INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2018/04/21 01:09:09 fuzzer started 2018/04/21 01:09:10 dialing manager at 10.128.0.26:35229 2018/04/21 01:09:17 kcov=true, comps=false 2018/04/21 01:09:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xff7ffffffffff020}, {0x80000006}]}, 0x10) 2018/04/21 01:09:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000006, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 2018/04/21 01:09:20 executing program 7: munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mlock2(&(0x7f000053a000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f000053b000/0x4000)=nil, 0x4000) 2018/04/21 01:09:20 executing program 2: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 2018/04/21 01:09:20 executing program 3: unshare(0x20000000) clone(0x28000000, &(0x7f00000000c0), &(0x7f00001a6000), &(0x7f0000000000), &(0x7f0000000180)) 2018/04/21 01:09:20 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000001a40)="81", 0x1, 0x0, &(0x7f0000001a00)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f0000002000)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/193, 0x40}}], 0x4000000000003f4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) 2018/04/21 01:09:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), 0x8) 2018/04/21 01:09:20 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) syzkaller login: [ 45.635272] ip (3881) used greatest stack depth: 53960 bytes left [ 46.049271] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.055786] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.103388] device bridge_slave_0 entered promiscuous mode [ 46.144480] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.151020] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.216257] device bridge_slave_0 entered promiscuous mode [ 46.250076] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.256537] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.268163] device bridge_slave_1 entered promiscuous mode [ 46.288672] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.295143] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.329931] device bridge_slave_0 entered promiscuous mode [ 46.347649] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.354144] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.385941] device bridge_slave_0 entered promiscuous mode [ 46.401271] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.407762] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.422167] device bridge_slave_0 entered promiscuous mode [ 46.441968] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.448459] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.473931] device bridge_slave_1 entered promiscuous mode [ 46.495613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.504099] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.510548] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.535151] device bridge_slave_0 entered promiscuous mode [ 46.547545] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.554015] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.566205] device bridge_slave_1 entered promiscuous mode [ 46.579881] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.586363] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.605988] device bridge_slave_0 entered promiscuous mode [ 46.627316] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.633831] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.651006] device bridge_slave_1 entered promiscuous mode [ 46.669662] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.676116] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.688232] device bridge_slave_1 entered promiscuous mode [ 46.703815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.713349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.725724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.733592] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.740141] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.775922] device bridge_slave_1 entered promiscuous mode [ 46.782615] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.789146] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.825919] device bridge_slave_0 entered promiscuous mode [ 46.843721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.852696] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.859157] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.896277] device bridge_slave_1 entered promiscuous mode [ 46.903277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.912585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.921981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.965127] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.971598] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.018194] device bridge_slave_1 entered promiscuous mode [ 47.033218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.067491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.088144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.129892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.233516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.243798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.302313] ip (4000) used greatest stack depth: 53656 bytes left [ 47.311245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.507864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.803997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.826525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.908855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.987349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.017389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.048884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.093526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.149946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.218779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.233879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.275394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.326875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.447762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.457780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.468546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.658249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.977979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.082770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.152580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.201693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.213576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.301595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.311395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.355291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.397688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.410129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.419793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.438874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.479962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.495931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.503439