INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.4' (ECDSA) to the list of known hosts. 2018/04/16 14:34:23 fuzzer started 2018/04/16 14:34:24 dialing manager at 10.128.0.26:41213 2018/04/16 14:34:30 kcov=true, comps=false 2018/04/16 14:34:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x3fc) 2018/04/16 14:34:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f0000a9cff8)) accept4(r0, &(0x7f00000026c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000002740)=0x80, 0x0) 2018/04/16 14:34:33 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000001500), 0x1000, &(0x7f0000001580)) 2018/04/16 14:34:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/16 14:34:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x4) 2018/04/16 14:34:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) mprotect(&(0x7f00004dc000/0x3000)=nil, 0x3000, 0x1000002) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) accept4$packet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x14, 0x800) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x801, &(0x7f0000000380)="32ec885e305002ecf4d30fbf74bd7ef5f47b1ea6a542d38048f84af70158c90d31157434c3eb27c6") setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@loopback=0x7f000001, @loopback=0x7f000001, r3}, 0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) ftruncate(r1, 0x800) getsockname$netlink(r1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) getsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/04/16 14:34:33 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000100)='./file0\x00') 2018/04/16 14:34:33 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) syzkaller login: [ 45.141423] ip (3759) used greatest stack depth: 54688 bytes left [ 45.619600] ip (3802) used greatest stack depth: 54672 bytes left [ 46.301190] ip (3870) used greatest stack depth: 54560 bytes left [ 46.474367] ip (3884) used greatest stack depth: 54544 bytes left [ 46.509574] ip (3889) used greatest stack depth: 54200 bytes left [ 46.887777] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.894278] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.924663] device bridge_slave_0 entered promiscuous mode [ 47.024446] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.030970] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.057975] device bridge_slave_0 entered promiscuous mode [ 47.079467] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.086010] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.133141] device bridge_slave_0 entered promiscuous mode [ 47.180113] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.186608] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.210990] device bridge_slave_1 entered promiscuous mode [ 47.223276] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.229788] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.246950] device bridge_slave_0 entered promiscuous mode [ 47.260194] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.266707] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.290703] device bridge_slave_0 entered promiscuous mode [ 47.301558] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.308127] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.333391] device bridge_slave_0 entered promiscuous mode [ 47.366460] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.373025] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.382586] device bridge_slave_1 entered promiscuous mode [ 47.395118] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.401609] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.421391] device bridge_slave_1 entered promiscuous mode [ 47.440906] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.447414] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.470112] device bridge_slave_1 entered promiscuous mode [ 47.476951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.484259] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.490783] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.511401] device bridge_slave_0 entered promiscuous mode [ 47.531407] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.537883] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.565717] device bridge_slave_1 entered promiscuous mode [ 47.582901] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.589389] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.611141] device bridge_slave_0 entered promiscuous mode [ 47.622584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.632297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.642153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.649606] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.656106] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.692208] device bridge_slave_1 entered promiscuous mode [ 47.708125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.719903] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.726377] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.772158] device bridge_slave_1 entered promiscuous mode [ 47.778841] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.785286] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.804338] device bridge_slave_1 entered promiscuous mode [ 47.814598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.823189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.888909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.931202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.953521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.986199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.007505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.045434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.214843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.231955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.240406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.525363] ip (4024) used greatest stack depth: 53656 bytes left [ 48.609012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.777736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.826312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.906369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.926943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.977613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.096575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.107467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.159832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.184237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.203718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.329775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.372581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.435877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.457193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.608850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.749491] ip (4118) used greatest stack depth: 53640 bytes left [ 49.855686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.028423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.071666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.122124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.173702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.235730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.301663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.308951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.326459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.354412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.372361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.390503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.461081] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.468302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.485485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.527388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.534771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.545872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.576451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.588879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.599490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.610537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.631862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.660716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.668832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.678491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.709193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.749089] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.756433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.771764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.802594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.813286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.821814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.850851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.883219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.896715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.904501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.912461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.919569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.959832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.996952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.021256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.050957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.061573