INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. 2018/04/19 03:25:04 fuzzer started 2018/04/19 03:25:05 dialing manager at 10.128.0.26:44151 2018/04/19 03:25:11 kcov=true, comps=false 2018/04/19 03:25:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0305302, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) 2018/04/19 03:25:14 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0xf8d7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 03:25:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="480000001400190d76a81014aed182f302840880ffe00600000000000000a2bc5603ca0016087f89000000200000000101ff0016000309ff5bff0308c7e5ed5e0000000000000000", 0x48}], 0x1) 2018/04/19 03:25:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000300)='./file0/fil.0\x00', 0x800000000002040, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) 2018/04/19 03:25:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)={{0x0, 0x1}}) 2018/04/19 03:25:14 executing program 3: quotactl(0x80000207, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)) 2018/04/19 03:25:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') pread64(r0, &(0x7f00000000c0)=""/4096, 0x840, 0x10) 2018/04/19 03:25:14 executing program 6: r0 = socket$inet(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) syzkaller login: [ 43.738343] ip (3758) used greatest stack depth: 54672 bytes left [ 44.948525] ip (3874) used greatest stack depth: 54560 bytes left [ 45.173261] ip (3898) used greatest stack depth: 54200 bytes left [ 45.291793] ip (3907) used greatest stack depth: 53960 bytes left [ 45.459493] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.465992] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.525491] device bridge_slave_0 entered promiscuous mode [ 45.578142] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.584656] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.604957] device bridge_slave_0 entered promiscuous mode [ 45.638799] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.645271] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.682944] device bridge_slave_0 entered promiscuous mode [ 45.726778] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.733481] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.776825] device bridge_slave_1 entered promiscuous mode [ 45.786743] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.793216] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.818947] device bridge_slave_0 entered promiscuous mode [ 45.851213] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.857689] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.881583] device bridge_slave_1 entered promiscuous mode [ 45.899486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.906957] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.913459] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.946954] device bridge_slave_0 entered promiscuous mode [ 45.971207] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.977698] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.006013] device bridge_slave_1 entered promiscuous mode [ 46.021694] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.028182] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.052655] device bridge_slave_0 entered promiscuous mode [ 46.063152] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.069617] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.079988] device bridge_slave_1 entered promiscuous mode [ 46.090135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.099916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.109347] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.115885] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.147373] device bridge_slave_1 entered promiscuous mode [ 46.154294] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.160722] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.198960] device bridge_slave_0 entered promiscuous mode [ 46.226011] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.232542] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.249693] device bridge_slave_0 entered promiscuous mode [ 46.259938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.269493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.295390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.302787] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.309275] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.345430] device bridge_slave_1 entered promiscuous mode [ 46.354898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.381757] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.388261] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.438092] device bridge_slave_1 entered promiscuous mode [ 46.462142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.471223] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.477740] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.515110] device bridge_slave_1 entered promiscuous mode [ 46.560299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.567819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.575440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.603575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.719943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.749508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.796488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.935340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.082606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.289535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.298247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.466692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.521340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.529142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.635551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.682984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.731607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.776208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.815149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.853193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.969502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.003759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.064669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.167940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.237517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.396109] ip (4133) used greatest stack depth: 53656 bytes left [ 