INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2018/04/13 16:52:33 fuzzer started 2018/04/13 16:52:33 dialing manager at 10.128.0.26:33379 2018/04/13 16:52:40 kcov=true, comps=false 2018/04/13 16:52:43 executing program 0: r0 = socket$inet(0x2, 0x1, 0x84) listen(r0, 0x831) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/236, 0xec}, 0x0) 2018/04/13 16:52:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xe, 0x17}, [], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x41000}, 0x48) 2018/04/13 16:52:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0xc008240a, &(0x7f0000000040)) 2018/04/13 16:52:43 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000000b000)=[{&(0x7f0000010000)="5500000021007fafb72d00b2a4a2809302000000030343ee6b262369250018000b000000000000000006a3c728f1c46b7b31afdc1338d5440000000000000000000000088daa7227c43ab8220000bf0c00000000d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/13 16:52:43 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 2018/04/13 16:52:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f000059fff4)={0x10}, 0xffb1, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x22, 0x40000000109, 0x0, 0x0, {0x40000003}}, 0x24}, 0x1}, 0x0) 2018/04/13 16:52:43 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000ea2fd8)={0x14, 0x29, 0x129, 0x0, 0x0, {0x2001}}, 0x14}, 0x1}, 0x0) 2018/04/13 16:52:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$TUNGETIFF(r0, 0x8916, &(0x7f0000000040)) syzkaller login: [ 42.737785] ip (3760) used greatest stack depth: 54672 bytes left [ 43.172748] ip (3801) used greatest stack depth: 54408 bytes left [ 43.363505] ip (3819) used greatest stack depth: 54072 bytes left [ 44.200589] ip (3900) used greatest stack depth: 53992 bytes left [ 44.430458] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.437023] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.479713] device bridge_slave_0 entered promiscuous mode [ 44.703295] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.709800] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.736735] device bridge_slave_1 entered promiscuous mode [ 44.744627] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.751132] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.763595] device bridge_slave_0 entered promiscuous mode [ 44.774956] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.781472] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.800228] device bridge_slave_0 entered promiscuous mode [ 44.820796] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.827321] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.850631] device bridge_slave_0 entered promiscuous mode [ 44.869284] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.875797] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.899300] device bridge_slave_0 entered promiscuous mode [ 44.914561] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.921121] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.931728] device bridge_slave_0 entered promiscuous mode [ 44.950170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.963306] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.969815] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.995531] device bridge_slave_1 entered promiscuous mode [ 45.019741] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.026229] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.066337] device bridge_slave_1 entered promiscuous mode [ 45.076971] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.083550] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.093818] device bridge_slave_0 entered promiscuous mode [ 45.108383] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.114975] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.134150] device bridge_slave_1 entered promiscuous mode [ 45.150579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.164488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.179110] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.185642] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.204654] device bridge_slave_1 entered promiscuous mode [ 45.212578] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.219120] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.230571] device bridge_slave_1 entered promiscuous mode [ 45.240507] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.247117] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.268746] device bridge_slave_1 entered promiscuous mode [ 45.275772] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.282236] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.298640] device bridge_slave_0 entered promiscuous mode [ 45.324413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.343697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.359579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.412852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.421343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.477181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.519724] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.526277] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.556549] device bridge_slave_1 entered promiscuous mode [ 45.590610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.600952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.610637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.629781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.643821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.756106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.908100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.135755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.320452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.376554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.537627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.577770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.619943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.628268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.641209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.651499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.785435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.825721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.834678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.867942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.875317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.894520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.022209] ip (4107) used greatest stack depth: 53656 bytes left [ 47.123155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.435648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.553814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.661715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.768169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.776932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.784553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.855732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.883855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.892079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.916484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.948599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.960354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.971814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.980188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.991210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.002404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.057490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.106607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.128760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.135947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.153171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.186417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.196716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.210822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.218574] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.225752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.234443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.284679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.291874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.303379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.346708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.356277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.363498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.400999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.425619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.443061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.456905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.467511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.478402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.491954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.499245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.507644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.545965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.574117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.589246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.604585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.625436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.633135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.650843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.663698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.678425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.695308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.709911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.754747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.780625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.807400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.818272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.829954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.864347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.871530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.885813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.131449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.138685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.150834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.673693] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.680209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.687246] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.693734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.710833] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.721358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.747519] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.754086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.760953] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.767447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.786100] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.793529] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.800015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.807236] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.813724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.868950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.094391] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.100896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.107783] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.114258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.142150] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.151958] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.158432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.165321] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.172570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.196100] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.207404] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.213900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.220805] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.227347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.240755] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.255718] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.262201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.269121] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.275595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.285837] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.576491] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.582997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.589890] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.596348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.649114] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.744149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.762147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.810676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.848786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.864350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.871824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.879690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.900913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.155655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.252234] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.515104] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.553683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.651210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.667943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.675837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.687628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.709917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.943803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.956835] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.963187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.974169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.108633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.114956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.126706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.371323] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.377638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.399676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.437149] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.443746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.456588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.482383] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.489174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.500322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.536673] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.542969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.551689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.827157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.833515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.845774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 16:53:09 executing program 7: 2018/04/13 16:53:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x10, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000000)=0x54) [ 66.748789] netlink: 17 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/13 16:53:09 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f000001c000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000001bfd0)="2f000000240003fd6d0000000000000002dd00d8020000001f5f08c9080001000000737e0beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/13 16:53:09 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x4000000005, 0x3}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x13, 0x0, 0x400000, 0x0, 0x6e8000}, 0x14) [ 66.980454] netlink: 11 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/13 16:53:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000b55000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/13 16:53:10 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfbfffd) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000240), &(0x7f0000000280)=0xe, 0x0) 2018/04/13 16:53:10 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x6, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 2018/04/13 16:53:10 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x4}, 0x20) 2018/04/13 16:53:10 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000b4efab)="5500000018007fafb7a41cb22da280000206000000a843096c37236939000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de4411006827c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/13 16:53:10 executing program 5: socketpair$inet6(0xa, 0x3, 0x3a, &(0x7f0000000740)) 2018/04/13 16:53:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2, 0xffffffc5}, [], {0x95}}, &(0x7f0000000000)="f45010", 0x1, 0x99, &(0x7f0000000200)=""/153}, 0x48) 2018/04/13 16:53:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f00000001c0)={0x20, 0x2d, 0x80010b, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x4008, @uid}]}]}, 0x20}, 0x1}, 0x0) 2018/04/13 16:53:10 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x7fb, 0x4) sendmsg(r0, &(0x7f0000000900)={&(0x7f00000004c0)=@in6={0x2, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xfffffef7, &(0x7f00000000c0), 0x2d, &(0x7f00000002c0)=""/184, 0xb8}, 0x40002000) 2018/04/13 16:53:10 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000280)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/99, 0x63}, 0x2000) 2018/04/13 16:53:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 67.771605] ================================================================== [ 67.772336] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 67.779044] BUG: KMSAN: uninit-value in fib_create_info+0x554/0x8d20 [ 67.779061] CPU: 1 PID: 5815 Comm: syz-executor0 Not tainted 4.16.0+ #83 [ 67.779067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.779071] Call Trace: [ 67.779089] dump_stack+0x185/0x1d0 [ 67.779107] ? fib_create_info+0x554/0x8d20 2018/04/13 16:53:10 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) sendmsg$key(r0, &(0x7f0000f21000)={0x0, 0x0, &(0x7f0000f21000)={&(0x7f0000406fc8)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14}]}, 0x5c8}, 0x1}, 0x0) 2018/04/13 16:53:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)}, 0x0) [ 67.779119] kmsan_report+0x142/0x240 [ 67.779135] __msan_warning_32+0x6c/0xb0 [ 67.779150] fib_create_info+0x554/0x8d20 [ 67.779176] ? save_stack_trace+0xa5/0xf0 [ 67.779187] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 67.779201] ? kmsan_set_origin_inline+0x6b/0x120 [ 67.779228] ? __msan_poison_alloca+0x15c/0x1d0 [ 67.851471] ? inet_rtm_newroute+0x210/0x340 [ 67.855896] ? fib_table_insert+0xbc/0x2820 [ 67.860231] fib_table_insert+0x3b6/0x2820 [ 67.864580] ? __msan_metadata_ptr_for_load_2+0x10/0x20 2018/04/13 16:53:10 executing program 3: [ 67.869958] ? fib_new_table+0x247/0x670 [ 