INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2018/04/28 07:54:24 fuzzer started 2018/04/28 07:54:24 dialing manager at 10.128.0.26:44785 syzkaller login: [ 50.079479] can: request_module (can-proto-0) failed. [ 50.090720] can: request_module (can-proto-0) failed. 2018/04/28 07:54:31 kcov=true, comps=false 2018/04/28 07:54:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') preadv(r0, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/124, 0x7c}], 0x1, 0x102) 2018/04/28 07:54:35 executing program 1: setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0x2710}}, &(0x7f00000000c0)) 2018/04/28 07:54:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x14, 0x1, 0x9, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/28 07:54:35 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x10c) 2018/04/28 07:54:35 executing program 4: 2018/04/28 07:54:35 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000b85000)={0x0, 0x1c9c380}, &(0x7f0000443000)) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x14) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x8031, 0xffffffffffffffff, 0x0) 2018/04/28 07:54:35 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6006f52600081100000000000000000000000000000001000000000000011e004e22000890780000000000000000370008eabcd2c14fcab5063bf35c6aa158e5d859b3f5630335231610bb404a6ced904ec7bd826e2fdbcfeb48088b4562bbf3c3f32fb06bc4fd17ddaf"], &(0x7f0000775000)) 2018/04/28 07:54:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='ppp0/\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000a40)={0x3}) [ 55.134745] IPVS: ftp: loaded support on port[0] = 21 [ 55.263273] IPVS: ftp: loaded support on port[0] = 21 [ 55.307275] IPVS: ftp: loaded support on port[0] = 21 [ 55.386704] IPVS: ftp: loaded support on port[0] = 21 [ 55.482780] IPVS: ftp: loaded support on port[0] = 21 [ 55.583262] IPVS: ftp: loaded support on port[0] = 21 [ 55.698516] IPVS: ftp: loaded support on port[0] = 21 [ 55.844830] IPVS: ftp: loaded support on port[0] = 21 [ 56.873921] ip (4716) used greatest stack depth: 54408 bytes left [ 57.567745] ip (4773) used greatest stack depth: 54264 bytes left [ 58.057131] ip (4813) used greatest stack depth: 54200 bytes left [ 58.360983] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.367488] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.408247] device bridge_slave_0 entered promiscuous mode [ 58.481956] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.488423] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.508479] ip (4843) used greatest stack depth: 53656 bytes left [ 58.538891] device bridge_slave_0 entered promiscuous mode [ 58.601188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.607682] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.636677] device bridge_slave_1 entered promiscuous mode [ 58.692373] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.698859] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.734937] device bridge_slave_1 entered promiscuous mode [ 58.813699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.840795] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.847292] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.879261] device bridge_slave_0 entered promiscuous mode [ 58.900702] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.907216] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.935268] device bridge_slave_0 entered promiscuous mode [ 58.960608] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.967125] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.989469] device bridge_slave_0 entered promiscuous mode [ 59.017567] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.024083] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.036007] device bridge_slave_0 entered promiscuous mode [ 59.057788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.072785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.100400] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.106894] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.139379] device bridge_slave_1 entered promiscuous mode [ 59.171393] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.177929] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.205233] device bridge_slave_1 entered promiscuous mode [ 59.223998] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.230518] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.240847] device bridge_slave_1 entered promiscuous mode [ 59.253365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.270821] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.277303] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.309240] device bridge_slave_1 entered promiscuous mode [ 59.330704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.357856] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.364366] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.393165] device bridge_slave_0 entered promiscuous mode [ 59.419148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.455933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.476282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.586752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.639137] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.645625] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.683211] device bridge_slave_1 entered promiscuous mode [ 59.700929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.709607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.719455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.732494] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.738949] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.783190] device bridge_slave_0 entered promiscuous mode [ 59.839483] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.859005] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.927178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.983342] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.989860] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.030194] device bridge_slave_1 entered promiscuous mode [ 