48.433873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.540330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.645389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.652579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.665854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.706887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.745074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.765905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.906450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.915426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.922570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.940542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.975282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.983549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.990691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.004332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.037436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.049271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.059222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.099898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.124761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.206666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.213951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.223904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.245885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.254183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.265238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.272229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.307906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.336186] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.349619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.356891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.389898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.422547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.435576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.452474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.463007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.475265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.502412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.523805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.533329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.548104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.575805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.586777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.594741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.602753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.612424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.656749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.685396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.717931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.736451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.746458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.754859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.763265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.775921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.783290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.792978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.820099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.832560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.857273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.904430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.918450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.953325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.575299] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.581793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.588657] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.595190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.618824] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.630560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.818447] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.824929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.831787] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.838206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.853825] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.870440] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.876890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.883729] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.890168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.946096] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.961964] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.968438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.975320] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.981753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.017745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.024523] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.030985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.037828] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.044268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.061309] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.077536] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.083977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.090815] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.097237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.134453] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.327444] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.333956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.340796] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.347292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.364101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.381832] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.388319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.395233] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.401692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.478891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.639146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.650734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.682674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.706099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.716220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.724296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.732204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.068739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.177220] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.201743] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.436109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.485689] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.611835] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.649797] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.793919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.837411] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.845634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.866576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.950921] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.957228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.970748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.005690] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.012892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.041496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.277252] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.283490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.296631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.334897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.341427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.354725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.397072] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.408208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.431747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.516873] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.523195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.536659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.671386] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.677694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.688562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/19 03:25:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000944fa8)) 2018/04/19 03:25:41 executing