67.874033] inet_rtm_newroute+0x210/0x340 [ 67.878284] ? fib_del_ifaddr+0x35c0/0x35c0 [ 67.882614] rtnetlink_rcv_msg+0xa32/0x1560 [ 67.886950] ? SyS_sendmsg+0x54/0x80 [ 67.890672] ? netlink_sendmsg+0x9a6/0x1310 [ 67.895014] ? ___sys_sendmsg+0xec0/0x1310 [ 67.899255] ? SYSC_sendmsg+0x2a3/0x3d0 [ 67.903237] ? SyS_sendmsg+0x54/0x80 [ 67.906959] ? do_syscall_64+0x309/0x430 [ 67.911033] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.916423] ? __msan_poison_alloca+0x15c/0x1d0 [ 67.921110] ? _raw_spin_unlock_bh+0x57/0x70 [ 67.925528] ? __local_bh_enable_ip+0x3b/0x140 [ 67.930129] ? _raw_spin_unlock_bh+0x57/0x70 [ 67.934555] ? kmsan_set_origin_inline+0x6b/0x120 [ 67.939594] ? kmsan_set_origin+0x9e/0x160 [ 67.943843] netlink_rcv_skb+0x355/0x5f0 [ 67.947960] ? rtnetlink_bind+0x120/0x120 [ 67.952133] rtnetlink_rcv+0x50/0x60 [ 67.955857] netlink_unicast+0x1672/0x1750 [ 67.960121] ? rtnetlink_net_exit+0xa0/0xa0 [ 67.964454] netlink_sendmsg+0x1048/0x1310 [ 67.968707] ? netlink_getsockopt+0xc80/0xc80 [ 67.973385] ___sys_sendmsg+0xec0/0x1310 [ 67.977458] ? __fdget+0x4e/0x60 [ 67.980832] ? __fget_light+0x56/0x710 [ 67.984719] ? __fdget+0x4e/0x60 [ 67.988094] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 67.993459] ? __fget_light+0x6b9/0x710 [ 67.997449] SYSC_sendmsg+0x2a3/0x3d0 [ 68.001258] SyS_sendmsg+0x54/0x80 [ 68.004801] do_syscall_64+0x309/0x430 [ 68.008701] ? ___sys_sendmsg+0x1310/0x1310 [ 68.013028] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.018215] RIP: 0033:0x455319 2018/04/13 16:53:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/13 16:53:11 executing program 3: [ 68.021405] RSP: 002b:00007f6caa3a6c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.029114] RAX: ffffffffffffffda RBX: 00007f6caa3a76d4 RCX: 0000000000455319 [ 68.036473] RDX: 0000000000000000 RSI: 000000002000bfc8 RDI: 0000000000000013 [ 68.043755] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.051056] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.058331] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 68.065604] [ 68.067223] Uninit was created at: 2018/04/13 16:53:11 executing program 1: 2018/04/13 16:53:11 executing program 7: r0 = socket$inet_sctp(0x2, 0x801, 0x84) connect$inet(r0, &(0x7f0000f66ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) listen(r0, 0x4000000000000004) r1 = accept4(r0, &(0x7f00000d3ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000eab000)=0x80, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x56, 0x100000001}, 0xc) [ 68.070776] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 68.075889] kmsan_kmalloc+0x94/0x100 [ 68.080584] kmsan_slab_alloc+0x11/0x20 [ 68.084572] __kmalloc_node_track_caller+0xaed/0x11c0 [ 68.089768] __alloc_skb+0x2cf/0x9f0 [ 68.093487] netlink_sendmsg+0x9a6/0x1310 [ 68.097643] ___sys_sendmsg+0xec0/0x1310 [ 68.101714] SYSC_sendmsg+0x2a3/0x3d0 [ 68.105516] SyS_sendmsg+0x54/0x80 [ 68.109062] do_syscall_64+0x309/0x430 [ 68.112956] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 2018/04/13 16:53:11 executing program 6: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000840)=0x19, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 68.118139] ================================================================== [ 68.125489] Disabling lock debugging due to kernel taint [ 68.130935] Kernel panic - not syncing: panic_on_warn set ... [ 68.130935] [ 68.138304] CPU: 1 PID: 5815 Comm: syz-executor0 Tainted: G B 4.16.0+ #83 [ 68.146540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.155902] Call Trace: [ 68.158501] dump_stack+0x185/0x1d0 [ 68.162138] panic+0x39d/0x940 [ 68.165362] ? fib_create_info+0x554/0x8d20 [ 68.169688] kmsan_report+0x238/0x240 [ 68.173494] __msan_warning_32+0x6c/0xb0 [ 68.177565] fib_create_info+0x554/0x8d20 [ 68.181733] ? save_stack_trace+0xa5/0xf0 [ 68.185892] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.191354] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.196201] ? __msan_poison_alloca+0x15c/0x1d0 [ 68.200876] ? inet_rtm_newroute+0x210/0x340 [ 68.205292] ? fib_table_insert+0xbc/0x2820 [ 68.209623] fib_table_insert+0x3b6/0x2820 [ 68.214047] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 68.219420] ? fib_new_table+0x247/0x670 2018/04/13 16:53:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f8, &(0x7f0000000000)={'sit1\x00', @ifru_mtu}) [ 68.223513] inet_rtm_newroute+0x210/0x340 [ 68.227795] ? fib_del_ifaddr+0x35c0/0x35c0 [ 68.232127] rtnetlink_rcv_msg+0xa32/0x1560 [ 68.236459] ? SyS_sendmsg+0x54/0x80 [ 68.240192] ? netlink_sendmsg+0x9a6/0x1310 [ 68.244521] ? ___sys_sendmsg+0xec0/0x1310 [ 68.248787] ? SYSC_sendmsg+0x2a3/0x3d0 [ 68.252770] ? SyS_sendmsg+0x54/0x80 [ 68.256484] ? do_syscall_64+0x309/0x430 [ 68.260560] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.265933] ? __msan_poison_alloca+0x15c/0x1d0 [ 68.270618] ? _raw_spin_unlock_bh+0x57/0x70 [ 68.275044] ? __local_bh_enable_ip+0x3b/0x140 [ 68.279662] ? _raw_spin_unlock_bh+0x57/0x70 [ 68.284087] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.288945] ? kmsan_set_origin+0x9e/0x160 [ 68.293196] netlink_rcv_skb+0x355/0x5f0 [ 68.297268] ? rtnetlink_bind+0x120/0x120 [ 68.301433] rtnetlink_rcv+0x50/0x60 [ 68.305156] netlink_unicast+0x1672/0x1750 [ 68.309407] ? rtnetlink_net_exit+0xa0/0xa0 [ 68.313746] netlink_sendmsg+0x1048/0x1310 [ 68.317997] ? netlink_getsockopt+0xc80/0xc80 [ 68.322502] ___sys_sendmsg+0xec0/0x1310 [ 68.326582] ? __fdget+0x4e/0x60 [ 68.329960] ? __fget_light+0x56/0x710 [ 68.333856] ? __fdget+0x4e/0x60 [ 68.337235] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.342610] ? __fget_light+0x6b9/0x710 [ 68.346605] SYSC_sendmsg+0x2a3/0x3d0 [ 68.350426] SyS_sendmsg+0x54/0x80 [ 68.353978] do_syscall_64+0x309/0x430 [ 68.357885] ? ___sys_sendmsg+0x1310/0x1310 [ 68.362221] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.367413] RIP: 0033:0x455319 [ 68.370601] RSP: 002b:00007f6caa3a6c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.378311] RAX: ffffffffffffffda RBX: 00007f6caa3a76d4 RCX: 0000000000455319 [ 68.385579] RDX: 0000000000000000 RSI: 000000002000bfc8 RDI: 0000000000000013 [ 68.392855] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.400123] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.407396] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 68.415274] Dumping ftrace buffer: [ 68.418829] (ftrace buffer empty) [ 68.422521] Kernel Offset: disabled [ 68.426210] Rebooting in 86400 seconds..