INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts. 2018/04/20 22:15:03 fuzzer started 2018/04/20 22:15:03 dialing manager at 10.128.0.26:40315 2018/04/20 22:15:09 kcov=true, comps=false 2018/04/20 22:15:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000b78ff0)="a23364fd", 0x4) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x6) sendfile(r1, r2, &(0x7f0000000040), 0xd) 2018/04/20 22:15:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'sit0\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b}}) 2018/04/20 22:15:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='/\x00', 0x0, 0x0, &(0x7f0000001340), 0x28020, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, [0x37]}, 0x2c}]}) 2018/04/20 22:15:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000000100000000c8db00"], 0x10}}], 0x2, 0x0) 2018/04/20 22:15:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000000), 0x0, 0x800000000000201) 2018/04/20 22:15:12 executing program 5: r0 = socket$inet(0x2, 0x3, 0x21) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)="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", 0x5c9}], 0x1, &(0x7f0000000280)}, 0x0) 2018/04/20 22:15:12 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0x987, 0xc7) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10, &(0x7f00000007c0)}, 0x0) 2018/04/20 22:15:12 executing program 1: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) r1 = syz_open_procfs(0x0, &(0x7f0000d7b000)='net/raw\x00') sendfile(r0, r1, &(0x7f00008d1000), 0x401) syzkaller login: [ 42.604074] ip (3727) used greatest stack depth: 54688 bytes left [ 43.227919] ip (3782) used greatest stack depth: 54408 bytes left [ 44.205792] ip (3872) used greatest stack depth: 53976 bytes left [ 44.612096] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.618580] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.650953] device bridge_slave_0 entered promiscuous mode [ 44.698990] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.705572] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.750261] device bridge_slave_0 entered promiscuous mode [ 44.818437] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.824933] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.876147] device bridge_slave_1 entered promiscuous mode [ 44.911532] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.918179] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.962162] device bridge_slave_0 entered promiscuous mode [ 44.983466] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.989943] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.000101] device bridge_slave_0 entered promiscuous mode [ 45.017754] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.024213] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.038879] device bridge_slave_0 entered promiscuous mode [ 45.049279] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.055723] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.072900] device bridge_slave_0 entered promiscuous mode [ 45.082556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.093664] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.100124] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.125776] device bridge_slave_1 entered promiscuous mode [ 45.134387] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.140843] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.171167] device bridge_slave_1 entered promiscuous mode [ 45.187713] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.194174] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.213168] device bridge_slave_0 entered promiscuous mode [ 45.231289] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.237762] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.246123] device bridge_slave_0 entered promiscuous mode [ 45.256126] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.262562] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.272098] device bridge_slave_1 entered promiscuous mode [ 45.291808] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.298302] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.313642] device bridge_slave_1 entered promiscuous mode [ 45.320230] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.326707] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.348272] device bridge_slave_1 entered promiscuous mode [ 45.356996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.366500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.378144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.390448] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.396938] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.421812] device bridge_slave_1 entered promiscuous mode [ 45.428163] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.434638] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.468320] device bridge_slave_1 entered promiscuous mode [ 45.500870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.512486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.526399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.580868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.599777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.609734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.703270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.712693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.749546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.758863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.792337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.950996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.257107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.486337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.605870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.631070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.675837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.700850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.727695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.793714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.816599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.