program 6: 2018/04/19 03:25:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) 2018/04/19 03:25:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x80045301, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) 2018/04/19 03:25:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000944fa8)={{0x0, 0x1}}) 2018/04/19 03:25:41 executing program 7: ppoll(&(0x7f0000000780), 0x0, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800), 0x8) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) 2018/04/19 03:25:41 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340), &(0x7f0000000540)) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/04/19 03:25:41 executing program 1: msgsnd(0x0, &(0x7f000010d000)={0x3}, 0x8, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000000), 0x8, 0x0, 0x0) 2018/04/19 03:25:42 executing program 0: 2018/04/19 03:25:42 executing program 6: 2018/04/19 03:25:42 executing program 7: 2018/04/19 03:25:42 executing program 5: 2018/04/19 03:25:42 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0xf8d7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 03:25:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f0000000040)=""/64, 0x40) read(r0, &(0x7f0000000280)=""/53, 0x35) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001d00ffff0000000000000000015b00e9ff040001005ed867cd22cb0f2dc0a600c4e57eba323ee3d1687fced706b9e168b0c24259d07440d213e5805b5ecc76da33b0416c83b3b0b974705840420418ae9a71e92928d8c5be43d793c894d303ba724b4c3cb7848297dbcd82226aa4a3dbdc84d3ae48379c9257147eee3c38a1"], 0x1}, 0x1}, 0x0) 2018/04/19 03:25:42 executing program 1: 2018/04/19 03:25:42 executing program 3: 2018/04/19 03:25:42 executing program 6: 2018/04/19 03:25:43 executing program 0: 2018/04/19 03:25:43 executing program 4: 2018/04/19 03:25:43 executing program 1: 2018/04/19 03:25:43 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="81081800001d000000010054409d0954", 0x10) r1 = accept(r0, 0x0, &(0x7f00000000c0)) sendmsg(r1, &(0x7f0000001680)={&(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}}}, 0x80, &(0x7f0000001540), 0x0, &(0x7f0000001580)}, 0x0) 2018/04/19 03:25:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00007ae000)=0x406, 0x4) write(r1, &(0x7f0000000000)='f', 0x1) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x0, &(0x7f000001a000), 0x0, &(0x7f000001b000)}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], []]}, 0x378) 2018/04/19 03:25:43 executing program 5: 2018/04/19 03:25:43 executing program 6: 2018/04/19 03:25:43 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0xf8d7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 03:25:43 executing program 5: 2018/04/19 03:25:43 executing program 1: 2018/04/19 03:25:43 executing program 0: 2018/04/19 03:25:43 executing program 6: 2018/04/19 03:25:43 executing program 4: [ 70.643558] ================================================================== [ 70.650973] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940 [ 70.657039] CPU: 0 PID: 5860 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 70.663880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.673230] Call Trace: [ 70.675827] dump_stack+0x185/0x1d0 [ 70.679463] ? vmac_setkey+0x337/0x940 [ 70.683349] kmsan_report+0x142/0x240 [ 70.687154] ? aes_set_key+0x260/0x260 [ 70.691040] __msan_warning_32+0x6c/0xb0 [ 70.695098] ? aes_set_key+0x260/0x260 [ 70.698987] vmac_setkey+0x337/0x940 [ 70.702704] ? vmac_final+0x3f80/0x3f80 [ 70.706679] shash_async_setkey+0x337/0x4c0 [ 70.711001] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 70.716368] ? trace_kmalloc+0xb6/0x2b0 [ 70.720351] ? shash_async_digest+0x1b0/0x1b0 [ 70.724853] crypto_ahash_setkey+0x31a/0x470 [ 70.729271] hash_setkey+0x8b/0xa0 [ 70.732814] alg_setsockopt+0x6c5/0x740 [ 70.736793] ? hash_release+0x50/0x50 [ 70.740600] ? alg_accept+0xd0/0xd0 [ 70.744236] SYSC_setsockopt+0x4b8/0x570 [ 70.748313] SyS_setsockopt+0x76/0xa0 [ 70.752122] do_syscall_64+0x309/0x430 [ 70.756018] ? SYSC_recv+0xe0/0xe0 [ 70.759567] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.764754] RIP: 0033:0x455329 [ 70.767935] RSP: 002b:00007f5c5851ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.775641] RAX: ffffffffffffffda RBX: 00007f5c5851b6d4 RCX: 0000000000455329 [ 70.782908] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 70.790176] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 70.797445] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 70.804712] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 70.811977] [ 70.813603] Local variable description: ----out.i@vmac_setkey [ 70.819473] Variable was created at: [ 70.823196] vmac_setkey+0x93/0x940 [ 70.826828] shash_async_setkey+0x337/0x4c0 [ 70.831144] ================================================================== [ 70.838498] Disabling lock debugging due to kernel taint 2018/04/19 03:25:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x80045301, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) 2018/04/19 03:25:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @quote={{}, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}}}}}], 0x30) tee(r1, r0, 0x1, 0x0) write$vnet(r2, &(0x7f0000001080)={0x1, {&(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000001040)=""/45}}, 0x68) dup2(r1, r3) 2018/04/19 03:25:43 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./control\x00', 0x1000802) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40) rmdir(&(0x7f0000000040)='./control\x00') 2018/04/19 03:25:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') [ 70.843945] Kernel panic - not syncing: panic_on_warn set ... [ 70.843945] [ 70.851315] CPU: 0 PID: 5860 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 70.859449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.868800] Call Trace: [ 70.871394] dump_stack+0x185/0x1d0 [ 70.875031] panic+0x39d/0x940 [ 70.878253] ? vmac_setkey+0x337/0x940 [ 70.882160] kmsan_report+0x238/0x240 [ 70.885962] ? aes_set_key+0x260/0x260 [ 70.889853] __msan_warning_32+0x6c/0xb0 [ 70.893913] ? aes_set_key+0x260/0x260 [ 70.897803] vmac_setkey+0x337/0x940 [ 70.901526] ? vmac_final+0x3f80/0x3f80 [ 70.905502] shash_async_setkey+0x337/0x4c0 [ 70.909825] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 70.915190] ? trace_kmalloc+0xb6/0x2b0 [ 70.919176] ? shash_async_digest+0x1b0/0x1b0 [ 70.923676] crypto_ahash_setkey+0x31a/0x470 [ 70.928092] hash_setkey+0x8b/0xa0 [ 70.931636] alg_setsockopt+0x6c5/0x740 [ 70.935615] ? hash_release+0x50/0x50 [ 70.939424] ? alg_accept+0xd0/0xd0 2018/04/19 03:25:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="9a148be70e76", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x2c, 0x0, @remote={0xfe, 0x80, [0xfffffff5], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff05, 0x0, 0x0, 0x0, [0x294], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 70.943063] SYSC_setsockopt+0x4b8/0x570 [ 70.947144] SyS_setsockopt+0x76/0xa0 [ 70.950953] do_syscall_64+0x309/0x430 [ 70.954856] ? SYSC_recv+0xe0/0xe0 [ 70.958412] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.963597] RIP: 0033:0x455329 [ 70.966957] RSP: 002b:00007f5c5851ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.974664] RAX: ffffffffffffffda RBX: 00007f5c5851b6d4 RCX: 0000000000455329 [ 70.981931] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 70.989198] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 70.996468] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 71.003737] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 71.011488] Dumping ftrace buffer: [ 71.015024] (ftrace buffer empty) [ 71.018710] Kernel Offset: disabled [ 71.022312] Rebooting in 86400 seconds..