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.514400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.550115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.572571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.619853] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.627003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.639580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.667606] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.677426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.689836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.712712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.724343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.732939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.740102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.749308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.773372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.782712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.790716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.828610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.860989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.868832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.883442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.908914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.919636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.936476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.957662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.973340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.997865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.023725] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.033481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.053583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.075528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.082761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.093695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.119662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.143293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.175936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.196611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.246401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.253733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.271210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.301811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.319138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.341607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.387313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.423566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.448099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.528421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.535645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.547951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.148740] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.155250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.162182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.168662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.216773] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.223385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.242594] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.249113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.255900] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.262332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.271012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.301778] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.308261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.315169] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.321616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.398616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.433701] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.440188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.447078] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.453530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.488938] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.498544] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.504994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.511878] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.518339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.553583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.568331] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.574783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.581570] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.588047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.642589] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.658319] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.664795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.671660] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.678164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.740926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.929984] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.936467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.943319] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.949768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.961295] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.280015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.295082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.328637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.346505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.354004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.361700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.369679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.453784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.521808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.855158] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.870527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.878614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.890816] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.131714] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.251632] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.257877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.267440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.307423] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.314841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.334090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.419765] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.551845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.558158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.568649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.632213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.638456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.649955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.724100] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.730344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.743433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.781278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.787843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.814567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.053637] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.060349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.075384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.265466] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.271692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.282624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/21 