830346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.860318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.937870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.945981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.004232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.017532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.279385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.466952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.687604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.778944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.820578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.851265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.916740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.923947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.935674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.987865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.005657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.016489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.027561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.047210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.057344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.155444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.162651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.172149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.209839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.220489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.251661] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.260716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.277769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.314415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.327280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.335395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.342685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.374233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.398872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.427911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.443621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.450746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.460722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.477391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.487945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.496864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.507883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.515841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.546507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.573439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.602237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.629605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.655852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.665675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.673082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.681984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.694332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.709310] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.718188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.726856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.739152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.771527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.798278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.828448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.852322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.865768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.877772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.918982] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.926565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.978802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.015899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.051791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.197875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.205324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.217909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.890577] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.897119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.903964] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.910402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.956976] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.963825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.982751] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.989207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.996094] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.002533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.013851] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.023608] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.030121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.036960] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.043446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.053858] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.063523] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.069976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.076838] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.083289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.106201] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.119617] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.126125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.132911] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.139355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.183404] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.197635] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.204119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.210879] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.217314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.259509] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.306869] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.313364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.320247] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.326693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.393981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.668765] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.675256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.682112] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.688580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.755915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.000862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.018379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.053200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.080571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.113611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.129133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.142797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.945217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.307161] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.374933] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.407637] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.425261] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.454449] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.715377] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.768911] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.775211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.784538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.992413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.037605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.043906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.054585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.181780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.188126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.200624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.225913] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.236121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.247276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.261314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.281103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.299681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.325714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.337913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.351300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.570557] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.576852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.594909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.843753] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.850174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.858206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 22:15:38 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, &(0x7f0000000000)=""/119) 2018/04/20 22:15:38 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[{0x4}, {}, {}, {}, {}, {}, {}, {}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) sendto$inet(r0, &(0x7f0000000300)='U', 0x1, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000540)='A', 0x1}], 0x1) writev(r0, &(0x7f0000001040)=[{&(0x7f00000000c0)="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", 0x20d}], 0x1) [ 66.890104] ================================================================== [ 66.897528] BUG: KMSAN: uninit-value in crc32c_pcl_intel_update+0x3d0/0x500 [ 66.904632] CPU: 0 PID: 5708 Comm: syz-executor0 Not tainted 4.16.0+ #84 [ 66.911733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.921086] Call Trace: [ 66.925000] dump_stack+0x185/0x1d0 [ 66.928636] ? crc32c_pcl_intel_update+0x3d0/0x500 [ 66.933565] kmsan_report+0x142/0x240 [ 66.937370] __msan_warning_32+0x6c/0xb0 [ 66.942143] crc32c_pcl_intel_update+0x3d0/0x500 [ 66.946907] ? crc32c_intel_cra_init+0x80/0x80 [ 66.951490] shash_async_update+0x290/0x360 [ 66.955815] ? shash_async_init+0x270/0x270 [ 66.961231] hash_sendpage+0x904/0xe10 [ 66.965142] ? hash_recvmsg+0xd50/0xd50 [ 66.969119] sock_sendpage+0x1de/0x2c0 [ 66.973021] pipe_to_sendpage+0x31b/0x430 [ 66.977177] ? sock_fasync+0x2b0/0x2b0 [ 66.981078] ? propagate_umount+0x3a30/0x3a30 [ 66.985575] __splice_from_pipe+0x49a/0xf30 [ 66.989896] ? generic_splice_sendpage+0x2a0/0x2a0 [ 66.994837] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 67.000208] generic_splice_sendpage+0x1c6/0x2a0 [ 67.004972] ? iter_file_splice_write+0x1710/0x1710 [ 67.009988] ? iter_file_splice_write+0x1710/0x1710 [ 67.015006] direct_splice_actor+0x19b/0x200 [ 67.019421] splice_direct_to_actor+0x764/0x1040 [ 67.024180] ? do_splice_direct+0x540/0x540 [ 67.028502] ? security_file_permission+0x28f/0x4b0 [ 67.033523] ? rw_verify_area+0x35e/0x580 [ 67.037676] do_splice_direct+0x335/0x540 [ 67.041858] do_sendfile+0x1067/0x1e40 [ 67.045777] SYSC_sendfile64+0x1b3/0x300 [ 67.049852] SyS_sendfile64+0x64/0x90 [ 67.053651] do_syscall_64+0x309/0x430 [ 67.057545] ? SYSC_sendfile+0x320/0x320 [ 67.061614] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.066973] RIP: 0033:0x455379 [ 67.070160] RSP: 002b:00007f3a18ecbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 67.077861] RAX: ffffffffffffffda RBX: 00007f3a18ecc6d4 RCX: 0000000000455379 [ 67.085125] RDX: 0000000020000040 RSI: 0000000000000015 RDI: 0000000000000014 [ 67.092387] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.099654] R10: 000000000000000d R11: 0000000000000246 R12: 00000000ffffffff [ 67.106924] R13: 00000000000004cf R14: 00000000006fa408 R15: 0000000000000000 [ 67.114191] [ 67.115806] Uninit was created at: [ 67.119354] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 67.124484] kmsan_alloc_page+0x82/0xe0 [ 67.128476] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 67.133230] alloc_pages_vma+0xcc8/0x1800 [ 67.137378] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 67.142390] shmem_getpage_gfp+0x35db/0x5770 [ 67.146797] shmem_fallocate+0xde2/0x1610 [ 67.150941] vfs_fallocate+0x9dc/0xde0 [ 