INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts. 2018/05/08 18:23:18 fuzzer started 2018/05/08 18:23:18 dialing manager at 10.128.0.26:45587 syzkaller login: [ 53.212977] can: request_module (can-proto-0) failed. [ 53.224380] can: request_module (can-proto-0) failed. 2018/05/08 18:23:28 kcov=true, comps=false 2018/05/08 18:23:32 executing program 0: syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x0) 2018/05/08 18:23:32 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) prctl$setname(0xf, &(0x7f0000000300)="f0e24b879d9a5c5a4378b44e5d2c3f2e879579bb9676ede870bf5e9fb8cb026be965c71e97bafe193b90147ac94ca65b38ac14d30643a407fcef6d978a16124158ac4415dd201fb19f79969bd238e3c9c0ff7fa64e6727ceae8dbff8a20de92ad91c71425c4f32c171e67fb495a12c62da98f10996fc441672") 2018/05/08 18:23:32 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x800000200000008, 0x0, 0x8000) 2018/05/08 18:23:32 executing program 7: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d8"], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/133}, 0x8d, 0x0, 0x0) timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 2018/05/08 18:23:32 executing program 3: 2018/05/08 18:23:32 executing program 2: 2018/05/08 18:23:32 executing program 4: 2018/05/08 18:23:32 executing program 5: [ 59.019427] IPVS: ftp: loaded support on port[0] = 21 [ 59.101306] IPVS: ftp: loaded support on port[0] = 21 [ 59.161557] IPVS: ftp: loaded support on port[0] = 21 [ 59.217199] IPVS: ftp: loaded support on port[0] = 21 [ 59.316578] IPVS: ftp: loaded support on port[0] = 21 [ 59.428656] IPVS: ftp: loaded support on port[0] = 21 [ 59.575186] IPVS: ftp: loaded support on port[0] = 21 [ 59.728466] IPVS: ftp: loaded support on port[0] = 21 [ 61.519467] ip (4775) used greatest stack depth: 53944 bytes left [ 62.266617] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.273161] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.301250] device bridge_slave_0 entered promiscuous mode [ 62.408604] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.415147] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.437454] device bridge_slave_0 entered promiscuous mode [ 62.490334] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.496831] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.517949] device bridge_slave_0 entered promiscuous mode [ 62.605750] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.612297] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.641328] device bridge_slave_1 entered promiscuous mode [ 62.683689] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.690188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.701559] ip (4862) used greatest stack depth: 53656 bytes left [ 62.715125] device bridge_slave_1 entered promiscuous mode [ 62.730803] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.737309] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.772331] device bridge_slave_1 entered promiscuous mode [ 62.796470] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.803019] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.828706] device bridge_slave_0 entered promiscuous mode [ 62.865829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.874372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.953279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.067331] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.073862] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.111456] device bridge_slave_1 entered promiscuous mode [ 63.121308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.136283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.146296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.158536] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.165151] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.201207] device bridge_slave_0 entered promiscuous mode [ 63.219710] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.226244] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.251131] device bridge_slave_0 entered promiscuous mode [ 63.351832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.421177] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.427706] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.466137] device bridge_slave_1 entered promiscuous mode [ 63.489982] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.496473] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.530199] device bridge_slave_1 entered promiscuous mode [ 63.540474] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.546988] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.561139] device bridge_slave_0 entered promiscuous mode [ 63.568742] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.575274] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.589468] device bridge_slave_0 entered promiscuous mode [ 63.626420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.644513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.653801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.745124] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.751673] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.792740] device bridge_slave_1 entered promiscuous mode [ 63.813476] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.820091] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.841367] device bridge_slave_1 entered promiscuous mode [ 63.852815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.903179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.912258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.922912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.937815] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.012728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.032232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 64.151713] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.161743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.180545] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.226849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.317101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 64.373419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.383527] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.392965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.413461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.421393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.445581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.479451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.524715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.567338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.574361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.633014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.658414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.666191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.685114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.694854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.701955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.769600] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.882423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.904838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.914941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.985476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.994852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.032091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.045916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.145482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.154641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.189454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.196625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.245277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.256110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.276414] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.305781] team0: Port device team_slave_0 added [ 65.329340] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.346270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.409315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.428516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.452089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.493886] team0: Port device team_slave_0 added [ 65.535675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.557175] team0: Port device team_slave_0 added [ 65.576859] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.595163] team0: Port device team_slave_1 added [ 65.637881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.646152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.685197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 65.703653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.723124] team0: Port device team_slave_1 added [ 65.734592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.758340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.792242] team0: Port device team_slave_1 added [ 65.817023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.824780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.840337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.913904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 65.921133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.938291] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.963548] team0: Port device team_slave_0 added [ 65.969317] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.977875] team0: Port device team_slave_0 added [ 66.000886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.009989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.022939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.049886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.057446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.065141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.078636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.116104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.135022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.151751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 66.179677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.192700] team0: Port device team_slave_1 added [ 66.213606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.232298] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.244139] team0: Port device team_slave_0 added [ 66.261618] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.285524] team0: Port device team_slave_1 added [ 66.303587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.311159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.322972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.350588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.361428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.374195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.391389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.399905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.428267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.457899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.486292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.493333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.507663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.537596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.562229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.582701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.590572] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.602023] team0: Port device team_slave_1 added [ 66.625762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.637761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.666856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.677276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.693136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.721907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.741971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.759752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.778655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.788082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 66.800964] team0: Port device team_slave_0 added [ 66.812341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.833098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.845355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.860107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.871934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.879960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.901887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.921447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.946391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.974294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.984871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.002711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.024729] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.042468] team0: Port device team_slave_0 added [ 67.064241] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.087695] team0: Port device team_slave_1 added [ 67.100284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.116435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.145504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.165246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.174355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.192018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.230368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.248521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.289788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.299146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.317168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.352878] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.364212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.386021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.400573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.414504] team0: Port device team_slave_1 added [ 67.430397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.438971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.469287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.487893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.496137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.510224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.543793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.559155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.571392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.601347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.611959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 67.619613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.641194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.672138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.712442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.742930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.757510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.779840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.810872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.823923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.841475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.884302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 