01:09:45 executing program 1: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x0, 0x0, 0xfffffffffffffffe}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x200000002, 0x48}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/140, 0x4}], 0x2af, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/04/21 01:09:46 executing program 2: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 2018/04/21 01:09:46 executing program 2: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 2018/04/21 01:09:46 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000240)='./file0/\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x20, &(0x7f0000000300)) mount(&(0x7f00000000c0)='./file0/\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x24020, &(0x7f0000000240)) 2018/04/21 01:09:47 executing program 0: chmod(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/04/21 01:09:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080), 0x0, 0x1000}], 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7569643d3436343233332c6572726f72733d72656d6f756e742d726f2c74696d655f6f66667365743d3700302c71756965742c00bcf1df8c08018952b259fd969b2dd90ced371e62aa7e0f476810b6e7cd35b2660871e3d17f3952019967ff4d8b123e923ef089abd66887690ab9595d484a3ab39716c1014aca0f280ac1d72907e210b6af381ae851b23c77c823ac97995e5903fa1696c2194461ad66b2a1e65c7bfa"]) 2018/04/21 01:09:47 executing program 2: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 2018/04/21 01:09:47 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000240)='./file0/\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x20, &(0x7f0000000300)) mount(&(0x7f00000000c0)='./file0/\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x24020, &(0x7f0000000240)) 2018/04/21 01:09:47 executing program 3: unshare(0x20000000) clone(0x28000000, &(0x7f00000000c0), &(0x7f00001a6000), &(0x7f0000000000), &(0x7f0000000180)) 2018/04/21 01:09:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa2830007a6008000f00000000000683540150024001d0004c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/21 01:09:47 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 2018/04/21 01:09:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000001a40)="81", 0x1, 0x0, &(0x7f0000001a00)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f0000002000)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/193, 0x40}}], 0x4000000000003f4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) 2018/04/21 01:09:47 executing program 2: request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='dctcp-reno\x00', 0xfffffffffffffffc) 2018/04/21 01:09:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0)=0x80000000, 0x4) 2018/04/21 01:09:47 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000240)='./file0/\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x20, &(0x7f0000000300)) mount(&(0x7f00000000c0)='./file0/\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x24020, &(0x7f0000000240)) 2018/04/21 01:09:47 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 2018/04/21 01:09:47 executing program 5: setrlimit(0x0, &(0x7f00000000c0)) clone(0x0, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) 2018/04/21 01:09:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{}, {0x9}}) 2018/04/21 01:09:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 01:09:47 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4001, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2018/04/21 01:09:47 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 2018/04/21 01:09:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000001a40)="81", 0x1, 0x0, &(0x7f0000001a00)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f0000002000)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/193, 0x40}}], 0x4000000000003f4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) 2018/04/21 01:09:48 executing program 3: unshare(0x20000000) clone(0x28000000, &(0x7f00000000c0), &(0x7f00001a6000), &(0x7f0000000000), &(0x7f0000000180)) 2018/04/21 01:09:48 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04"]) 2018/04/21 01:09:48 executing program 7: sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xffffffffffffffe6, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) socket(0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r0 = syz_open_procfs(0x0, &(0x7f0000aa7000)='coredump_filter\x00') sendfile(r0, r0, 0x0, 0xef5d) 2018/04/21 01:09:48 executing program 6: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x1000, &(0x7f0000000000)="3f006671d7af52f647750500080089ea01000000000000000708f78293c8744e1a", &(0x7f0000000800)=""/4096}, 0x28) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000000)=0x2) 2018/04/21 01:09:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000011000)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000004fa0), 0x0, &(0x7f0000002d30)}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{}]}) pipe2(&(0x7f0000000280), 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, @loopback}, &(0x7f0000000240)=0x10) 2018/04/21 01:09:48 executing program 5: setrlimit(0x0, &(0x7f00000000c0)) clone(0x0, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) 2018/04/21 01:09:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 70.198428] syz-executor6 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/21 01:09:48 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8914, &(0x7f0000000000)=0x2) 2018/04/21 01:09:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/184, 0xb8) 2018/04/21 01:09:48 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}, 0x80000001}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x8}, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='ns/pid\x00') 2018/04/21 01:09:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) getpgrp(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d00)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002ec0)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000002fc0)=0xe8) stat(&(0x7f0000003000)='./control/file0\x00', &(0x7f0000003040)) inotify_add_watch(r0, &(0x7f0000000140)='./control\x00', 0x40) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0x20000000) 2018/04/21 01:09:49 executing program 2: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r0, r0, &(0x7f0000000040), 0x7fc) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) 2018/04/21 01:09:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/184, 0xb8) 2018/04/21 01:09:49 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000001a40)="81", 0x1, 0x0, &(0x7f0000001a00)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f0000002000)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/193, 