Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. 2018/04/13 23:34:42 fuzzer started 2018/04/13 23:34:43 dialing manager at 10.128.0.26:36243 2018/04/13 23:34:49 kcov=true, comps=false 2018/04/13 23:34:52 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x1c}, 0x27) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x20004000, 0x6f2000, 0x4, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/04/13 23:34:52 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp={0x12}}}}}, &(0x7f00003b5000)) 2018/04/13 23:34:52 executing program 7: r0 = socket$nl_generic(0xa, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005480)=[{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000001000)='"', 0x1}], 0x1, &(0x7f0000000bc0)=ANY=[]}], 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x14, 0x0, 0x29, 0x3e}, 0x14) 2018/04/13 23:34:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000039000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000000)=',', 0x1}], 0x1, &(0x7f0000021000)}, 0xc100) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a80)="05024f8489aac2302409371ae4c589362dbfa3db172a5e73e77f6a392957e4bf226024b1c7e1c363d8f756258f2b478a4e25b9", 0x33}], 0x1}, 0x0) 2018/04/13 23:34:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x72f, 0x0, 0x0, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1}, 0x0) 2018/04/13 23:34:52 executing program 6: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00007fbffd)='H', 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(r2, &(0x7f00000000c0)="07dd63fd70755ba7d21455b4dbb546dae5678f7bfe8675aa8bbed046bd013517ab814bc1a44b5d6e04aa214dd4c35d5481b7155b2fa9721c6980421e8c1954fbaa15301863601eeae604cb93e261248d247603f201a83d439076e3b9959da511165be2864f1067f87408c95b7d93a34657e7f201fe3bd7a5c394a308c96a0d3f67bc1554515c497079ddbdb333672915bd62bebdb5f157c0ce657b833cbc509385a9a23273e10ecaf1e3c1e7f6280935401cb688ca9ffec41cfcc01d9d6534e9bbed2d3f58d093ce2e268cdf27", 0xcd, 0x4, &(0x7f0000000040)={0x1a, 0x30f, 0x74, 0xf75, 0x0, 0x3, @random="6f916e8cc3b2"}, 0x10) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e4b2) sendfile(r0, r0, &(0x7f000079a000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x200000011, r0, 0x0) umount2(&(0x7f0000000000)='../file0\x00', 0x0) 2018/04/13 23:34:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x10004e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0xbe) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x1ed) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000140)=@can, 0x80, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/166, 0xa6}], 0x1, &(0x7f0000001700)=""/104, 0x68}, 0x100) shutdown(r0, 0x1) 2018/04/13 23:34:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67086b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb81ff010000011e1a0d8566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a292a7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840a47312a4c520a03b27f805d181bd09ea208931a36e888060a2d") flistxattr(r0, &(0x7f0000000000)=""/9, 0xfed9) syzkaller login: [ 41.476374] ip (3723) used greatest stack depth: 54672 bytes left [ 42.627443] ip (3838) used greatest stack depth: 54200 bytes left [ 42.947570] ip (3865) used greatest stack depth: 53960 bytes left [ 43.251203] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.257690] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.298963] device bridge_slave_0 entered promiscuous mode [ 43.329651] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.336130] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.360181] device bridge_slave_0 entered promiscuous mode [ 43.407499] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.414012] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.445456] device bridge_slave_0 entered promiscuous mode [ 43.467292] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.473772] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.501191] device bridge_slave_0 entered promiscuous mode [ 43.519148] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.525586] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.551972] device bridge_slave_1 entered promiscuous mode [ 43.561803] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.568293] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.590960] device bridge_slave_0 entered promiscuous mode [ 43.608259] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.614760] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.638575] device bridge_slave_0 entered promiscuous mode [ 43.646390] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.652841] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.666312] device bridge_slave_1 entered promiscuous mode [ 43.673273] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.679769] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.690591] device bridge_slave_1 entered promiscuous mode [ 43.699228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.708941] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.715403] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.743915] device bridge_slave_0 entered promiscuous mode [ 43.767362] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.773837] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.799484] device bridge_slave_0 entered promiscuous mode [ 43.808220] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.814689] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.835535] device bridge_slave_1 entered promiscuous mode [ 43.851271] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.857715] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.875622] device bridge_slave_1 entered promiscuous mode [ 43.884939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.894850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.905429] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.911902] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.946592] device bridge_slave_1 entered promiscuous mode [ 43.962797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.973432] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.979890] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.998934] device bridge_slave_1 entered promiscuous mode [ 44.020604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.030742] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.037198] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.065076] device