[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.446461] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.589257] random: sshd: uninitialized urandom read (32 bytes read) [ 34.849919] random: sshd: uninitialized urandom read (32 bytes read) [ 36.136245] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. [ 41.629869] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/16 22:37:55 fuzzer started 2018/05/16 22:37:56 dialing manager at 10.128.0.26:41335 [ 63.412585] can: request_module (can-proto-0) failed. [ 63.423557] can: request_module (can-proto-0) failed. 2018/05/16 22:38:19 kcov=true, comps=false 2018/05/16 22:38:22 executing program 0: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/97) 2018/05/16 22:38:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) sendmsg(r2, &(0x7f0000000600)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000740)="9d", 0x1}, {&(0x7f0000000640)="af8f321f651dfcc4c8ee7bab8d73443f487e7b8c7ffe344c958f905954189457baf87d97e0147b71d52ce4ac5aef1d2957fee944802d249baf402ccc3bf9e143dc0581bf0c81d7b8ff13d686082f1ca602031f2c89a945094dec38f8416e7cb57e96a34e4c1a3ad47947071ba132eecb3fb32d6868fc775e27cc74e8458b8e0e34ef3868a95822dc50a30e339a5aff1368d038825321f19d3339937bfbfb2ab6c8023407ed52255afb653b4841ca4344ada9592e25141835441b7c3e3dd9e1d78867455aac3f0b12b72ebf1d7316dd2bd09629ed2da33a16356f2aace4e70f2fa15a", 0xe2}], 0x2, &(0x7f00000007c0)=ANY=[]}, 0x0) 2018/05/16 22:38:22 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000340), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) epoll_create1(0x0) 2018/05/16 22:38:22 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000080), &(0x7f00000000c0)) 2018/05/16 22:38:22 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000002d001901000000000200000004000000"], 0x1}, 0x1}, 0x0) membarrier(0x2, 0x0) 2018/05/16 22:38:22 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[], 0x0) 2018/05/16 22:38:22 executing program 5: capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)) 2018/05/16 22:38:22 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) [ 69.705807] IPVS: ftp: loaded support on port[0] = 21 [ 69.809229] IPVS: ftp: loaded support on port[0] = 21 [ 69.829079] IPVS: ftp: loaded support on port[0] = 21 [ 69.838672] IPVS: ftp: loaded support on port[0] = 21 [ 69.842249] IPVS: ftp: loaded support on port[0] = 21 [ 69.856885] IPVS: ftp: loaded support on port[0] = 21 [ 69.885164] IPVS: ftp: loaded support on port[0] = 21 [ 69.885195] IPVS: ftp: loaded support on port[0] = 21 [ 71.728017] ip (4715) used greatest stack depth: 54552 bytes left [ 72.048216] ip (4744) used greatest stack depth: 54424 bytes left [ 72.257504] ip (4760) used greatest stack depth: 54072 bytes left [ 72.904463] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.910929] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.953089] device bridge_slave_0 entered promiscuous mode [ 73.124505] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.130976] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.173118] device bridge_slave_1 entered promiscuous mode [ 73.207217] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.213703] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.235828] device bridge_slave_0 entered promiscuous mode [ 73.260443] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.266933] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.295301] device bridge_slave_0 entered promiscuous mode [ 73.310517] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.316979] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.327570] device bridge_slave_0 entered promiscuous mode [ 73.344226] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.350684] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.378766] device bridge_slave_0 entered promiscuous mode [ 73.399952] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.406441] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.425674] device bridge_slave_0 entered promiscuous mode [ 73.438780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.445907] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.452342] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.488713] device bridge_slave_0 entered promiscuous mode [ 73.503157] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.509616] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.522554] device bridge_slave_0 entered promiscuous mode [ 73.531322] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.537771] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.554482] device bridge_slave_1 entered promiscuous mode [ 73.566908] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.573412] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.599180] device bridge_slave_1 entered promiscuous mode [ 73.613940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.623962] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.630414] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.641844] device bridge_slave_1 entered promiscuous mode [ 73.671571] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.678000] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.701115] device bridge_slave_1 entered promiscuous mode [ 73.713217] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.719706] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.730657] device bridge_slave_1 entered promiscuous mode [ 73.742448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.751756] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.758219] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.780309] device bridge_slave_1 entered promiscuous mode [ 73.799998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.808298] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.814860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.859410] device bridge_slave_1 entered promiscuous mode [ 73.876643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.910590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.919775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.941515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.952603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.998467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.062207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.082713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.115629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.128010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.167232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.291505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.321867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.569801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.580674] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.646328] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.689018] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.736579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.756931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.797877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.831698] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.885498] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.924967] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.941961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.960807] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 