31 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x4, 0xa, 0x11}, 0x14}, 0x1}, 0x0) 2018/04/22 00:49:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x20000000000003, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="0a20873cfa2d1bae8e6889f4264bc998abf9983affee1a9056aaabf84e5a4b339c2413d514dc9b35ca673d733fb45ff3a7df37d670762a8d51c7a45d14a01a03c85cb45c56dc61b7", 0x48}]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2018/04/22 00:49:31 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/04/22 00:49:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f75fdf)="3e244e7e87adeb0717edd8b867042a0dedf14029e85b62f01a0ca46272e04b65", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x58, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000f77000)}, 0x0) 2018/04/22 00:49:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="007c15c8dd56d3b17456f449fcb3381c6b35fabfb94b02776e5ac81ea0749a35"}) 2018/04/22 00:49:31 executing program 2: 2018/04/22 00:49:31 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x4, 0xa, 0x11}, 0x14}, 0x1}, 0x0) 2018/04/22 00:49:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x84000, 0x0) getdents64(r1, &(0x7f0000000140)=""/255, 0xfc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@dev}}, {{@in6=@local}}}, &(0x7f00000000c0)=0x1ee) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x74ba, 0xffffffffffffff81, 0x5, 0x6, 0x100000000, 0x6, 0x5, 0x10001, 0xcb3, 0xe8a, 0x7fffffff}, 0xb) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000380)=0xeb) signalfd4(r2, &(0x7f0000000040)={0x400}, 0x8, 0x800) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x2}}, 0x26) sendto(r4, &(0x7f00000003c0)="eb422176e5b5e1b853953e68c948b60eca231c7fa3d2508c44032b40d3817eb3277b50504541d444b572353d2939a7ae1d9510afcad66a557b4cf3b6cd2186f028fafd041791bbec24b1892df70499634ba1caad2f8924ab7e2787f0c134620b053283a7d9c75bf58031bf5261dde0ac0a5e2fd675e0b0645003ce0a9aa7bc49b7e2b9d0c0faab22c14e558802cf32bf1cd17ef7cc69f5e5ae261f2e654d62bd0683bcd6ae695b7a5372f9033363f863ab2a6b62d08066c488a97b0ba44fbed8f7df11b8a29b461bc23c280695161d3872146f5c535a0ab5214f581f", 0xdc, 0x0, &(0x7f00000004c0)=@l2={0x1f, 0x2, {0x2, 0x6, 0x8, 0x2, 0x8001, 0x8}, 0x7fff, 0x59d}, 0x80) [ 79.483299] ================================================================== [ 79.490700] BUG: KMSAN: uninit-value in _copy_to_iter+0x46d/0x28f0 [ 79.497008] CPU: 0 PID: 6704 Comm: syz-executor0 Not tainted 4.16.0+ #85 [ 79.503826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.513166] Call Trace: [ 79.515736] dump_stack+0x185/0x1d0 [ 79.519342] ? kmsan_internal_check_memory+0x116/0x1e0 [ 79.524604] kmsan_report+0x142/0x240 [ 79.528389] kmsan_internal_check_memory+0x135/0x1e0 [ 79.533471] kmsan_copy_to_user+0x69/0x160 [ 79.537688] ? _copy_to_iter+0x95/0x28f0 [ 79.541730] _copy_to_iter+0x46d/0x28f0 [ 79.545686] ? finish_wait+0x10a/0x3e0 [ 79.549561] vhost_chr_read_iter+0x7ac/0xc50 [ 79.553951] ? init_wait_entry+0x1a0/0x1a0 [ 79.558172] vhost_net_chr_read_iter+0xf6/0x130 [ 79.562818] ? vhost_net_exit+0x30/0x30 [ 79.566779] aio_read+0x5c1/0x6f0 [ 79.570213] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 79.575551] ? fget+0x41b/0x460 [ 79.578822] do_io_submit+0x1bb4/0x2f60 [ 79.582787] ? kmsan_set_origin_inline+0x6b/0x120 [ 79.587617] SYSC_io_submit+0x98/0xb0 [ 