67.891614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.928384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.015596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.022961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.038603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.147374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 68.162398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.177325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.421585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 68.429265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.442401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.539413] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.545920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.552852] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.559330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.609920] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.617862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.641500] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.647992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.654854] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.661348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.680763] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.908470] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.914997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.921908] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.928393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.962075] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.286253] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.292767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.299635] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.306198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.357082] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.572907] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.579421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.586363] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.592840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.608181] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.619176] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.625685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.632551] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.639078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.675298] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.687486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.704795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.713554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.722190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.731435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.992716] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.999232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.006134] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.037577] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.050788] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.057284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.064210] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.070694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.080581] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.714162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.734961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.785222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.926901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.049801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.204931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.644770] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.687885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.729126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.750315] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.892777] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.066847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.082858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.133411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.470885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.477220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.494379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.574876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.583187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.594366] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.600703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.609953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.736825] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.743260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.756951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.886444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.002961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.043458] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.049800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.061854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.330269] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.388106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.394450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.404767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.495235] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.501608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.513803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.570855] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.687435] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.719875] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.726406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.751904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.800826] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.807321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.827797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.074451] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.323775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.372719] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.546469] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.723645] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/08 18:24:01 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved=0x1}, 0xffffffffffffff1e, 0x0) 2018/05/08 18:24:01 executing program 1: 2018/05/08 18:24:01 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f00000000c0)=@generic={0x0, "fa1f00f03610f591489a3b3065de49129204a354145d27b2b94790220c1cc0b3db3802f14f4459504bbbc810ad2177c9b595242e398f154dce769c6f278d8a85d207f929c8644d1a9de073273238409ba220dd75a3fe170224f409a2a5e95d9ef26c54a188d6eb28b67f2fd97f015aff039daa7ea208d7dae2ab3ca0c53a"}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000002240)}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001ec0)="b4", 0x1}], 0x1}}], 0x2, 0x4004000) 2018/05/08 18:24:01 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000000040)) 2018/05/08 18:24:01 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x1, 0x1}, 0x20) 2018/05/08 18:24:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x201, 0x0, 0x0, {0x80}}, 0x219}, 0x1}, 0x0) 2018/05/08 18:24:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/4096, 0x55b}], 0x1, 0x3) 2018/05/08 18:24:01 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/36, &(0x7f0000000280)=0x298) [ 87.540257] IPVS: length: 664 != 8 [ 87.558526] IPVS: length: 664 != 8 2018/05/08 18:24:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}], 