60.087874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.104902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.171959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.246192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.275625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.290688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.300555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.371553] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.396874] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.409538] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.480203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.522464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.529503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.545777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.552789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.577705] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.605567] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.629644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.658404] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.796084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.803777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.857463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.864556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.880765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.887786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.922485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.929578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.964183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.013987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.028885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.058842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.065854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.125512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.132674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.154146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.161204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.202796] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.226461] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.259429] team0: Port device team_slave_0 added [ 61.298722] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.307972] team0: Port device team_slave_0 added [ 61.353267] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.457397] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.488289] team0: Port device team_slave_1 added [ 61.569211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.576224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.600882] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.622408] team0: Port device team_slave_1 added [ 61.639418] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.665795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.692501] team0: Port device team_slave_0 added [ 61.732012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.739147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.756513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.791593] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.821170] team0: Port device team_slave_0 added [ 61.863443] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.875526] team0: Port device team_slave_1 added [ 61.882631] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.894538] team0: Port device team_slave_0 added [ 61.906925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.918006] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.944199] team0: Port device team_slave_0 added [ 61.952100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.967529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.988193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.008927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.048196] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.069997] team0: Port device team_slave_1 added [ 62.076808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.084349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.094880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.107988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.124166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.140976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.172173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.179816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.188346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.204482] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.212318] team0: Port device team_slave_1 added [ 62.228637] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.237172] team0: Port device team_slave_1 added [ 62.252454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.264373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.298940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.323401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.333265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.342681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.371249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.404897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.438776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.460084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.467131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.475394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.500186] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.509263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.516938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.528080] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.544918] team0: Port device team_slave_0 added [ 62.559402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.568945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.584108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.603959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.644754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.683264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.716795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.738563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.746427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.754471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.762123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.770167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.796825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.808873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.815818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.824081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.831964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.841972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.854809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.862287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.879260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.911460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.918893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.940955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.978727] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.987136] team0: Port device team_slave_1 added [ 63.008290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.018763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.026188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.059232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.086349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.104108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.138653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.149156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.159330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.185490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.199848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.219199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.235879] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.250852] team0: Port device team_slave_0 added [ 63.267405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.278437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.301358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.340611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.364270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.374171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.400973] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.413187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.426626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.490139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.523708] team0: Port device team_slave_1 added [ 63.602162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.609258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.622831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.775962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.783444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.796602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.849352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.857906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.897472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.037614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.045653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.055877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.098820] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.106313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.123231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.279929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.288247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.303265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.529615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.537106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.551245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.417818] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.424324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.431189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.437790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.486058] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.506255] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.512733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.519610] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.526100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.543466] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.554903] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.561378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.568292] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.574743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.619135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.635523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.652827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.660995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.698005] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.704528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.711379] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.717850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.732667] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.745321] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.751780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.758601] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.765057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.816969] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.222890] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.229408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.236356] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.242805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.280635] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.655435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.676799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.701882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.737201] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.743688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.750567] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.757078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.765678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.777585] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.784082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.790887] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.797332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.861475] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.679218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.699242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.457981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.578856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.639673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.666913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.918553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.245706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.295664] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.430747] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.544270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.554596] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.660638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.712459] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.858484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.062953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.126348] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.132721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.143859