INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. 2018/04/15 10:23:39 fuzzer started 2018/04/15 10:23:39 dialing manager at 10.128.0.26:36243 2018/04/15 10:23:45 kcov=true, comps=false 2018/04/15 10:23:48 executing program 0: 2018/04/15 10:23:48 executing program 2: 2018/04/15 10:23:48 executing program 7: 2018/04/15 10:23:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000003, 0x8000000000000c) write(r0, &(0x7f0000000300)="1f0000000506fd00010000f600eb058e3f00ff0180fff80009000101060191", 0x1f) 2018/04/15 10:23:48 executing program 4: r0 = socket(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x8, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fe3000)=0x2c) 2018/04/15 10:23:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0), 0x14) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 2018/04/15 10:23:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x800000000100003) sendto$inet6(r0, &(0x7f0000eb9fff), 0xffffff31, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0x32c, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) dup3(r2, r1, 0x0) 2018/04/15 10:23:48 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x4, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) syzkaller login: [ 43.036970] ip (3757) used greatest stack depth: 54688 bytes left [ 43.296796] ip (3781) used greatest stack depth: 54672 bytes left [ 43.565966] ip (3808) used greatest stack depth: 54072 bytes left [ 44.567940] ip (3903) used greatest stack depth: 53960 bytes left [ 44.707284] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.713798] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.749176] device bridge_slave_0 entered promiscuous mode [ 44.841602] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.848120] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.883079] device bridge_slave_0 entered promiscuous mode [ 44.976123] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.982630] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.023545] device bridge_slave_1 entered promiscuous mode [ 45.035428] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.041884] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.061554] device bridge_slave_0 entered promiscuous mode [ 45.079894] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.086383] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.095834] device bridge_slave_0 entered promiscuous mode [ 45.108602] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.115129] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.136826] device bridge_slave_0 entered promiscuous mode [ 45.154173] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.160649] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.189694] device bridge_slave_1 entered promiscuous mode [ 45.204441] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.210912] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.248246] device bridge_slave_0 entered promiscuous mode [ 45.277495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.286250] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.292736] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.319088] device bridge_slave_1 entered promiscuous mode [ 45.330518] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.337008] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.361571] device bridge_slave_0 entered promiscuous mode [ 45.371386] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.377862] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.394985] device bridge_slave_1 entered promiscuous mode [ 45.401620] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.408169] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.427225] device bridge_slave_1 entered promiscuous mode [ 45.442114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.452120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.460476] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.466962] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.525156] device bridge_slave_1 entered promiscuous mode [ 45.542836] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.549345] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.572436] device bridge_slave_0 entered promiscuous mode [ 45.589912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.599827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.625310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.632984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.650102] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.656664] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.713269] device bridge_slave_1 entered promiscuous mode [ 45.722223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.813596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.834122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.844273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.879318] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.885831] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.922156] device bridge_slave_1 entered promiscuous mode [ 45.949536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.960123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.142021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.162481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.340483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.438894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.641012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.689231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.799225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.808955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.843873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.886894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.933229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.993865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.031019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.052508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.189550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.231019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.358978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