75.001872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.009087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.035874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.045896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.055247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.062355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.092964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.100112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.144429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.151527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.191987] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.200836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.207780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.262465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.269482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.293991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.309767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.317251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.325962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.345839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.390699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.427289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.436227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.454195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.461173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.486682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.511992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.537129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.547561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.584607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.591725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.634554] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.663981] team0: Port device team_slave_0 added [ 75.712735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.720176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.860868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.905867] team0: Port device team_slave_1 added [ 75.949816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.960593] team0: Port device team_slave_0 added [ 76.008896] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.025328] team0: Port device team_slave_0 added [ 76.084455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.091458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.111867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.157238] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.174862] team0: Port device team_slave_0 added [ 76.189856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.200114] team0: Port device team_slave_0 added [ 76.213844] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.229177] team0: Port device team_slave_0 added [ 76.236635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.251628] team0: Port device team_slave_1 added [ 76.265133] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.284370] team0: Port device team_slave_1 added [ 76.296900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.309823] team0: Port device team_slave_0 added [ 76.355147] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.372137] team0: Port device team_slave_1 added [ 76.389136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.397868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.417212] team0: Port device team_slave_1 added [ 76.445657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.463616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.490215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.500429] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.511520] team0: Port device team_slave_0 added [ 76.525571] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.543432] team0: Port device team_slave_1 added [ 76.552934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.561315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.573279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.595345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.620576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.642767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.662532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.674834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.687777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.695584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.704414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.712145] team0: Port device team_slave_1 added [ 76.719722] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.734535] team0: Port device team_slave_1 added [ 76.756074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.764865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.773997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.785458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.825110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.849875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.865358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.875126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.882681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.890865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.905875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.924744] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.940155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.951416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.963832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.972278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.005801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.027252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.053945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.077859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.095604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.104546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.112512