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.340279] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.346595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.357508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.385410] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.403129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.425897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.456516] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.462780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.477832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.603837] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.610294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.619439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.664334] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.686328] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.962438] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.995216] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.014218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.029442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.069890] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.281152] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.325811] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.498852] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.505276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.529252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.564078] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.581335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.593857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.624933] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.840726] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.335976] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.377665] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/28 07:55:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1f) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000280)) 2018/04/28 07:55:03 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x4001}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x0]}, 0x6) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0100000000000000000060000000000000000000000000000000000000ffff7f0000010000000000089078"], 0x1) 2018/04/28 07:55:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6, 0x0, 0x33}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/28 07:55:03 executing program 3: r0 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfa, r1}) [ 82.449536] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 2018/04/28 07:55:03 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:03 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) write$tun(r0, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:03 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000001d000000000000000000000004000000000000000000000000000000000000000000000000000000000000000800120003000000000000000000000006000000000000000000000000000000ac141400400000000000000000000000ff010000000000000000000000e1000105001a007f000001000000000000000000000000fe80000000000000000000000000000000000000070019000000000002004e20ffffffff00000000000000000a004e2000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000"], 0xe8}, 0x1}, 0x0) close(r0) 2018/04/28 07:55:03 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)="6536fb6f00", &(0x7f0000000300)='./file1\x00', 0x0, 0xaaaabf1, &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[]) 2018/04/28 07:55:05 executing program 0: getgroups(0x0, &(0x7f00000006c0)) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x0, 0x0, 0x81}) 2018/04/28 07:55:05 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000001d000000000000000000000004000000000000000000000000000000000000000000000000000000000000000800120003000000000000000000000006000000000000000000000000000000ac141400400000000000000000000000ff010000000000000000000000e1000105001a007f000001000000000000000000000000fe80000000000000000000000000000000000000070019000000000002004e20ffffffff00000000000000000a004e2000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000"], 0xe8}, 0x1}, 0x0) close(r0) 2018/04/28 07:55:05 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001380)="6173796d6d657472696300dcf434a2aa2bba05887f2d0f1d67fb0d18e7057db8770dbb5110a4c3f747aada4dbb44d10000000000008b774b89ac2359734c339e6443ae529a703cd464cade1beda98aa4f3e858197178a09494483696a25eca214a3abc37f23c3b38fbd667ff2a1d3ffb27a2347e0d850d43c921496d0267b5e9de20307ee732cfff2def10aecc435e359e5d2d455c5bdbb85ada02f2dde59195c26462423da542b4a978fd951fba90d799ce1caebaf8cca65c0441b0a40f7ee1e512d860679e4bfc4ad512c4193f", &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='mime_typelovmnet0\x00', 0x0) 2018/04/28 07:55:05 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000b85000)={0x0, 0x1c9c380}, &(0x7f0000443000)) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x14) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x8031, 0xffffffffffffffff, 0x0) 2018/04/28 07:55:05 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/snmp\x00') pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) 2018/04/28 07:55:05 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/28 07:55:05 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:05 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x4001}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0100000000000000000060000000000000000000000000000000000000ffff7f0000010000000000089078"], 0x1) 2018/04/28 07:55:05 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1f) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x100}, &(0x7f0000000100)=0x8) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000280)) 2018/04/28 07:55:05 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000001d000000000000000000000004000000000000000000000000000000000000000000000000000000000000000800120003000000000000000000000006000000000000000000000000000000ac141400400000000000000000000000ff010000000000000000000000e1000105001a007f000001000000000000000000000000fe80000000000000000000000000000000000000070019000000000002004e20ffffffff00000000000000000a004e2000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000"], 0xe8}, 0x1}, 0x0) close(r0) 2018/04/28 07:55:05 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1f) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000280)) 2018/04/28 07:55:05 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000003a00030f07fffd946fa283bc0aeee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/04/28 07:55:05 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:05 executing program 3: open(&(0x7f0000ae8ff8)='./file0\x00', 