0x40}}], 0x4000000000003f4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) 2018/04/21 01:09:49 executing program 5: getitimer(0x3, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) setitimer(0x2, &(0x7f0000000080), &(0x7f00000000c0)) 2018/04/21 01:09:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000367fe4)=""/91, 0x5b) 2018/04/21 01:09:49 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) gettid() tkill(0x0, 0x41) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$evdev(r0, &(0x7f0000000240), 0x0) tkill(r1, 0x1000000000015) 2018/04/21 01:09:49 executing program 3: unshare(0x20000000) clone(0x28000000, &(0x7f00000000c0), &(0x7f00001a6000), &(0x7f0000000000), &(0x7f0000000180)) 2018/04/21 01:09:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000000c00)=[@cred={0x20, 0x1, 0x2}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bcsh0\x00'}) dup(0xffffffffffffffff) [ 71.310893] ================================================================== [ 71.318550] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 71.326004] __msan_memcpy(ffff88016808e018, ffff88016808e000, 2044) [ 71.332520] CPU: 0 PID: 5924 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 71.339368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.348730] Call Trace: [ 71.351353] dump_stack+0x185/0x1d0 [ 71.355009] __msan_memcpy+0x90/0x1f0 [ 71.358839] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 71.364309] ================================================================== [ 71.371666] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 71.378412] CPU: 0 PID: 5924 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 71.385234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.394573] Call Trace: [ 71.397152] dump_stack+0x14a/0x1d0 [ 71.400774] ? kernel_text_address+0x248/0x3a0 [ 71.405344] kmsan_report+0x142/0x240 [ 71.409138] __msan_warning_32+0x6c/0xb0 [ 71.413192] kernel_text_address+0x248/0x3a0 [ 71.417599] __kernel_text_address+0x34/0xe0 [ 71.422000] show_trace_log_lvl+0x954/0x1030 [ 71.426400] ? generic_perform_write+0x4c6/0x990 [ 71.431163] show_stack+0xfc/0x150 [ 71.434701] ? print_worker_info+0x1b0/0x660 [ 71.439110] dump_stack+0x185/0x1d0 [ 71.442741] __msan_memcpy+0x90/0x1f0 [ 71.446543] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 71.452006] generic_perform_write+0x4c6/0x990 [ 71.456592] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 71.461953] __generic_file_write_iter+0x43b/0x990 [ 71.466874] ? rcu_all_qs+0x32/0x1f0 [ 71.470584] generic_file_write_iter+0x814/0xbf0 [ 71.475338] ? __generic_file_write_iter+0x990/0x990 [ 71.480431] do_iter_readv_writev+0x7bb/0x970 [ 71.484922] ? __generic_file_write_iter+0x990/0x990 [ 71.490016] do_iter_write+0x30d/0xd40 [ 71.493901] ? kmsan_set_origin_inline+0x6b/0x120 [ 71.498739] ? __generic_file_write_iter+0x990/0x990 [ 71.503835] vfs_iter_write+0x118/0x180 [ 71.507810] iter_file_splice_write+0xbc3/0x1710 [ 71.512571] ? splice_from_pipe+0x2c0/0x2c0 [ 71.516886] ? splice_from_pipe+0x2c0/0x2c0 [ 71.521206] direct_splice_actor+0x19b/0x200 [ 71.525610] splice_direct_to_actor+0x764/0x1040 [ 71.530361] ? do_splice_direct+0x540/0x540 [ 71.534677] ? security_file_permission+0x28f/0x4b0 [ 71.539686] ? rw_verify_area+0x35e/0x580 [ 71.543829] do_splice_direct+0x335/0x540 [ 71.547976] do_sendfile+0x1067/0x1e40 [ 71.551865] SYSC_sendfile64+0x1b3/0x300 [ 71.555922] SyS_sendfile64+0x64/0x90 [ 71.559716] do_syscall_64+0x309/0x430 [ 71.563600] ? SYSC_sendfile+0x320/0x320 [ 71.567658] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.572837] RIP: 0033:0x455389 [ 71.576014] RSP: 002b:00007f585d022c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 71.583711] RAX: ffffffffffffffda RBX: 00007f585d0236d4 RCX: 0000000000455389 [ 71.590969] RDX: 0000000020000040 RSI: 0000000000000014 RDI: 0000000000000014 [ 71.598225] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 71.605484] R10: 00000000000007fc R11: 0000000000000246 R12: 00000000ffffffff [ 71.612742] R13: 00000000000004cf R14: 00000000006fa408 R15: 0000000000000001 [ 71.620002] [ 71.621615] Local variable description: ----flags.i.i.i.i.i@get_page_from_freelist [ 71.629301] Variable was created at: [ 71.633007] get_page_from_freelist+0x15d/0xb600 [ 71.637752] __alloc_pages_nodemask+0x789/0x5dc0 [ 71.642488] ================================================================== [ 71.649829] Disabling lock debugging due to kernel taint [ 71.655260] Kernel panic - not syncing: panic_on_warn set ... [ 71.655260] [ 71.662619] CPU: 0 PID: 5924 Comm: syz-executor2 Tainted: G B 4.16.0+ #84 [ 71.670742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.680079] Call Trace: [ 71.682661] dump_stack+0x14a/0x1d0 [ 71.686283] panic+0x39d/0x940 [ 71.689490] ? kernel_text_address+0x248/0x3a0 [ 71.694060] kmsan_report+0x238/0x240 [ 71.697851] __msan_warning_32+0x6c/0xb0 [ 71.701909] kernel_text_address+0x248/0x3a0 [ 71.706314] __kernel_text_address+0x34/0xe0 [ 71.710718] show_trace_log_lvl+0x954/0x1030 [ 71.715121] ? generic_perform_write+0x4c6/0x990 [ 71.719877] show_stack+0xfc/0x150 [ 71.723407] ? print_worker_info+0x1b0/0x660 [ 71.727811] dump_stack+0x185/0x1d0 [ 71.731430] __msan_memcpy+0x90/0x1f0 [ 71.735229] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 71.740684] generic_perform_write+0x4c6/0x990 [ 71.745262] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 71.750619] __generic_file_write_iter+0x43b/0x990 [ 71.755541] ? rcu_all_qs+0x32/0x1f0 [ 71.759256] generic_file_write_iter+0x814/0xbf0 [ 71.764027] ? __generic_file_write_iter+0x990/0x990 [ 71.769129] do_iter_readv_writev+0x7bb/0x970 [ 71.773622] ? __generic_file_write_iter+0x990/0x990 [ 71.778717] do_iter_write+0x30d/0xd40 [ 71.782773] ? kmsan_set_origin_inline+0x6b/0x120 [ 71.787610] ? __generic_file_write_iter+0x990/0x990 [ 71.792704] vfs_iter_write+0x118/0x180 [ 71.796675] iter_file_splice_write+0xbc3/0x1710 [ 71.801434] ? splice_from_pipe+0x2c0/0x2c0 [ 71.805746] ? splice_from_pipe+0x2c0/0x2c0 [ 71.810059] direct_splice_actor+0x19b/0x200 [ 71.814463] splice_direct_to_actor+0x764/0x1040 [ 71.819212] ? do_splice_direct+0x540/0x540 [ 71.823525] ? security_file_permission+0x28f/0x4b0 [ 71.828535] ? rw_verify_area+0x35e/0x580 [ 71.832677] do_splice_direct+0x335/0x540 [ 71.836821] do_sendfile+0x1067/0x1e40 [ 71.840712] SYSC_sendfile64+0x1b3/0x300 [ 71.844771] SyS_sendfile64+0x64/0x90 [ 71.848562] do_syscall_64+0x309/0x430 [ 71.852444] ? SYSC_sendfile+0x320/0x320 [ 71.856500] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.861675] RIP: 0033:0x455389 [ 71.864856] RSP: 002b:00007f585d022c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 71.872553] RAX: ffffffffffffffda RBX: 00007f585d0236d4 RCX: 0000000000455389 [ 71.879812] RDX: 0000000020000040 RSI: 0000000000000014 RDI: 0000000000000014 [ 71.887069] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 71.894327] R10: 00000000000007fc R11: 0000000000000246 R12: 00000000ffffffff [ 71.901585] R13: 00000000000004cf R14: 00000000006fa408 R15: 0000000000000001 [ 71.909298] Dumping ftrace buffer: [ 71.912819] (ftrace buffer empty) [ 71.916504] Kernel Offset: disabled [ 71.920104] Rebooting in 86400 seconds..