[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 27.506699] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.814258] random: sshd: uninitialized urandom read (32 bytes read) [ 29.050884] random: sshd: uninitialized urandom read (32 bytes read) [ 30.270243] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. [ 35.788490] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/05 10:00:48 fuzzer started 2018/06/05 10:00:49 dialing manager at 10.128.0.26:37373 [ 58.928166] can: request_module (can-proto-0) failed. [ 58.939296] can: request_module (can-proto-0) failed. 2018/06/05 10:01:13 kcov=true, comps=false 2018/06/05 10:01:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) move_pages(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0) 2018/06/05 10:01:19 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x5f5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000002740)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}) lseek(r2, 0x0, 0x3) 2018/06/05 10:01:19 executing program 7: syz_fuseblk_mount(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/05 10:01:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="736d6170730041d536b27375550287b0bbf6a790b5675dce53d3d50d24f1bf1a5c3d4faefd6fdf9705996043bd1ab985ab123e5136f6a296035761c0bb97bd9f9ed018a476600601ff2d0df3eee1cb3f5d1ac4d9f18152f851a33c11565da4b1f10ca0fbc47b1945545a25aef12338add879f3f5fb92a77585b58b5011b16c47210cfe00b7471f953b58789c5d11e4696cca451e2a7490c3") read(r0, &(0x7f0000003400)=""/4096, 0xcaf) 2018/06/05 10:01:19 executing program 4: 2018/06/05 10:01:19 executing program 3: 2018/06/05 10:01:19 executing program 5: 2018/06/05 10:01:19 executing program 6: [ 66.976965] IPVS: ftp: loaded support on port[0] = 21 [ 67.043721] IPVS: ftp: loaded support on port[0] = 21 [ 67.090352] IPVS: ftp: loaded support on port[0] = 21 [ 67.108502] IPVS: ftp: loaded support on port[0] = 21 [ 67.114503] IPVS: ftp: loaded support on port[0] = 21 [ 67.131944] IPVS: ftp: loaded support on port[0] = 21 [ 67.139533] IPVS: ftp: loaded support on port[0] = 21 [ 67.157868] IPVS: ftp: loaded support on port[0] = 21 [ 68.682932] ip (4607) used greatest stack depth: 54344 bytes left [ 69.162568] ip (4647) used greatest stack depth: 53880 bytes left [ 70.340135] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.346602] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.400143] device bridge_slave_0 entered promiscuous mode [ 70.421631] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.428105] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.436235] device bridge_slave_0 entered promiscuous mode [ 70.487673] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.494123] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.522195] device bridge_slave_0 entered promiscuous mode [ 70.544721] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.551165] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.569966] device bridge_slave_0 entered promiscuous mode [ 70.580588] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.586991] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.608274] device bridge_slave_0 entered promiscuous mode [ 70.643637] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.650101] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.677585] device bridge_slave_1 entered promiscuous mode [ 70.684621] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.691114] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.699502] device bridge_slave_0 entered promiscuous mode [ 70.707387] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.713794] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.733568] device bridge_slave_1 entered promiscuous mode [ 70.749298] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.755884] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.781022] device bridge_slave_1 entered promiscuous mode [ 70.788240] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.794666] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.808786] device bridge_slave_0 entered promiscuous mode [ 70.832532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.842501] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.848930] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.864123] device bridge_slave_0 entered promiscuous mode [ 70.871697] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.878132] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.888451] device bridge_slave_1 entered promiscuous mode [ 70.903919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.911567] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.918070] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.951108] device bridge_slave_1 entered promiscuous mode [ 70.967936] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.974406] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.988449] device bridge_slave_1 entered promiscuous mode [ 71.009559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.016691] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.023131] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.059988] device bridge_slave_1 entered promiscuous mode [ 71.072563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.084912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.094198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.105198] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.111635] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.174710] device bridge_slave_1 entered promiscuous mode [ 71.195113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.207653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.233191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.247168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.260779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.403997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.423888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.432816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.460693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.667188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.688361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.713384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.824594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.894399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.904584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.951183] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.037670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.049922] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.103812] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.125971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.147525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.167074] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.177747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.203622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.212062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.260767] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.277739] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.360420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.408276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.415851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.432283] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.443730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.450653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.474271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.481942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.516302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.528621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.553861] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.565712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.577427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.599650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.606620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.707966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.714974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.755341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.763692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.770611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.789714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.870808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.878834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.949514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.956571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.999812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.006851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.069427] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.093121] team0: Port device team_slave_0 added [ 73.111653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.128469] team0: Port device team_slave_0 added [ 73.160388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.189214] team0: Port device team_slave_0 added [ 73.219210] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.247968] team0: Port device team_slave_0 added [ 73.290495] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.305657] team0: Port device team_slave_1 added [ 73.320280] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.349774] team0: Port device team_slave_1 added [ 73.394071] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.415276] team0: Port device team_slave_1 added [ 73.441315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.465185] team0: Port device team_slave_0 added [ 73.481474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.497560] team0: Port device team_slave_1 added [ 73.528545] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.543273] team0: Port device team_slave_0 added [ 73.556934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.595152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.607225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.636432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.643980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.652579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.670551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.700732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.728842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.748792] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.757234] team0: Port device team_slave_1 added [ 73.770144] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.779396] team0: Port device team_slave_0 added [ 73.796971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.805195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.832963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.861986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.871209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.878727] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.887749] team0: Port device team_slave_0 added [ 73.907197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.917761] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.936994] team0: Port device team_slave_1 added [ 73.952228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.971879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.999646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.015595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.026782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.034876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.045972] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.053657] team0: Port device team_slave_1 added [ 74.064196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.073323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.097989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.107929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.123213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.132109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.141923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.150108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.158839] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.183525] team0: Port device team_slave_1 added [ 74.202501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.215463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.236416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.259339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.283128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.293714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.301818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.311459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.320268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.333129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.361772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.369415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.377405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.388159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.405738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.427653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.447073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.460621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.475792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.486641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.494190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.504148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.517774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.527550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.546433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.571264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.590138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.614271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.624157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.632848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.640888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.649276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.657777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.666271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.678364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.709891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.718349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.732294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.747590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.761359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.778372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.787509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.800672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.812494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.846598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.859909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.878971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.895463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.906481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.920003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.932125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.958632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.989752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.999750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.013108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.032522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.041872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