bridge_slave_1 entered promiscuous mode [ 44.098215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.106974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.116400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.137527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.208754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.228788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.285546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.324777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.358979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.402525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.528259] ip (3972) used greatest stack depth: 53656 bytes left [ 44.555815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.962559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.053088] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.128722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.176270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.192617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.218236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.302355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.328982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.361013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.428014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.456123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.516486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.536574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.547818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.633378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.772072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.148890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.195339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.349710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.380892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.405896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.418765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.526604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.550129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.557523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.568728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.609819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.628103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.635788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.643536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.653162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.671959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.711931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.726453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.810690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.818571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.833750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.854757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.864944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.878592] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.886383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.894460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.907489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.926833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.956301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.980699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.991981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.004784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.034239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.043611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.066391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.077648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.084738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.101901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.143439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.184799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.211942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.230757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.241611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.259458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.266731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.288811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.301532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.314967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.328386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.335704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.360119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.397186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.427354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.448655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.471534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.484341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.494838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.525470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.537435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.569283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.597903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.686651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.693839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.702662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.070346] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.076826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.083706] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.090149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.129955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.140465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.372687] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.379181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.385997] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.392448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.412823] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.618797] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.625271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.632107] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.638553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.651290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.687714] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.694198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.701071] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.707519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.779972] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.789741] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.796195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.803059] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.809488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.832057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.857467] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.863928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.870786] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.877226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.945923] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.953361] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.959821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.966685] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.973137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.010987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.143290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.157639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.186238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.215062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.223170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.232088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.258365] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.264830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.271657] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.278146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.357846] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.168157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.458216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.678058] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.804571] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.996689] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.136126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.207185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.284460] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.290780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.302147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.406762] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.510952] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.517300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.529175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.582124] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.590499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.614590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.744146] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.750394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.760769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.809141] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.991483] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.997777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.013281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.057536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.064699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.073248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.308098] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.314388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.322634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.576444] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.584567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.603818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 23:35:18 executing program 7: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f00007fbffd)='H', 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(r2, &(0x7f00000000c0)="07dd63fd70755ba7d21455b4dbb546dae5678f7bfe8675aa8bbed046bd013517ab814bc1a44b5d6e04aa214dd4c35d5481b7155b2fa9721c6980421e8c1954fbaa15301863601eeae604cb93e261248d247603f201a83d439076e3b9959da511165be2864f1067f87408c95b7d93a34657e7f201fe3bd7a5c394a308c96a0d3f67bc1554515c497079ddbdb333672915bd62bebdb5f157c0ce657b833cbc509385a9a23273e10ecaf1e3c1e7f6280935401cb688ca9ffec41cfcc01d9d6534e9bbed2d3f58d093ce2e268cdf27", 0xcd, 0x4, &(0x7f0000000040)={0x1a, 0x30f, 0x0, 0xf75, 0x2, 0x3, @random="6f916e8cc3b2"}, 0x10) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r0, &(0x7f000079a000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x200000011, r0, 0x0) umount2(&(0x7f0000000000)='../file0\x00', 0x0) [ 65.849177] ================================================================== [ 65.856572] BUG: KMSAN: uninit-value in ipv6_destopt_rcv+0x3df/0xde0 [ 65.863054] CPU: 0 PID: 5723 Comm: syz-executor3 Not tainted 4.16.0+ #83 [ 65.869876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.879205] Call Trace: [ 65.881768] [ 65.883918] dump_stack+0x185/0x1d0 [ 65.887545] ? ipv6_destopt_rcv+0x3df/0xde0 [ 65.891866] kmsan_report+0x142/0x240 [ 65.895669] __msan_warning_32+0x6c/0xb0 [ 65.899736] ipv6_destopt_rcv+0x3df/0xde0 [ 65.903878] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0 [ 65.908181] ip6_input_finish+0xa62/0x2110 [ 65.912408] ? ip6table_filter_hook+0xb5/0xe0 [ 65.916897] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 65.922260] ip6_mc_input+0x697/0x740 [ 65.926140] ? ip6_input+0x320/0x320 [ 65.929847] ? ip6_input_finish+0x2110/0x2110 [ 65.934325] ipv6_rcv+0x20ec/0x26d0 [ 65.937938] ? local_bh_enable+0x40/0x40 [ 65.941989] __netif_receive_skb_core+0x47cf/0x4a80 [ 65.946984] ? kmsan_set_origin_inline+0x6b/0x120 [ 65.951819] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 65.957612] ? ip6_rcv_finish+0x4d0/0x4d0 [ 65.961752] process_backlog+0x62d/0xe20 [ 65.965806] ? rps_trigger_softirq+0x2f0/0x2f0 [ 65.970376] net_rx_action+0x7c1/0x1a70 [ 65.974343] ? net_tx_action+0xab0/0xab0 [ 65.978394] __do_softirq+0x56d/0x93d [ 65.982184] do_softirq_own_stack+0x2a/0x40 [ 65.986490] [ 65.988722] do_softirq+0xb6/0xf0 [ 65.992174] dev_loopback_xmit+0x8b0/0x900 [ 65.996400] ip6_finish_output2+0x5e6/0x1f20 [ 66.000788] ? validate_xmit_skb+0x1320/0x1320 [ 66.005351] ip6_finish_output+0xb3f/0xc00 [ 66.009566] ip6_output+0x597/0x6c0 [ 66.013171] ? ip6_output+0x6c0/0x6c0 [ 66.016952] ? ac6_seq_show+0x200/0x200 [ 66.020914] ip6_local_out+0x573/0x640 [ 66.024784] ? __ip6_local_out+0x4f0/0x4f0 [ 66.029004] ip6_push_pending_frames+0x218/0x4d0 [ 66.033750] rawv6_sendmsg+0x4500/0x4cc0 [ 66.037791] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 66.043144] ? rw_copy_check_uvector+0x5af/0x6c0 [ 66.047921] ? compat_rawv6_ioctl+0x30/0x30 [ 66.052236] inet_sendmsg+0x48d/0x740 [ 66.056038] ? security_socket_sendmsg+0x9e/0x210 [ 66.060880] ? inet_getname+0x500/0x500 [ 66.064850] ___sys_sendmsg+0xec0/0x1310 [ 66.068936] ? __fdget+0x4e/0x60 [ 66.072304] ? __fget_light+0x56/0x710 [ 66.076186] ? __fdget+0x4e/0x60 [ 66.079553] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 66.084913] ? __fget_light+0x6b9/0x710 [ 66.088902] SYSC_sendmsg+0x2a3/0x3d0 [ 66.092711] SyS_sendmsg+0x54/0x80 [ 66.096249] do_syscall_64+0x309/0x430 [ 66.100141] ? ___sys_sendmsg+0x1310/0x1310 [ 66.104465] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.109648] RIP: 0033:0x455319 [ 66.112830] RSP: 002b:00007f3bfab14c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.120535] RAX: ffffffffffffffda RBX: 00007f3bfab156d4 RCX: 0000000000455319 [ 66.127798] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000013 [ 66.135063] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 66.142328] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 66.149591] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 66.156853] [ 66.158469] Uninit was stored to memory at: [ 66.162791] kmsan_internal_chain_origin+0x12b/0x210 [ 66.167887] kmsan_memcpy_origins+0x11d/0x170 [ 66.172381] __msan_memcpy+0x19f/0x1f0 [ 66.176267] skb_copy_bits+0x63a/0xdb0 [ 66.180157] __pskb_pull_tail+0x483/0x22e0 [ 66.184387] ipv6_destopt_rcv+0x660/0xde0 [ 66.188529] ip6_input_finish+0xa62/0x2110 [ 66.192763] ip6_mc_input+0x697/0x740 [ 66.196560] ipv6_rcv+0x20ec/0x26d0 [ 66.200185] __netif_receive_skb_core+0x47cf/0x4a80 [ 66.205194] process_backlog+0x62d/0xe20 [ 66.209249] net_rx_action+0x7c1/0x1a70 [ 66.213218] __do_softirq+0x56d/0x93d [ 66.217003] Uninit was created at: [ 66.220537] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 66.225545] kmsan_alloc_page+0x82/0xe0 [ 66.229513] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 66.234259] alloc_pages_current+0x6b5/0x970 [ 66.238661] skb_page_frag_refill+0x3ba/0x5e0 [ 66.243154] sk_page_frag_refill+0xa4/0x340 [ 66.247470] __ip6_append_data+0x1a20/0x4bb0 [ 66.251873] ip6_append_data+0x40e/0x6b0 [ 66.255926] rawv6_sendmsg+0x2787/0x4cc0 [ 66.259980] inet_sendmsg+0x48d/0x740 [ 66.264129] ___sys_sendmsg+0xec0/0x1310 [ 66.268195] SYSC_sendmsg+0x2a3/0x3d0 [ 66.271988] SyS_sendmsg+0x54/0x80 [ 66.275521] do_syscall_64+0x309/0x430 [ 66.279410] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.284581] ================================================================== [ 66.291924] Disabling lock debugging due to kernel taint [ 66.297361] Kernel panic - not syncing: panic_on_warn set ... [ 66.297361] [ 66.304721] CPU: 0 PID: 5723 Comm: syz-executor3 Tainted: G B 4.16.0+ #83 [ 66.312847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.322191] Call Trace: [ 66.324760] [ 66.326912] dump_stack+0x185/0x1d0 [ 66.330562] panic+0x39d/0x940 [ 66.333810] ? ipv6_destopt_rcv+0x3df/0xde0 [ 66.338128] kmsan_report+0x238/0x240 [ 66.341921] __msan_warning_32+0x6c/0xb0 [ 66.345974] ipv6_destopt_rcv+0x3df/0xde0 [ 66.350129] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0 [ 66.354443] ip6_input_finish+0xa62/0x2110 [ 66.358680] ? ip6table_filter_hook+0xb5/0xe0 [ 66.363172] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 66.368534] ip6_mc_input+0x697/0x740 [ 66.372329] ? ip6_input+0x320/0x320 [ 66.376042] ? ip6_input_finish+0x2110/0x2110 [ 66.380533] ipv6_rcv+0x20ec/0x26d0 [ 66.384158] ? local_bh_enable+0x40/0x40 [ 66.388220] __netif_receive_skb_core+0x47cf/0x4a80 [ 66.393229] ? kmsan_set_origin_inline+0x6b/0x120 [ 66.398069] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 66.403873] ? ip6_rcv_finish+0x4d0/0x4d0 [ 66.408023] process_backlog+0x62d/0xe20 [ 66.412089] ? rps_trigger_softirq+0x2f0/0x2f0 [ 66.416667] net_rx_action+0x7c1/0x1a70 [ 66.420630] ? net_tx_action+0xab0/0xab0 [ 66.424679] __do_softirq+0x56d/0x93d [ 66.428480] do_softirq_own_stack+0x2a/0x40 [ 66.432786] [ 66.435021] do_softirq+0xb6/0xf0 [ 66.438474] dev_loopback_xmit+0x8b0/0x900 [ 66.442712] ip6_finish_output2+0x5e6/0x1f20 [ 66.447125] ? validate_xmit_skb+0x1320/0x1320 [ 66.451717] ip6_finish_output+0xb3f/0xc00 [ 66.455954] ip6_output+0x597/0x6c0 [ 66.459579] ? ip6_output+0x6c0/0x6c0 [ 66.463376] ? ac6_seq_show+0x200/0x200 [ 66.467349] ip6_local_out+0x573/0x640 [ 66.471236] ? __ip6_local_out+0x4f0/0x4f0 [ 66.475472] ip6_push_pending_frames+0x218/0x4d0 [ 66.480227] rawv6_sendmsg+0x4500/0x4cc0 [ 66.484286] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 66.489648] ? rw_copy_check_uvector+0x5af/0x6c0 [ 66.494423] ? compat_rawv6_ioctl+0x30/0x30 [ 66.498748] inet_sendmsg+0x48d/0x740 [ 66.502550] ? security_socket_sendmsg+0x9e/0x210 [ 66.507391] ? inet_getname+0x500/0x500 [ 66.511368] ___sys_sendmsg+0xec0/0x1310 [ 66.515432] ? __fdget+0x4e/0x60 [ 66.518793] ? __fget_light+0x56/0x710 [ 66.522764] ? __fdget+0x4e/0x60 [ 66.526131] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 66.531490] ? __fget_light+0x6b9/0x710 [ 66.535467] SYSC_sendmsg+0x2a3/0x3d0 [ 66.539273] SyS_sendmsg+0x54/0x80 [ 66.542811] do_syscall_64+0x309/0x430 [ 66.546715] ? ___sys_sendmsg+0x1310/0x1310 [ 66.551041] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.556224] RIP: 0033:0x455319 [ 66.559410] RSP: 002b:00007f3bfab14c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.567120] RAX: ffffffffffffffda RBX: 00007f3bfab156d4 RCX: 0000000000455319 [ 66.574394] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000013 [ 66.581657] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 66.588919] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 66.596185] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 66.603901] Dumping ftrace buffer: [ 66.607420] (ftrace buffer empty) [ 66.611104] Kernel Offset: disabled [ 66.614710] Rebooting in 86400 seconds..