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.120771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.130724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.142199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.154798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.162860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.177616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.193599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.214929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.229539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.237425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.248916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.258213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.267522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.276650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.284965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.293749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.308250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.320932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.329955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.368674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.407349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.432653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.442738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.456677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.466527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.476668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.490847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.499788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.523379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.532436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.539911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.578319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.608814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.624304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.637341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.645547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.653168] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.668715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.691493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.711866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.729069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.744632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.754909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.769615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.778655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.796294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.813632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.823253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.849170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.882338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.901330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.915141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.439474] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.445928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.452742] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.459155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.483301] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.494317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.744628] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.751113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.757927] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.764367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.833619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.901259] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.907695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.914503] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.920909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.979876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.002225] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.008673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.015447] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.021868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.064454] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.072840] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.079303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.086136] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.092558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.100783] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.125832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.132287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.139102] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.145520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.180686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.192296] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.198730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.205502] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.211932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.224452] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.444800] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.451254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.458086] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.464512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.501155] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.547593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.568087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.605532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.637876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.666844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.690994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.699654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.868760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.130195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.372240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.446125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.477234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.540340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.571219] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.721104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.983365] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.124314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.194729] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.202609] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.281671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.345534] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.369185] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.375528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.387111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.562009] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.698917] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.705256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.716723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.968502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.985990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.992317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.006346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.039915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.048272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.062750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.102321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.113247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.145820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.256930] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.294537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.300821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.313292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.447549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.453904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.464777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.590125] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.739133] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.771454] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.818661] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.825458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.836625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.905258] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.087409] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.299622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.689721] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.383853] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 2018/05/16 22:38:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x800007) truncate(&(0x7f0000000140)='./bus\x00', 0x9) 2018/05/16 22:38:49 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x8c) 2018/05/16 22:38:49 executing program 5: capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)) 2018/05/16 22:38:49 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x23f) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/05/16 22:38:49 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000640)={{}, {0x5, 0x3}, 0x0, 0x1}) clone(0x0, &(0x7f0000000340), &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="9afd15fecb61891523492d0fafb567dbc663d1e13bb36ecb9a205ad4ca7e0153971f856b232ee5e9731a49418eeb9823e3aff1b6ca3daf423a3a1a312d05e3726d9fef51d113dc7fedea2bec318deb15ffe08c6e103ce77bd9ac79dc0c1c857a03df1fcdf325f05a42c4dcc476cd62716a") socket(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2018/05/16 22:38:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000003c0)="000000000000000000000600000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa6c2b46e269398a29c28277ef76b30544d7ba92dcf978f1781dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a0bd5", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='/dev/loop#\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000380)={'syz1'}, 0x4) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x325, 0x3, 0x0, 0x6, 0x1c00000, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) fdatasync(r0) 2018/05/16 22:38:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280)="89", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r2, &(0x7f0000000180)=""/230, 0xff4e) 2018/05/16 22:38:49 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 96.034877] IPv4: Oversized IP packet from 127.0.0.1 [ 96.040296] IPv4: Oversized IP packet from 127.0.0.1 2018/05/16 22:38:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xffb3, 0x20008801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/16 22:38:50 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0xd0ffffff}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xcd, &(0x7f0000000000)="a3739c0671606499336aedfca150", &(0x7f00000000c0)=""/205}, 0x28) [ 96.083092] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/16 22:38:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 2018/05/16 22:38:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 2018/05/16 22:38:50 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x23f) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/05/16 22:38:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280)="89", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r2, &(0x7f0000000180)=""/230, 0xff4e) [ 96.376348] IPv4: Oversized IP packet from 127.0.0.1 [ 96.382503] syz-executor4 (6639) used greatest stack depth: 53464 bytes left [ 96.389992] IPv4: Oversized IP packet from 127.0.0.1 [ 96.450540] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/16 22:38:50 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents64(r0, &(0x7f0000000100)=""/81, 0x51) 2018/05/16 22:38:50 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xff, &(0x7f00000000c0), &(0x7f0000000100)) 2018/05/16 22:38:50 executing program 5: rt_sigaction(0x400000000000007, &(0x7f00000000c0)={0x42a4ae, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) exit(0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) 2018/05/16 22:38:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f00000000c0)=0x100000, 0x80000002) 2018/05/16 22:38:50 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) vmsplice(r0, &(0x7f0000000740)=[{&(0x7f0000000480)='}', 0x1}], 0x1, 0x0) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) 2018/05/16 22:38:50 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x23f) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/05/16 22:38:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$fuse(r0, &(0x7f0000000340)={0x28, 0x0, 0x5, @fuse_notify_delete_out={0xff}}, 0x28) dup2(r1, r0) 2018/05/16 22:38:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xfffffffffffffe96, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r2, &(0x7f0000000180)=""/230, 0xff4e) read$eventfd(r2, &(0x7f00000000c0), 0xb4) 2018/05/16 22:38:50 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="40722773656c9e402294d8432d665c272d5b76626f786e65743000", 0x0) lseek(r0, 0xfffffffffffffffd, 0x4) [ 96.911435] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 96.934666] IPv4: Oversized IP