.069580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.102329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.136567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.157082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.203803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.211404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.229624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.272518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.279956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.297269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.995583] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.002127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.008884] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.015304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.041618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.052143] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.058585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.065349] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.071771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.111212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.117675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.130885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.153089] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.159509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.166260] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.172666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.180697] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.193699] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.200130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.206907] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.213315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.222240] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.253075] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.259491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.266263] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.272656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.339858] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.526940] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.533409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.540247] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.546678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.578924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.631084] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.637552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.644345] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.650772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.736002] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.921569] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.928103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.934880] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.941334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.952361] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.175432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.185865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.205981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.222650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.239805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.248016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.166379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.208375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.531722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.872188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.919687] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.981117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.009249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.034978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.192792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.326634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.511389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.580597] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.586883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.600733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.678584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.802465] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.813669] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.857482] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.863995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.879720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.024745] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.150854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.157206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.167810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.308610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.412563] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.457739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.464248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.476085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.595662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.602273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.615802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.691918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.698272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.711839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.748324] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.801794] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 87.809157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.817856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.062320] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.194017] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.200418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.211202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.263871] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.352829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.530483] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.646278] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.070395] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 10:01:45 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0f"]}) 2018/06/05 10:01:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/06/05 10:01:45 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0xfe5f) sendto$inet(r0, &(0x7f0000000040)="88", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2}, 0x6) 2018/06/05 10:01:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) 2018/06/05 10:01:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x28400, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x0, 0x6, 0x8, 0xeda, 0x5}) r3 = socket$inet(0x2, 0x7, 0xf2) rt_sigreturn() rt_sigaction(0xa, &(0x7f0000000180)={0x4, {0x1f}, 0x8000000, 0x8}, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) move_pages(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000340)=[0x0], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000140)={0x4, 0x1f, 0xf0}, 0xc) 2018/06/05 10:01:46 executing program 7: mkdir(&(0x7f0000000240)='./file0\x00', 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001300)=""/146, 0x92}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="101301000017"], 0x6}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000140)=ANY=[]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000900)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000000003e}, 0x2c) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000180)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000200)="fd8cd8", 