0x1, 0x8000) 2018/05/08 18:24:01 executing program 5: socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x140, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x132, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 2018/05/08 18:24:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/05/08 18:24:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x500, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) listen(r0, 0x400) 2018/05/08 18:24:01 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f00000000c0)=@generic={0x0, "fa1f00f03610f591489a3b3065de49129204a354145d27b2b94790220c1cc0b3db3802f14f4459504bbbc810ad2177c9b595242e398f154dce769c6f278d8a85d207f929c8644d1a9de073273238409ba220dd75a3fe170224f409a2a5e95d9ef26c54a188d6eb28b67f2fd97f015aff039daa7ea208d7dae2ab3ca0c53a"}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000002240)}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001ec0)="b4", 0x1}], 0x1}}], 0x2, 0x4004000) 2018/05/08 18:24:01 executing program 0: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 2018/05/08 18:24:01 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000000040)) 2018/05/08 18:24:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x28, 0x2e, 0xaff, 0x0, 0x0, {0x2}, [@typed={0x14, 0x0, @ipv6=@dev={0xfe, 0x80}}]}, 0x28}, 0x1}, 0x0) [ 87.846978] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/08 18:24:02 executing program 4: clone(0x200, &(0x7f0000fbf000), &(0x7f00000078c0), &(0x7f0000f8b000), &(0x7f0000007980)) mknod(&(0x7f0000000080)='./file0\x00', 0x103a, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000480)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') read(r0, &(0x7f0000f1bf7e)=""/130, 0x82) execve(&(0x7f0000000040)='.\x00', &(0x7f0000000180), &(0x7f0000000240)) open$dir(&(0x7f0000000380)='./file0\x00', 0x2, 0x0) 2018/05/08 18:24:02 executing program 0: r0 = socket(0xa, 0x3, 0x2) ioctl(r0, 0x8912, &(0x7f00000000c0)) 2018/05/08 18:24:02 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80}}, 0x14) 2018/05/08 18:24:02 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000, 0x0) pread64(r0, &(0x7f0000002200)=""/4096, 0x1000, 0x0) 2018/05/08 18:24:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80}}, 0x14) dup3(r0, r1, 0x0) 2018/05/08 18:24:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x28, 0x2e, 0xaff, 0x0, 0x0, {0x2}, [@typed={0x14, 0x0, @ipv6=@dev={0xfe, 0x80}}]}, 0x28}, 0x1}, 0x0) 2018/05/08 18:24:02 executing program 7: r0 = eventfd(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) write$eventfd(r0, &(0x7f0000ceeff8)=0xffff8000, 0x8) 2018/05/08 18:24:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004df000)='/dev/ptmx\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)='\x00', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000936ffc)=0x3) close(r0) [ 88.125388] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/08 18:24:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20000080904900, &(0x7f0000623000), &(0x7f0000000000), &(0x7f0000907000), &(0x7f0000553000)) 2018/05/08 18:24:02 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040), 0x8e01, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/05/08 18:24:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') chdir(&(0x7f00000000c0)='..') mount(&(0x7f0000153000)='./file0\x00', &(0x7f0000000100)='..', &(0x7f0000000080)='anon_inodefs\x00', 0x84000, &(0x7f0000000040)) 2018/05/08 18:24:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/raw6\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) lseek(0xffffffffffffffff, 0x0, 0x4) syz_extract_tcp_res(&(0x7f00000007c0), 0x0, 0x0) 2018/05/08 18:24:02 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x3) write$binfmt_aout(r0, &(0x7f00000013c0)=ANY=[], 0xfffffe38) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) shutdown(r0, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000100), 0x4) [ 88.333881] ================================================================== [ 88.341303] BUG: KMSAN: uninit-value in ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 88.349016] CPU: 0 PID: 6739 Comm: syz-executor2 Not tainted 4.16.0+ #87 [ 88.355848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.365197] Call Trace: [ 88.367791] dump_stack+0x185/0x1d0 [ 88.371426] ? ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 88.376962] kmsan_report+0x142/0x240 [ 88.380769] __msan_warning_32+0x6c/0xb0 [ 88.384836] ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 88.390210] ip_route_output_flow+0x1eb/0x3c0 [ 88.394708] ? security_sk_classify_flow+0x49/0x190 [ 88.399723] raw_sendmsg+0x196a/0x41f0 [ 88.403631] ? compat_raw_ioctl+0x100/0x100 [ 88.407952] inet_sendmsg+0x48d/0x740 [ 88.411755] ? security_socket_sendmsg+0x9e/0x210 [ 88.416599] ? inet_getname+0x500/0x500 [ 88.420577] SYSC_sendto+0x6c3/0x7e0 [ 88.424294] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 88.429750] ? prepare_exit_to_usermode+0x149/0x3a0 [ 88.434782] SyS_sendto+0x8a/0xb0 [ 88.438239] do_syscall_64+0x309/0x430 [ 88.442135] ? SYSC_getpeername+0x560/0x560 [ 88.446458] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 88.451646] RIP: 0033:0x455979 [ 88.454835] RSP: 002b:00007f80777d2c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.462661] RAX: ffffffffffffffda RBX: 00007f80777d36d4 RCX: 0000000000455979 [ 88.469934] RDX: 0000000000008e01 RSI: 0000000020000040 RDI: 0000000000000013 [ 88.477232] RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000010 [ 88.484513] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 88.491784] R13: 0000000000000546 R14: 00000000006fbf30 R15: 0000000000000000 [ 88.499054] [ 88.500669] Local variable description: ----res.i.i@ip_route_output_flow [ 88.507487] Variable was created at: [ 88.511199] ip_route_output_flow+0x75/0x3c0 [ 88.515598] raw_sendmsg+0x196a/0x41f0 [ 88.519461] ================================================================== [ 88.526797] Disabling lock debugging due to kernel taint [ 88.532227] Kernel panic - not syncing: panic_on_warn set ... [ 88.532227] [ 88.539574] CPU: 0 PID: 6739 Comm: syz-executor2 Tainted: G B 4.16.0+ #87 [ 88.547696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.557035] Call Trace: [ 88.559615] dump_stack+0x185/0x1d0 [ 88.563231] panic+0x39d/0x940 [ 88.566425] ? ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 88.571945] kmsan_report+0x238/0x240 [ 88.575730] __msan_warning_32+0x6c/0xb0 [ 88.579780] ip_route_output_key_hash_rcu+0x3986/0x40c0 [ 88.585138] ip_route_output_flow+0x1eb/0x3c0 [ 88.589619] ? security_sk_classify_flow+0x49/0x190 [ 88.594633] raw_sendmsg+0x196a/0x41f0 [ 88.598522] ? compat_raw_ioctl+0x100/0x100 [ 88.602837] inet_sendmsg+0x48d/0x740 [ 88.606627] ? security_socket_sendmsg+0x9e/0x210 [ 88.611479] ? inet_getname+0x500/0x500 [ 88.615468] SYSC_sendto+0x6c3/0x7e0 [ 88.619175] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 88.624612] ? prepare_exit_to_usermode+0x149/0x3a0 [ 88.629621] SyS_sendto+0x8a/0xb0 [ 88.633079] do_syscall_64+0x309/0x430 [ 88.636952] ? SYSC_getpeername+0x560/0x560 [ 88.641259] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 88.646440] RIP: 0033:0x455979 [ 88.649610] RSP: 002b:00007f80777d2c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.657308] RAX: ffffffffffffffda RBX: 00007f80777d36d4 RCX: 0000000000455979 [ 88.664558] RDX: 0000000000008e01 RSI: 0000000020000040 RDI: 0000000000000013 [ 88.671810] RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000010 [ 88.679065] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 88.686334] R13: 0000000000000546 R14: 00000000006fbf30 R15: 0000000000000000 [ 88.694073] Dumping ftrace buffer: [ 88.697596] (ftrace buffer empty) [ 88.701290] Kernel Offset: disabled [ 88.704891] Rebooting in 86400 seconds..