.412217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.609471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.618206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.864526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.899751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.024986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.045326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.052626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.067795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.083619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.098093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.126401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.199241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.284416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.294287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.306246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.315666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.332636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.341596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.349248] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.360112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.376110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.422668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.431854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.466398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.504933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.531909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.574796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.581985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.599442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.639280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.646541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.676382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.694774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.701942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.713784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.737808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.756718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.765152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.772764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.783080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.790263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.807836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.839164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.870297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.910234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.943718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.965431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.981498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.989080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.010601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.044295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.079813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.097701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.107196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.122472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.152429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.164497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.174340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.221465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.362189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.370936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.386995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.577888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.585344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.599812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.820196] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.826698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.833597] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.840085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.883641] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.890555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.105354] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.111866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.118742] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.125196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.136730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.157930] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.164415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.171278] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.177736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.220077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.230476] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.236944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.243771] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.250216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.301491] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.512144] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.518643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.525494] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.531954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.559119] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.577153] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.583627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.590508] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.596957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.660567] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.667813] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.674280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.681198] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.687665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.703168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.936372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.945767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.977916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.000601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.025724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.045161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.291729] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.298220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.305143] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.311607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.347121] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.960564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.159566] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.719074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.938247] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.944547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.960650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.986757] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.998955] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.052183] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.156844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.233100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.657886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.664239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.674132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.761730] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.797449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.803744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.814015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.834570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.845572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.853826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.881611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.890500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.907125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.124841] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.131501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.143170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.176146] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.182426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.219646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.578605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.584912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.596618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/15 10:24:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendmsg(r0, &(0x7f0000021fc8)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000240)="5ab74c9a572f32741936ccd7f0f0fcc594f50d0a26c6c567e09cc8924d772b985d4031306a4ceef27ee9f607e643f2c6b041ecbc1f65b7f9c01006ad73ba0c86f99b66fc", 0x44}], 0x1, &(0x7f0000005000)}, 0xc100) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="bc", 0x1}], 0x1, &(0x7f0000000040)}, 0x0) clock_gettime(0x0, &(0x7f0000000cc0)) recvmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f00000009c0)=@nfc_llcp, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/57, 0x39}, {&(0x7f0000000a80)=""/124, 0x7c}], 0x2, &(0x7f0000000b40)=""/153, 0x99}}], 0x1, 0x0, &(0x7f0000000d00)) 2018/04/15 10:24:15 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 2018/04/15 10:24:15 executing program 2: 2018/04/15 10:24:15 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)=ANY=[@ANYBLOB="02120000020000000000000000000000"], 0x10}, 0x1}, 0x0) 2018/04/15 10:24:15 executing program 7: 2018/04/15 10:24:15 executing program 1: 2018/04/15 10:24:15 executing program 4: 2018/04/15 10:24:15 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x102}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xffffff9c, 0x730000, 0x1, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x56}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x730000, 0x400000, 0x10, &(0x7f0000000000)) [ 68.060209] ================================================================== [ 68.067634] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 68.073780] CPU: 1 PID: 5771 Comm: syz-executor0 Not tainted 4.16.0+ #83 [ 68.080608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.089956] Call Trace: [ 68.092529] [ 68.094682] dump_stack+0x185/0x1d0 [ 68.098305] ? csum_partial+0x78e/0x850 [ 68.102277] kmsan_report+0x142/0x240 [ 68.106074] __msan_warning_32+0x6c/0xb0 [ 68.110123] csum_partial+0x78e/0x850 [ 68.113910] csum_partial_ext+0x89/0xa0 [ 68.117871] __skb_checksum+0x6d4/0x1010 [ 68.121919] ? skb_checksum+0x120/0x120 [ 68.125876] skb_checksum+0xec/0x120 [ 68.129570] ? skb_checksum+0x120/0x120 [ 68.133524] ? csum_partial_ext+0xa0/0xa0 [ 68.137658] __skb_checksum_complete+0x90/0x400 [ 68.142311] __udp6_lib_rcv+0x21e1/0x3920 [ 68.146439] ? ip6_input_finish+0x55c/0x2110 [ 68.150832] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 68.156181] ? __local_bh_enable_ip+0x3b/0x140 [ 68.160750] udpv6_rcv+0x5c/0x70 [ 68.164189] ? udp_v6_early_demux+0x11a0/0x11a0 [ 68.168837] ip6_input_finish+0xa62/0x2110 [ 68.173059] ? ip6table_filter_hook+0xb5/0xe0 [ 68.177535] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 68.182880] ? ip6_input_finish+0x12a1/0x2110 [ 68.187361] ip6_input+0x294/0x320 [ 68.190881] ? ip6_input+0x320/0x320 [ 68.194576] ? ipv6_rcv+0x26d0/0x26d0 [ 68.198358] ipv6_rcv+0x20ec/0x26d0 [ 68.201966] ? local_bh_enable+0x40/0x40 [ 68.206017] __netif_receive_skb_core+0x47cf/0x4a80 [ 68.211021] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.215853] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 68.221631] ? ip6_rcv_finish+0x4d0/0x4d0 [ 68.225762] process_backlog+0x62d/0xe20 [ 68.229812] ? rps_trigger_softirq+0x2f0/0x2f0 [ 68.234370] net_rx_action+0x7c1/0x1a70 [ 68.238328] ? net_tx_action+0xab0/0xab0 [ 68.242372] __do_softirq+0x56d/0x93d [ 68.246163] do_softirq_own_stack+0x2a/0x40 [ 68.250550] [ 68.252772] __local_bh_enable_ip+0x114/0x140 [ 68.257252] local_bh_enable+0x36/0x40 [ 68.261120] ip6_finish_output2+0x1b6c/0x1f20 [ 68.265607] ip6_finish_output+0xb3f/0xc00 [ 68.269825] ip6_output+0x597/0x6c0 [ 