0x3}], 0x1, &(0x7f00000006c0)=ANY=[], 0x0, 0x10}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)) r3 = socket$kcm(0xa, 0x200000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x890c, &(0x7f00000013c0)) 2018/06/05 10:01:46 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) write$vnet(r0, &(0x7f0000000280)={0x1, {&(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/4096, 0x0, 0x2}}, 0x68) 2018/06/05 10:01:46 executing program 3: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000140)="f4001100002b2c25e994efd18498d66206baa68754a30000000002000000000000000000000000000600000000000000c00195c1e2d4f32ebdbed8285538dd308252644135333a847bbaeb4e914b976c5bb59d", 0x53}], 0x1}, 0x0) 2018/06/05 10:01:46 executing program 2: r0 = gettid() exit(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(r0, 0x5, &(0x7f0000000000), &(0x7f0000000100)) 2018/06/05 10:01:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff94}}) io_setup(0x80, &(0x7f0000000000)) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000040)="3a613c17b48765e0cddcc224a1e089bc2b526c840cfd408fcabee6a93fc49d7e493cea477208b77c050ea8d0517758693603c677fd3b5fbf439563ce112319b99670698453fce603269d", 0x4a}, &(0x7f00000001c0)) 2018/06/05 10:01:46 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 2018/06/05 10:01:46 executing program 6: r0 = socket(0x1000000000010, 0x803, 0x6) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000007a1", 0x12, 0x0, 0x0, 0x0) [ 93.468019] netlink: 2 bytes leftover after parsing attributes in process `syz-executor6'. 2018/06/05 10:01:46 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000400)=@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000480)}, 0x0) 2018/06/05 10:01:46 executing program 3: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000140)="f4001100002b2c25e994efd18498d66206baa68754a30000000002000000000000000000000000000600000000000000c00195c1e2d4f32ebdbed8285538dd308252644135333a847bbaeb4e914b976c5bb59d", 0x53}], 0x1}, 0x0) 2018/06/05 10:01:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="ec0c02144a26f77b3305cd339213e99c", 0x10) close(r0) 2018/06/05 10:01:46 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x1, @ipv4=@multicast1=0xe0000001}]}, 0x1c}, 0x1}, 0x0) 2018/06/05 10:01:46 executing program 1: r0 = mq_open(&(0x7f0000000040)='eth0\x00', 0x0, 0x0, &(0x7f00000000c0)) mq_notify(r0, &(0x7f00000002c0)={0x0, 0x0, 0x1}) pread64(r0, &(0x7f0000001380)=""/196, 0x46d, 0x0) 2018/06/05 10:01:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x28400, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x0, 0x6, 0x8, 0xeda, 0x5}) r3 = socket$inet(0x2, 0x7, 0xf2) rt_sigreturn() rt_sigaction(0xa, &(0x7f0000000180)={0x4, {0x1f}, 0x8000000, 0x8}, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) move_pages(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000340)=[0x0], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000140)={0x4, 0x1f, 0xf0}, 0xc) 2018/06/05 10:01:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x5}, 0x1c) 2018/06/05 10:01:46 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000040), 0x3f) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x10001, &(0x7f00000013c0), 0x3}, 0x0) 2018/06/05 10:01:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000100029080096940000000000030000001800010010000000ff02000000000000000000000000000137a9cbd7d662034299d7459b4c6d21932c2c176f66a6513c2a03000000677da0ee34ba2af26fb3c1efe2124a55ace9f85deb912052b522276df8fbf5826b"], 0x1}, 0x1}, 0x0) 2018/06/05 10:01:46 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x40000004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x10) [ 94.238013] ================================================================== [ 94.245442] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 94.251755] CPU: 0 PID: 6562 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #103 [ 94.259011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.268343] Call Trace: [ 94.270944] dump_stack+0x185/0x1d0 [ 94.274576] ? kmsan_internal_check_memory+0x116/0x1e0 [ 94.279844] kmsan_report+0x149/0x260 [ 94.283639] kmsan_internal_check_memory+0x135/0x1e0 [ 94.288743] kmsan_copy_to_user+0x75/0x160 [ 94.292968] ? _copy_to_iter+0x92/0x2800 [ 94.297017] _copy_to_iter+0x45f/0x2800 [ 94.301002] ? finish_wait+0x10a/0x3e0 [ 94.304926] vhost_chr_read_iter+0x7b3/0xc30 [ 94.309322] ? init_wait_entry+0x1a0/0x1a0 [ 94.313538] vhost_net_chr_read_iter+0xf6/0x130 [ 94.318198] ? vhost_net_exit+0x30/0x30 [ 94.322162] do_iter_readv_writev+0x84d/0xa00 [ 94.326639] ? vhost_net_exit+0x30/0x30 [ 94.330594] do_iter_read+0x303/0xd70 [ 94.334384] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 94.339826] do_readv+0x295/0x5f0 [ 94.343265] __x64_sys_readv+0xe1/0x120 [ 94.347217] do_syscall_64+0x152/0x230 [ 94.351095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.356280] RIP: 0033:0x455a09 [ 94.359458] RSP: 002b:00007fb04cfc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 94.367153] RAX: ffffffffffffffda RBX: 00007fb04cfc96d4 RCX: 0000000000455a09 [ 94.374444] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 94.381706] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 94.388966] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 94.396216] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 94.403473] [ 94.405078] Uninit was created at: [ 94.408608] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 94.413695] kmsan_kmalloc+0x94/0x100 [ 94.417478] __kmalloc+0x141/0x350 [ 94.421002] translate_desc+0xbef/0x1120 [ 94.425069] vhost_update_used_flags+0x469/0x8d0 [ 94.429807] vhost_vq_init_access+0x173/0xa20 [ 94.434285] vhost_net_ioctl+0x2212/0x3450 [ 94.438501] do_vfs_ioctl+0xaf8/0x2410 [ 94.442368] __x64_sys_ioctl+0x280/0x320 [ 94.446411] do_syscall_64+0x152/0x230 [ 94.450284] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.455446] [ 94.457056] Bytes 4-7 of 72 are uninitialized [ 94.461525] Memory access starts at ffff88013a373cc0 [ 94.466601] ================================================================== [ 94.473935] Disabling lock debugging due to kernel taint [ 94.479364] Kernel panic - not syncing: panic_on_warn set ... [ 94.479364] [ 94.486711] CPU: 0 PID: 6562 Comm: syz-executor4 Tainted: G B 4.17.0-rc5+ #103 [ 94.495351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.504682] Call Trace: [ 94.507251] dump_stack+0x185/0x1d0 [ 94.510864] panic+0x39d/0x940 [ 94.514065] ? kmsan_internal_check_memory+0x116/0x1e0 [ 94.519327] kmsan_report+0x260/0x260 [ 94.523116] kmsan_internal_check_memory+0x135/0x1e0 [ 94.528208] kmsan_copy_to_user+0x75/0x160 [ 94.532423] ? _copy_to_iter+0x92/0x2800 [ 94.536471] _copy_to_iter+0x45f/0x2800 [ 94.540427] ? finish_wait+0x10a/0x3e0 [ 94.544310] vhost_chr_read_iter+0x7b3/0xc30 [ 94.548698] ? init_wait_entry+0x1a0/0x1a0 [ 94.552920] vhost_net_chr_read_iter+0xf6/0x130 [ 94.557570] ? vhost_net_exit+0x30/0x30 [ 94.561531] do_iter_readv_writev+0x84d/0xa00 [ 94.566014] ? vhost_net_exit+0x30/0x30 [ 94.569975] do_iter_read+0x303/0xd70 [ 94.573756] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 94.579193] do_readv+0x295/0x5f0 [ 94.582637] __x64_sys_readv+0xe1/0x120 [ 94.586596] do_syscall_64+0x152/0x230 [ 94.590468] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.595638] RIP: 0033:0x455a09 [ 94.598807] RSP: 002b:00007fb04cfc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 94.606496] RAX: ffffffffffffffda RBX: 00007fb04cfc96d4 RCX: 0000000000455a09 [ 94.613757] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 94.621006] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 94.628259] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 94.635511] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 94.643196] Dumping ftrace buffer: [ 94.646719] (ftrace buffer empty) [ 94.650404] Kernel Offset: disabled [ 94.654003] Rebooting in 86400 seconds..