0x141046, 0x0) chmod(&(0x7f0000000380)='./file0\x00', 0x0) 2018/04/28 07:55:06 executing program 0: getgroups(0x0, &(0x7f00000006c0)) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x0, 0x0, 0x81}) 2018/04/28 07:55:06 executing program 6: 2018/04/28 07:55:06 executing program 4: 2018/04/28 07:55:06 executing program 1: 2018/04/28 07:55:06 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000001d000000000000000000000004000000000000000000000000000000000000000000000000000000000000000800120003000000000000000000000006000000000000000000000000000000ac141400400000000000000000000000ff010000000000000000000000e1000105001a007f000001000000000000000000000000fe80000000000000000000000000000000000000070019000000000002004e20ffffffff00000000000000000a004e2000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000"], 0xe8}, 0x1}, 0x0) close(r0) 2018/04/28 07:55:06 executing program 3: 2018/04/28 07:55:06 executing program 5: 2018/04/28 07:55:06 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x12, 0x0, 0x6, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/28 07:55:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660a8ec06763891738ac656bb3e891941f02f126030000000000000055ef7131eabf3110d638f0d2e6a49a2bc4a08d6329c9ca567e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") preadv(r0, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/28 07:55:06 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="85a970b0146b", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/28 07:55:06 executing program 3: 2018/04/28 07:55:06 executing program 4: 2018/04/28 07:55:06 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) close(r0) 2018/04/28 07:55:06 executing program 7: socket(0x11, 0x100000802, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) write$tun(r0, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:06 executing program 0: 2018/04/28 07:55:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x12, 0x0, 0x6, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/28 07:55:06 executing program 3: 2018/04/28 07:55:06 executing program 1: 2018/04/28 07:55:06 executing program 6: 2018/04/28 07:55:06 executing program 4: 2018/04/28 07:55:06 executing program 0: 2018/04/28 07:55:06 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) close(r0) 2018/04/28 07:55:06 executing program 3: 2018/04/28 07:55:06 executing program 6: 2018/04/28 07:55:06 executing program 5: 2018/04/28 07:55:06 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, [0x1, 0x0, 0x5, 0x1, 0x6, 0x0, 0x63af, 0xbad, 0x54f1]}, &(0x7f0000000300)=0x100) getrandom(&(0x7f00000003c0)=""/121, 0xac51, 0x0) 2018/04/28 07:55:07 executing program 4: 2018/04/28 07:55:07 executing program 0: 2018/04/28 07:55:07 executing program 3: 2018/04/28 07:55:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) close(r0) 2018/04/28 07:55:07 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:07 executing program 6: 2018/04/28 07:55:07 executing program 5: 2018/04/28 07:55:07 executing program 3: 2018/04/28 07:55:07 executing program 5: 2018/04/28 07:55:07 executing program 4: 2018/04/28 07:55:07 executing program 0: 2018/04/28 07:55:07 executing program 6: 2018/04/28 07:55:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000001d000000000000000000000004000000000000000000000000000000000000000000000000000000000000000800120003000000000000000000000006000000000000000000000000000000ac141400400000000000000000000000ff010000000000000000000000e1000105001a007f000001000000000000000000000000fe80000000000000000000000000000000000000070019000000000002004e20ffffffff00000000000000000a004e2000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000"], 0xe8}, 0x1}, 0x0) close(r0) 2018/04/28 07:55:07 executing program 1: 2018/04/28 07:55:07 executing program 3: 2018/04/28 07:55:07 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r0, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:07 executing program 0: 2018/04/28 07:55:07 executing program 1: 2018/04/28 07:55:07 executing program 6: 2018/04/28 07:55:07 executing program 5: 2018/04/28 07:55:07 executing program 4: 2018/04/28 07:55:07 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:07 executing program 7: r0 = socket(0x0, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0x86dd}, @hdr={0x1}, @ipv6={0x0, 0x6, "b9f856", 0x8, 0x0, 0x0, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @udp={0x0, 0x0, 0x8}}}}, 0xfdea) 2018/04/28 07:55:07 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000001d000000000000000000000004000000000000000000000000000000000000000000000000000000000000000800120003000000000000000000000006000000000000000000000000000000ac141400400000000000000000000000ff010000000000000000000000e1000105001a007f000001000000000000000000000000fe80000000000000000000000000000000000000070019000000000002004e20ffffffff00000000000000000a004e2000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000"], 0xe8}, 0x1}, 0x0) close(r0) 2018/04/28 07:55:07 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000459000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000515ff8)=0xcbb, 0x7, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)) 2018/04/28 07:55:07 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000071101c000000000004000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/28 07:55:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000071100c000000000004000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 86.821277] ================================================================== [ 86.828709] BUG: KMSAN: uninit-value in rt6_multipath_hash+0x5c4/0x640 [ 86.835389] CPU: 1 PID: 6868 Comm: syz-executor3 Not tainted 4.16.0+ #87 [ 86.842236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.851597] Call Trace: [ 86.854196] dump_stack+0x185/0x1d0 [ 86.857836] ? rt6_multipath_hash+0x5c4/0x640 [ 86.862336] kmsan_report+0x142/0x240 [ 86.866142] __msan_warning_32+0x6c/0xb0 2018/04/28 07:55:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f69676d70005b21956385b08550b421b89785371ff8708cfb7f52d3bf09f35af94122e9f760bf6a66f3809215006d0aa0fc886de88c904150f9bf45520459666413af74851eb500000000000000000000000000000000") readv(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/102, 0x66}, {&(0x7f0000001140)=""/109, 0x6d}], 0x2) 2018/04/28 07:55:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000003ff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000300000000000000000006000000000000000000000000000001e0000001000000000000000000000000000000000000efffffff000000000000030006000000000002000009ac14ffbb0000000000000000030005000000000002000000ac14ffbb00000000000000000400030000000000000000000000000000000000cf0000000000000000000000"], 0xa0}, 0x1}, 0x0) [ 