68.273435] ? ip6_output+0x6c0/0x6c0 [ 68.277217] ? ac6_seq_show+0x200/0x200 [ 68.281172] ip6_local_out+0x573/0x640 [ 68.285054] ? __ip6_local_out+0x4f0/0x4f0 [ 68.289272] ip6_send_skb+0xfa/0x380 [ 68.292971] udp_v6_send_skb+0x116a/0x1880 [ 68.297202] udpv6_sendmsg+0x15f4/0x45b0 [ 68.301249] ? rw_copy_check_uvector+0x5af/0x6c0 [ 68.305986] ? rw_copy_check_uvector+0x643/0x6c0 [ 68.310727] ? ip_copy_metadata+0xac0/0xac0 [ 68.315041] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 68.319780] inet_sendmsg+0x48d/0x740 [ 68.323565] ? security_socket_sendmsg+0x9e/0x210 [ 68.328390] ? inet_getname+0x500/0x500 [ 68.332352] ___sys_sendmsg+0xec0/0x1310 [ 68.336484] ? __fdget+0x4e/0x60 [ 68.339829] ? __fget_light+0x56/0x710 [ 68.343694] ? __fdget+0x4e/0x60 [ 68.347047] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.352391] ? __fget_light+0x6b9/0x710 [ 68.356354] SYSC_sendmsg+0x2a3/0x3d0 [ 68.360138] SyS_sendmsg+0x54/0x80 [ 68.363667] do_syscall_64+0x309/0x430 [ 68.367535] ? ___sys_sendmsg+0x1310/0x1310 [ 68.371843] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.377013] RIP: 0033:0x455319 [ 68.380184] RSP: 002b:00007fa136b9cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.387871] RAX: ffffffffffffffda RBX: 00007fa136b9d6d4 RCX: 0000000000455319 [ 68.395121] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000014 [ 68.402377] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.409628] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.416878] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 68.424128] [ 68.425734] Uninit was created at: [ 68.429254] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 68.434249] kmsan_alloc_page+0x82/0xe0 [ 68.438201] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 68.442934] alloc_pages_current+0x6b5/0x970 [ 68.447323] skb_page_frag_refill+0x3ba/0x5e0 [ 68.451794] sk_page_frag_refill+0xa4/0x340 [ 68.456097] __ip6_append_data+0x1a20/0x4bb0 [ 68.460482] ip6_append_data+0x40e/0x6b0 [ 68.464524] udpv6_sendmsg+0xfd5/0x45b0 [ 68.468476] inet_sendmsg+0x48d/0x740 [ 68.472257] ___sys_sendmsg+0xec0/0x1310 [ 68.476298] SYSC_sendmsg+0x2a3/0x3d0 [ 68.480078] SyS_sendmsg+0x54/0x80 [ 68.483597] do_syscall_64+0x309/0x430 [ 68.487468] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.492630] ================================================================== [ 68.499963] Disabling lock debugging due to kernel taint [ 68.505387] Kernel panic - not syncing: panic_on_warn set ... [ 68.505387] [ 68.512738] CPU: 1 PID: 5771 Comm: syz-executor0 Tainted: G B 4.16.0+ #83 [ 68.520854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.530183] Call Trace: [ 68.532748] [ 68.534882] dump_stack+0x185/0x1d0 [ 68.538489] panic+0x39d/0x940 [ 68.541677] ? csum_partial+0x78e/0x850 [ 68.545629] kmsan_report+0x238/0x240 [ 68.549415] __msan_warning_32+0x6c/0xb0 [ 68.553456] csum_partial+0x78e/0x850 [ 68.557241] csum_partial_ext+0x89/0xa0 [ 68.561197] __skb_checksum+0x6d4/0x1010 [ 68.565243] ? skb_checksum+0x120/0x120 [ 68.569198] skb_checksum+0xec/0x120 [ 68.572893] ? skb_checksum+0x120/0x120 [ 68.576846] ? csum_partial_ext+0xa0/0xa0 [ 68.580978] __skb_checksum_complete+0x90/0x400 [ 68.585629] __udp6_lib_rcv+0x21e1/0x3920 [ 68.589762] ? ip6_input_finish+0x55c/0x2110 [ 68.594153] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 68.599496] ? __local_bh_enable_ip+0x3b/0x140 [ 68.604063] udpv6_rcv+0x5c/0x70 [ 68.607411] ? udp_v6_early_demux+0x11a0/0x11a0 [ 68.612063] ip6_input_finish+0xa62/0x2110 [ 68.616279] ? ip6table_filter_hook+0xb5/0xe0 [ 68.620755] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 68.626100] ? ip6_input_finish+0x12a1/0x2110 [ 68.630578] ip6_input+0x294/0x320 [ 68.634102] ? ip6_input+0x320/0x320 [ 68.637795] ? ipv6_rcv+0x26d0/0x26d0 [ 68.641576] ipv6_rcv+0x20ec/0x26d0 [ 68.645185] ? local_bh_enable+0x40/0x40 [ 68.649238] __netif_receive_skb_core+0x47cf/0x4a80 [ 68.654234] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.659055] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 68.664837] ? ip6_rcv_finish+0x4d0/0x4d0 [ 68.668967] process_backlog+0x62d/0xe20 [ 68.673019] ? rps_trigger_softirq+0x2f0/0x2f0 [ 68.677582] net_rx_action+0x7c1/0x1a70 [ 68.681538] ? net_tx_action+0xab0/0xab0 [ 68.685583] __do_softirq+0x56d/0x93d [ 68.689367] do_softirq_own_stack+0x2a/0x40 [ 68.693665] [ 68.695886] __local_bh_enable_ip+0x114/0x140 [ 68.700362] local_bh_enable+0x36/0x40 [ 68.704232] ip6_finish_output2+0x1b6c/0x1f20 [ 68.708717] ip6_finish_output+0xb3f/0xc00 [ 68.712936] ip6_output+0x597/0x6c0 [ 68.716542] ? ip6_output+0x6c0/0x6c0 [ 68.720327] ? ac6_seq_show+0x200/0x200 [ 68.724279] ip6_local_out+0x573/0x640 [ 68.728146] ? __ip6_local_out+0x4f0/0x4f0 [ 68.732364] ip6_send_skb+0xfa/0x380 [ 68.736064] udp_v6_send_skb+0x116a/0x1880 [ 68.740285] udpv6_sendmsg+0x15f4/0x45b0 [ 68.744334] ? rw_copy_check_uvector+0x5af/0x6c0 [ 68.749070] ? rw_copy_check_uvector+0x643/0x6c0 [ 68.753812] ? ip_copy_metadata+0xac0/0xac0 [ 68.758120] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 68.762858] inet_sendmsg+0x48d/0x740 [ 68.766638] ? security_socket_sendmsg+0x9e/0x210 [ 68.771464] ? inet_getname+0x500/0x500 [ 68.775424] ___sys_sendmsg+0xec0/0x1310 [ 68.779472] ? __fdget+0x4e/0x60 [ 68.782820] ? __fget_light+0x56/0x710 [ 68.786685] ? __fdget+0x4e/0x60 [ 68.790038] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.795381] ? __fget_light+0x6b9/0x710 [ 68.799343] SYSC_sendmsg+0x2a3/0x3d0 [ 68.803131] SyS_sendmsg+0x54/0x80 [ 68.806649] do_syscall_64+0x309/0x430 [ 68.810521] ? ___sys_sendmsg+0x1310/0x1310 [ 68.814828] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.819994] RIP: 0033:0x455319 [ 68.823167] RSP: 002b:00007fa136b9cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.830859] RAX: ffffffffffffffda RBX: 00007fa136b9d6d4 RCX: 0000000000455319 [ 68.838108] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000014 [ 68.845357] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.852606] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.859856] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 68.867562] Dumping ftrace buffer: [ 68.871079] (ftrace buffer empty) [ 68.874761] Kernel Offset: disabled [ 68.878361] Rebooting in 86400 seconds..