packet from 127.0.0.1 [ 96.940208] IPv4: Oversized IP packet from 127.0.0.1 2018/05/16 22:38:51 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="2cd93b61946e", @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, &(0x7f0000000080)) 2018/05/16 22:38:51 executing program 0: unshare(0x40000000) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa201}) [ 97.042714] ================================================================== [ 97.050136] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e3/0x600 [ 97.056556] CPU: 0 PID: 6709 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #96 [ 97.063745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.073773] Call Trace: [ 97.076381] dump_stack+0x185/0x1d0 [ 97.080015] ? netlink_rcv_skb+0x3e3/0x600 [ 97.084260] kmsan_report+0x142/0x240 [ 97.088064] __msan_warning_32+0x6c/0xb0 [ 97.092125] netlink_rcv_skb+0x3e3/0x600 [ 97.096193] ? rtnetlink_bind+0x120/0x120 [ 97.100350] rtnetlink_rcv+0x50/0x60 [ 97.104070] netlink_unicast+0x166b/0x1740 [ 97.108313] ? rtnetlink_net_exit+0xa0/0xa0 [ 97.112646] netlink_sendmsg+0x1072/0x1370 [ 97.116896] kernel_sendmsg+0x228/0x2d0 [ 97.120876] ? netlink_getsockopt+0xc80/0xc80 [ 97.122951] IPVS: ftp: loaded support on port[0] = 21 [ 97.125374] sock_no_sendpage+0x1c8/0x250 [ 97.125394] ? sock_no_mmap+0x30/0x30 [ 97.125406] sock_sendpage+0x1de/0x2c0 [ 97.125426] pipe_to_sendpage+0x31b/0x430 [ 97.125438] ? sock_fasync+0x2b0/0x2b0 [ 97.125457] ? generic_pipe_buf_get+0xf0/0xf0 [ 97.125471] __splice_from_pipe+0x49a/0xf30 [ 97.125485] ? generic_splice_sendpage+0x2a0/0x2a0 [ 97.125505] generic_splice_sendpage+0x1c6/0x2a0 [ 97.125522] ? iter_file_splice_write+0x1710/0x1710 [ 97.125534] ? iter_file_splice_write+0x1710/0x1710 [ 97.125560] direct_splice_actor+0x19b/0x200 [ 97.183372] splice_direct_to_actor+0x764/0x1040 [ 97.188133] ? do_splice_direct+0x540/0x540 [ 97.192458] ? security_file_permission+0x269/0x490 [ 97.197488] do_splice_direct+0x335/0x540 [ 97.201661] do_sendfile+0x1067/0x1e40 [ 97.205567] __x64_sys_sendfile64+0x218/0x390 [ 97.210072] do_syscall_64+0x154/0x220 [ 97.213968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.219156] RIP: 0033:0x455a09 [ 97.222343] RSP: 002b:00007fb021034c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.230056] RAX: ffffffffffffffda RBX: 00007fb0210356d4 RCX: 0000000000455a09 [ 97.237332] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 97.244609] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.251881] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 97.258549] IPVS: ftp: loaded support on port[0] = 21 [ 97.259146] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 97.259156] [ 97.259159] Uninit was stored to memory at: [ 97.259184] kmsan_internal_chain_origin+0x12b/0x210 [ 97.259199] kmsan_memcpy_origins+0x11d/0x170 [ 97.259210] __msan_memcpy+0x109/0x160 [ 97.259222] _copy_from_iter_full+0xdfc/0x1450 [ 97.259232] netlink_sendmsg+0xe1c/0x1370 [ 97.259245] kernel_sendmsg+0x228/0x2d0 [ 97.259257] sock_no_sendpage+0x1c8/0x250 [ 97.259266] sock_sendpage+0x1de/0x2c0 [ 97.259279] pipe_to_sendpage+0x31b/0x430 [ 97.259290] __splice_from_pipe+0x49a/0xf30 [ 97.259302] generic_splice_sendpage+0x1c6/0x2a0 [ 97.259314] direct_splice_actor+0x19b/0x200 [ 97.259326] splice_direct_to_actor+0x764/0x1040 [ 97.259338] do_splice_direct+0x335/0x540 [ 97.259350] do_sendfile+0x1067/0x1e40 [ 97.259378] __x64_sys_sendfile64+0x218/0x390 [ 97.346750] do_syscall_64+0x154/0x220 [ 97.350648] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.355826] Uninit was created at: [ 97.359375] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 97.364398] kmsan_alloc_page+0x82/0xe0 [ 97.368375] __alloc_pages_nodemask+0xf8e/0x5dd0 [ 97.373130] alloc_pages_current+0x6b5/0x970 [ 97.377540] push_pipe+0x680/0xca0 [ 97.381080] iov_iter_get_pages+0x1357/0x1810 [ 97.385577] __blockdev_direct_IO+0x1a4d/0x6580 [ 97.390250] ext4_direct_IO+0xed8/0x27c0 [ 97.394315] generic_file_read_iter+0x3bd2/0x4440 [ 97.399156] ext4_file_read_iter+0x30f/0x520 [ 97.403566] generic_file_splice_read+0x5d2/0x900 [ 97.408408] splice_direct_to_actor+0x4c6/0x1040 [ 97.413165] do_splice_direct+0x335/0x540 [ 97.417314] do_sendfile+0x1067/0x1e40 [ 97.421204] __x64_sys_sendfile64+0x218/0x390 [ 97.425703] do_syscall_64+0x154/0x220 [ 97.429593] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.434773] ================================================================== [ 97.442136] Disabling lock debugging due to kernel taint [ 97.447579] Kernel panic - not syncing: panic_on_warn set ... [ 97.447579] [ 97.454948] CPU: 0 PID: 6709 Comm: syz-executor1 Tainted: G B 4.17.0-rc5+ #96 [ 97.463517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.472872] Call Trace: [ 97.475467] dump_stack+0x185/0x1d0 [ 97.479099] panic+0x39d/0x940 [ 97.482307] ? netlink_rcv_skb+0x3e3/0x600 [ 97.486548] kmsan_report+0x238/0x240 [ 97.490353] __msan_warning_32+0x6c/0xb0 [ 97.494417] netlink_rcv_skb+0x3e3/0x600 [ 97.498478] ? rtnetlink_bind+0x120/0x120 [ 97.502630] rtnetlink_rcv+0x50/0x60 [ 97.506343] netlink_unicast+0x166b/0x1740 [ 97.510589] ? rtnetlink_net_exit+0xa0/0xa0 [ 97.514914] netlink_sendmsg+0x1072/0x1370 [ 97.519162] kernel_sendmsg+0x228/0x2d0 [ 97.523147] ? netlink_getsockopt+0xc80/0xc80 [ 97.527650] sock_no_sendpage+0x1c8/0x250 [ 97.531829] ? sock_no_mmap+0x30/0x30 [ 97.535639] sock_sendpage+0x1de/0x2c0 [ 97.539536] pipe_to_sendpage+0x31b/0x430 [ 97.543697] ? sock_fasync+0x2b0/0x2b0 [ 97.547605] ? generic_pipe_buf_get+0xf0/0xf0 [ 97.552106] __splice_from_pipe+0x49a/0xf30 [ 97.556431] ? generic_splice_sendpage+0x2a0/0x2a0 [ 97.561369] generic_splice_sendpage+0x1c6/0x2a0 [ 97.566128] ? iter_file_splice_write+0x1710/0x1710 [ 97.571145] ? iter_file_splice_write+0x1710/0x1710 [ 97.576161] direct_splice_actor+0x19b/0x200 [ 97.580568] splice_direct_to_actor+0x764/0x1040 [ 97.585325] ? do_splice_direct+0x540/0x540 [ 97.589660] ? security_file_permission+0x269/0x490 [ 97.594678] do_splice_direct+0x335/0x540 [ 97.598819] do_sendfile+0x1067/0x1e40 [ 97.602696] __x64_sys_sendfile64+0x218/0x390 [ 97.607176] do_syscall_64+0x154/0x220 [ 97.611048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.616217] RIP: 0033:0x455a09 [ 97.619387] RSP: 002b:00007fb021034c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.627079] RAX: ffffffffffffffda RBX: 00007fb0210356d4 RCX: 0000000000455a09 [ 97.634330] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 97.641580] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.648829] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 97.656080] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 97.663777] Dumping ftrace buffer: [ 97.667295] (ftrace buffer empty) [ 97.670978] Kernel Offset: disabled [ 97.674578] Rebooting in 86400 seconds..