86.870204] rt6_multipath_hash+0x5c4/0x640 [ 86.874529] ? kmsan_memcpy_origins+0xf1/0x170 [ 86.879117] ip6_route_input+0x65a/0x920 [ 86.883187] ip6_rcv_finish+0x413/0x6e0 [ 86.887169] ipv6_rcv+0x1e16/0x2340 [ 86.890803] ? local_bh_enable+0x40/0x40 [ 86.894879] __netif_receive_skb_core+0x47df/0x4a90 [ 86.899911] ? ip6_rcv_finish+0x6e0/0x6e0 [ 86.904071] netif_receive_skb_internal+0x49d/0x630 [ 86.909094] ? netif_receive_skb+0x47/0x240 [ 86.913422] netif_receive_skb+0x230/0x240 [ 86.917668] tun_get_user+0x740f/0x7c60 [ 86.921670] tun_chr_write_iter+0x1d4/0x330 [ 86.926001] ? tun_chr_read_iter+0x460/0x460 [ 86.930418] __vfs_write+0x7fb/0x9f0 [ 86.934147] vfs_write+0x463/0x8d0 [ 86.937700] SYSC_write+0x172/0x360 [ 86.941336] SyS_write+0x55/0x80 [ 86.944704] do_syscall_64+0x309/0x430 [ 86.948597] ? SYSC_read+0x360/0x360 [ 86.952311] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 86.957492] RIP: 0033:0x455979 [ 86.960676] RSP: 002b:00007f020129ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 2018/04/28 07:55:07 executing program 5: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x6558, 0x42424242, 0x42424242, 0x0, 0x0, 0xe0}}}}}}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x115000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) [ 86.968381] RAX: ffffffffffffffda RBX: 00007f020129f6d4 RCX: 0000000000455979 [ 86.975650] RDX: 000000000000fdea RSI: 0000000020000300 RDI: 0000000000000014 [ 86.982914] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 86.990225] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 86.997515] R13: 00000000000006e1 R14: 00000000006fd5b8 R15: 0000000000000000 [ 87.004791] [ 87.006413] Uninit was created at: [ 87.009968] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 87.015077] kmsan_kmalloc+0x94/0x100 2018/04/28 07:55:08 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x800000000043, &(0x7f00000000c0)=0x0) io_submit(r2, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xffff, r1, &(0x7f0000000100)="cd8aa6030d467bd224dc690d940414b09dc7f9cdfefa2d8303d40a0beb7786a78c8e0d8813db44972915798f14c5ad450e67a6f0d3c63493a6741daf6b6644a80b218907fa9aec35c2c0495e70e8fd6aee2b1e40e210db734028b3c3d41ffe1782082e953a859fd707760b768fba72c7eee5d7fb6b3fb5370391e5", 0x7b, 0x7fff, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x6, r0, &(0x7f00000001c0)="7c4b5769366d544c6cffdc82657a909dddd15f0d3439dc28813bdddfe3e6a2b7e8c7cab101df7ffac347bb2afd8e5b73cf788089709ee4f6c2e066ed05a34a635d9358f6077a532657d54fd79c703fcf5fc958a09c", 0x55, 0x4, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000000280)="64dd91d74ffe07298911f33a473383ea348257b1e2b046e9f6a52f7b9c8e302e970f814711b2801f7a493312b9b2d9e5baa53beaf8ae843f4a01648180bca8594cfb6ed31b4ae4cbe05c73ed6476983ada07bba2423b0a3c4afc3336dc57dfa696064520", 0x64, 0x5, 0x0, 0x1, r0}]) dup(r1) getsockname$inet(r0, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) r3 = syz_open_dev$sg(&(0x7f00001caff7)='/dev/sg#\x00', 0x0, 0x0) recvfrom$packet(r3, &(0x7f00000003c0)=""/4096, 0x1000, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x84013, r1, 0x0) ioctl(r3, 0x2272, &(0x7f00000000c0)) [ 87.018887] kmsan_slab_alloc+0x11/0x20 [ 87.022871] __kmalloc_node_track_caller+0xaed/0x11c0 [ 87.028067] __alloc_skb+0x2cf/0x9f0 [ 87.031784] alloc_skb_with_frags+0x1d4/0xb20 [ 87.036278] sock_alloc_send_pskb+0xb56/0x1190 [ 87.040863] tun_get_user+0x2242/0x7c60 [ 87.044851] tun_chr_write_iter+0x1d4/0x330 [ 87.049178] __vfs_write+0x7fb/0x9f0 [ 87.052894] vfs_write+0x463/0x8d0 [ 87.056435] SYSC_write+0x172/0x360 [ 87.060089] SyS_write+0x55/0x80 [ 87.063461] do_syscall_64+0x309/0x430 [ 87.067359] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 87.072542] ================================================================== [ 87.079893] Disabling lock debugging due to kernel taint [ 87.085340] Kernel panic - not syncing: panic_on_warn set ... [ 87.085340] [ 87.092715] CPU: 1 PID: 6868 Comm: syz-executor3 Tainted: G B 4.16.0+ #87 [ 87.100850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.110197] Call Trace: [ 87.112798] dump_stack+0x185/0x1d0 [ 87.116439] panic+0x39d/0x940 2018/04/28 07:55:08 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x8000, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xc2, &(0x7f0000000300)="8f376d129c1a8cbfeca5f7e6", 0xc) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000001fc0)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[]) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x1ee3adf1}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000400)}, &(0x7f0000000480)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) lchown(&(0x7f0000000080)='./file1\x00', r2, r3) ioctl$int_out(r0, 0x5460, &(0x7f0000000340)) [ 87.119661] ? rt6_multipath_hash+0x5c4/0x640 [ 87.124160] kmsan_report+0x238/0x240 [ 87.127968] __msan_warning_32+0x6c/0xb0 [ 87.132031] rt6_multipath_hash+0x5c4/0x640 [ 87.136352] ? kmsan_memcpy_origins+0xf1/0x170 [ 87.140939] ip6_route_input+0x65a/0x920 [ 87.145008] ip6_rcv_finish+0x413/0x6e0 [ 87.148991] ipv6_rcv+0x1e16/0x2340 [ 87.152624] ? local_bh_enable+0x40/0x40 [ 87.156697] __netif_receive_skb_core+0x47df/0x4a90 [ 87.161724] ? ip6_rcv_finish+0x6e0/0x6e0 [ 87.165881] netif_receive_skb_internal+0x49d/0x630 2018/04/28 07:55:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x1, 'lc\x00', 0x20, 0x7, 0x3e}, 0x2c) 2018/04/28 07:55:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000090000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db3b00000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000c6c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) [ 87.170906] ? netif_receive_skb+0x47/0x240 [ 87.175239] netif_receive_skb+0x230/0x240 [ 87.179480] tun_get_user+0x740f/0x7c60 [ 87.183475] tun_chr_write_iter+0x1d4/0x330 [ 87.187810] ? tun_chr_read_iter+0x460/0x460 [ 87.192226] __vfs_write+0x7fb/0x9f0 [ 87.195954] vfs_write+0x463/0x8d0 [ 87.199528] SYSC_write+0x172/0x360 [ 87.203166] SyS_write+0x55/0x80 [ 87.206538] do_syscall_64+0x309/0x430 [ 87.210432] ? SYSC_read+0x360/0x360 [ 87.214158] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 87.219366] RIP: 0033:0x455979 [ 87.222551] RSP: 002b:00007f020129ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.230260] RAX: ffffffffffffffda RBX: 00007f020129f6d4 RCX: 0000000000455979 [ 87.237530] RDX: 000000000000fdea RSI: 0000000020000300 RDI: 0000000000000014 [ 87.244797] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 87.252067] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 87.259337] R13: 00000000000006e1 R14: 00000000006fd5b8 R15: 0000000000000000 [ 87.267082] Dumping ftrace buffer: [ 87.270607] (ftrace buffer empty) [ 87.274304] Kernel Offset: disabled [ 87.277908] Rebooting in 86400 seconds..