67.154827] SYSC_fallocate+0x119/0x1d0 [ 67.158797] SyS_fallocate+0x64/0x90 [ 67.162514] do_syscall_64+0x309/0x430 [ 67.166428] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.171607] ================================================================== [ 67.178954] Disabling lock debugging due to kernel taint [ 67.184398] Kernel panic - not syncing: panic_on_warn set ... [ 67.184398] [ 67.191764] CPU: 0 PID: 5708 Comm: syz-executor0 Tainted: G B 4.16.0+ #84 [ 67.199907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.200081] raw_sendmsg: syz-executor5 forgot to set AF_INET. Fix it! [ 67.209248] Call Trace: [ 67.209272] dump_stack+0x185/0x1d0 [ 67.209289] panic+0x39d/0x940 [ 67.209326] ? crc32c_pcl_intel_update+0x3d0/0x500 [ 67.209339] kmsan_report+0x238/0x240 [ 67.209353] __msan_warning_32+0x6c/0xb0 [ 67.209367] crc32c_pcl_intel_update+0x3d0/0x500 [ 67.209385] ? crc32c_intel_cra_init+0x80/0x80 [ 67.209397] shash_async_update+0x290/0x360 [ 67.209411] ? shash_async_init+0x270/0x270 [ 67.209421] hash_sendpage+0x904/0xe10 [ 67.209451] ? hash_recvmsg+0xd50/0xd50 [ 67.235391] dccp_v4_rcv: dropped packet with invalid checksum [ 67.238112] sock_sendpage+0x1de/0x2c0 [ 67.238134] pipe_to_sendpage+0x31b/0x430 [ 67.238159] ? sock_fasync+0x2b0/0x2b0 [ 67.271873] dccp_v4_rcv: dropped packet with invalid checksum [ 67.273690] ? propagate_umount+0x3a30/0x3a30 [ 67.273703] __splice_from_pipe+0x49a/0xf30 [ 67.273728] ? generic_splice_sendpage+0x2a0/0x2a0 [ 67.301300] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 67.306669] generic_splice_sendpage+0x1c6/0x2a0 [ 67.311434] ? iter_file_splice_write+0x1710/0x1710 [ 67.316460] ? iter_file_splice_write+0x1710/0x1710 [ 67.321483] direct_splice_actor+0x19b/0x200 [ 67.325899] splice_direct_to_actor+0x764/0x1040 [ 67.330656] ? do_splice_direct+0x540/0x540 [ 67.334977] ? security_file_permission+0x28f/0x4b0 2018/04/20 22:15:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1c) io_setup(0x95, &(0x7f0000c6b000)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001ec0)}]) 2018/04/20 22:15:39 executing program 5: r0 = socket$inet(0x2, 0x3, 0x21) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)="febca2176e3ae1b6ed7a05a9729e9fef986c647d87c4e7049c588b661f2c93207b8da924730d14f673c3d44e4101689d2f0bb51b413c98a064b80811fdd8b299d80dea0a0f36ef531875baf7fdbea6ef02424e8ef52cc32f5034eb29eff72e68447a527d32d4da20d586eb7e38b3089a1f9fd4e61d6cdb0f2114d18dca9eb44d062d56eac0931f13b9c8626ea2f96597ad91a52a961c36aef38c38df62151608f00d2e18cba2749c2a019c606af934fa8de619b69534af6119a97ea2d8f0a469922d8f3d9a7aef574910e3c4bc83382dfefadbfec9797fd36e7c292ce43f95593c5b399170138d065438e635006bbfa3ebd21d773c4098cdf6b921ee6a4ead4b4f79a50981a8ea79d2300f14ddb041b068981f3f1e3ea0aea19c471d6c8cf5707645020fdbc8ded75c695d463ad36dee7a3752fa52664469bfbb1a7b8aa9d0f68feb625f65e04d2c99118ae394ceaddb1a81feda239827e5e2850de1bd76f21e38b90297e0d617870c01e7b6fe79f218385d3fc1368905b57246e1cfb4b35d03ddd5799d1366366010b7ce925c63053e6f9c2fdb728cdba5d8d56788635775b0915d3b9096ff837abe09516e7d5520001941dc478eddb9feaf5060b13a1c348a6cfa3ff5b0cf297702f0c18dc93b22a868d73df2e7eed79843faba2c1b8032e4375442ef6426960c97c0e7c62050953eabbb4b0a63b961b10aff008e7a7ae766d32d4d1e207833cc65181343b449b11c4789e9457cb60ab907718e70bfd3bccf481f5770fb8231be2e9b94765caee336ae8e41a72cc9e653dce11881a75968b4dc9c3e291f620f5104b6eaf4c44f60ff4658032b2308e29081a26321bef82aac98bc996c15044f1460e72f7f7f5c668b8b9c368a5cc7dab4df986707e3919a6da5e282b2ce4b807878479522d01c518d0f93f0bad9ac079a1918c9cb6a0ffddd4c59a63e1262e0f31b92cd65470a4678f2e0eb30bc5a2ed3aea9324065acbd657a6bbe0f1c68fd8e849ace986543b7532940e05c618bde4b8bd47e8b2b7e8829d5bec1fd8507019060a5695d268117e076dc7ed80c9bd58998cfa049dc3658854bdad417add7558cb3a6606b88af74744cece4e252d0d94d75e3bbeb3458b34349d6c684c06c0d53c9ea354af4f801bac9231e20e97a569f3b57c778b6f1081f92e71fb2babacf3b8bc21719ed67fd5487f9137b69b830060b25a45542729aaf79eb6285d40d81b4c190b741d200a89344b7fcb7abb5b3f0b1a7059b0c74cddcd18dac12533a9f361d3cdea2da518015a5f8dcd41913b4403393c220cca113e17872f3569a27d8a0aca3fb5d9918ea175f4a34cad73947c27929738bdb39287f31f577cc07d4e13bd4966031ba57c4f6c3ba2cf598211e70d5666a834cc2479428a3def4c398ebee035966daef30bcf7c6049a338a61adda66c72eccb49b31a83db26c15d88f159393e93e1d9ffc3772c7272162f466d605dc13589a88bc3ae06f8ce194b17c47dc3e3671842657001b1b86c8ae739704504e831751ca26dd380f0c1283477f86ed60221ee8c84b2fb4dadef1826b1c6bda3b8c519294d4cdd081d41734f39d84951e1e68589ff38ee1396331df3bdec688264f0177148fd0f1b29b28f73adc74e18b451d614af0ab7b6b1235d9db398d7b1836be86fc42065cb1e322fb372865b9f61e87876f2ca0593a7c9d165e7cb75a4310c5ba55c3c482d4f9b749ce264ea7aaa8a9f2e842c4b31c677fd394e288c0d33c9d43c354c56ad9456dfb41199a96b76b893b9f9e505628195db7a0ca330406cc25d1e9ec0e08516d43ac966b54c86c342c75d6fb14248929e3296f0763c43dc62aa3ca5d62b2dd86363ecbf2f55ba0abacbddd4010642150e9431f8fc8d3b0bcc29c03af80d6dadc844eb5752765f6b8e03dd2e20753148ee51e1e1c091fbd006cfa1f21d17b8eaef59e5ac1a91f809bf8d94108491abd65b66a05cceafa79da0a9db15237d7b8ffe7f14b483290735b99f56f154a9a14d0bc1172907caf3953bed353520f3d638ac4f093ab75193e3050abedf9968d56c55e8cb3682e70de9a73c9f90adc19459c017123e03178ea", 0x5c9}], 0x1, &(0x7f0000000280)}, 0x0) [ 67.339998] ? rw_verify_area+0x35e/0x580 [ 67.344148] do_splice_direct+0x335/0x540 [ 67.348298] do_sendfile+0x1067/0x1e40 [ 67.352210] SYSC_sendfile64+0x1b3/0x300 [ 67.356276] SyS_sendfile64+0x64/0x90 [ 67.360078] do_syscall_64+0x309/0x430 [ 67.363969] ? SYSC_sendfile+0x320/0x320 [ 67.368035] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.373221] RIP: 0033:0x455379 [ 67.376407] RSP: 002b:00007f3a18ecbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 67.384119] RAX: ffffffffffffffda RBX: 00007f3a18ecc6d4 RCX: 0000000000455379 [ 67.391387] RDX: 0000000020000040 RSI: 0000000000000015 RDI: 0000000000000014 [ 67.398787] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.406052] R10: 000000000000000d R11: 0000000000000246 R12: 00000000ffffffff [ 67.413320] R13: 00000000000004cf R14: 00000000006fa408 R15: 0000000000000000 [ 67.421037] Dumping ftrace buffer: [ 67.424559] (ftrace buffer empty) [ 67.428242] Kernel Offset: disabled [ 67.431841] Rebooting in 86400 seconds..