79.591411] SyS_io_submit+0x56/0x80 [ 79.595125] do_syscall_64+0x309/0x430 [ 79.599014] ? SYSC_io_destroy+0x390/0x390 [ 79.603247] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 79.608421] RIP: 0033:0x455389 [ 79.611598] RSP: 002b:00007f7ecec5bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 79.619288] RAX: ffffffffffffffda RBX: 00007f7ecec5c6d4 RCX: 0000000000455389 [ 79.626546] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 00007f7ecec3b000 [ 79.633797] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 79.641052] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 79.648313] R13: 000000000000018d R14: 00000000006f55d8 R15: 0000000000000000 [ 79.655563] [ 79.657172] Uninit was created at: [ 79.660694] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 79.665772] kmsan_kmalloc+0x94/0x100 [ 79.669550] __kmalloc+0x23c/0x350 [ 79.673075] translate_desc+0xbef/0x1120 [ 79.677119] vhost_update_used_flags+0x469/0x8d0 [ 79.681852] vhost_vq_init_access+0x173/0xa20 [ 79.686327] vhost_net_ioctl+0x22b0/0x3480 [ 79.690543] do_vfs_ioctl+0xaf0/0x2440 [ 79.694407] SYSC_ioctl+0x1d2/0x260 [ 79.698011] SyS_ioctl+0x54/0x80 [ 79.701360] do_syscall_64+0x309/0x430 [ 79.705227] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 79.710390] [ 79.712000] Bytes 4-7 of 72 are uninitialized [ 79.716469] ================================================================== [ 79.723804] Disabling lock debugging due to kernel taint [ 79.729228] Kernel panic - not syncing: panic_on_warn set ... [ 79.729228] [ 79.736570] CPU: 0 PID: 6704 Comm: syz-executor0 Tainted: G B 4.16.0+ #85 [ 79.744685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.754020] Call Trace: [ 79.756600] dump_stack+0x185/0x1d0 [ 79.760206] panic+0x39d/0x940 [ 79.763386] ? kmsan_internal_check_memory+0x116/0x1e0 [ 79.768639] kmsan_report+0x238/0x240 [ 79.772419] kmsan_internal_check_memory+0x135/0x1e0 [ 79.777502] kmsan_copy_to_user+0x69/0x160 [ 79.781716] ? _copy_to_iter+0x95/0x28f0 [ 79.785758] _copy_to_iter+0x46d/0x28f0 [ 79.789710] ? finish_wait+0x10a/0x3e0 [ 79.793584] vhost_chr_read_iter+0x7ac/0xc50 [ 79.797971] ? init_wait_entry+0x1a0/0x1a0 [ 79.802185] vhost_net_chr_read_iter+0xf6/0x130 [ 79.806832] ? vhost_net_exit+0x30/0x30 [ 79.810785] aio_read+0x5c1/0x6f0 [ 79.814221] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 79.819564] ? fget+0x41b/0x460 [ 79.822822] do_io_submit+0x1bb4/0x2f60 [ 79.826777] ? kmsan_set_origin_inline+0x6b/0x120 [ 79.831618] SYSC_io_submit+0x98/0xb0 [ 79.835409] SyS_io_submit+0x56/0x80 [ 79.839103] do_syscall_64+0x309/0x430 [ 79.842972] ? SYSC_io_destroy+0x390/0x390 [ 79.847199] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 79.852364] RIP: 0033:0x455389 [ 79.855530] RSP: 002b:00007f7ecec5bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 79.863216] RAX: ffffffffffffffda RBX: 00007f7ecec5c6d4 RCX: 0000000000455389 [ 79.870466] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 00007f7ecec3b000 [ 79.877709] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 79.884955] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 79.892201] R13: 000000000000018d R14: 00000000006f55d8 R15: 0000000000000000 [ 79.899898] Dumping ftrace buffer: [ 79.903417] (ftrace buffer empty) [ 79.907101] Kernel Offset: disabled [ 79.910703] Rebooting in 86400 seconds..