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.070501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.113809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.147570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.162485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.189779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.218231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.257635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.265135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.300831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.337841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.369438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.444384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.453114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.460382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.480744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.502805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.528398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.563706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.576759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.600826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.177989] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.184482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.191422] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.197908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.272475] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.279083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.310140] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.316624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.323465] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.329929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.339935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.414411] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.420914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.427784] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.434251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.494872] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.515143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.521624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.528469] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.534927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.548495] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.561288] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.567731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.574583] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.581064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.633283] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.860331] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.866836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.873693] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.880165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.908665] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.927423] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.933911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.940810] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.947292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.989077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.019159] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.025653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.032585] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.039136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.106082] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.305545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.323975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.352709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.364834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.372916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.380943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.388812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.648409] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.931634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.952004] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.355959] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.376477] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.459355] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.465662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.477680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.563542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.604936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.617115] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.751409] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.757680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.768696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.800824] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.814121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.837117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.163745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.170134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.179800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.222245] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.230426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.244728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.476892] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.484966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.496115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.528707] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.536525] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.546218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.579920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.613712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.637768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/16 14:35:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x4) 2018/04/16 14:35:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) mprotect(&(0x7f00004dc000/0x3000)=nil, 0x3000, 0x1000002) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) accept4$packet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x14, 0x800) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x801, &(0x7f0000000380)="32ec885e305002ecf4d30fbf74bd7ef5f47b1e") setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@loopback=0x7f000001, @loopback=0x7f000001, r3}, 0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) ftruncate(r1, 0x800) getsockname$netlink(r1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 70.638767] print_req_error: I/O error, dev loop0, sector 0 [ 70.644689] Buffer I/O error on dev loop0, logical block 0, lost async page write 2018/04/16 14:35:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x3fc) 2018/04/16 14:35:01 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/16 14:35:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="000000000800f25d5a16b0337c32ee2462407fef00000003000000000066de31bb2618567595dbf34047b64a34472bf419b238cd995c7ba5043870c208853b59ea69d08a5e9da38c29fe8b9cf86bd8936ced4a1f0bca9cc451f88370bf849b5de14d55c78dea8bfb679622a5d197c12eb0dc0d4f0013f81bfdc4ad12d0f90a23b02357c158521fd9904dec21cbd4a06c6538192000"], 0x2}, 0x1}, 0x0) 2018/04/16 14:35:01 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000001500), 0x1000, &(0x7f0000001580)) 2018/04/16 14:35:01 executing program 4: r0 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x7fffffffffe, 0x4) 2018/04/16 14:35:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) mprotect(&(0x7f00004dc000/0x3000)=nil, 0x3000, 0x1000002) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) accept4$packet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x14, 0x800) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x801, &(0x7f0000000380)="32ec885e305002ecf4d30fbf74bd7ef5f47b1e") setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@loopback=0x7f000001, @loopback=0x7f000001, r3}, 0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) ftruncate(r1, 0x800) getsockname$netlink(r1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/04/16 14:35:01 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@nl=@kern={0x10}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007fbdb72d23b2a4a280930a0600fec0a84314910000000400050014000500fec000001966cfcadcb1350f5a0000dc1338d544cd0cb190b4cdb5ac72a5a7397d1c958700009b84136ef75afb83de448d", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) 2018/04/16 14:35:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000fcfff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$unix(r0, &(0x7f00006da000)=@file={0x0, './file0\x00'}, 0xa) connect$inet(r0, &(0x7f0000484000)={0x2, 0x4e20}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 2018/04/16 14:35:02 executing program 4: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2, 0x8972, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) [ 71.039142] print_req_error: I/O error, dev loop0, sector 0 [ 71.045079] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 71.143361] ================================================================== [ 71.150788] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940 [ 71.156860] CPU: 1 PID: 5795 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 71.163693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.173038] Call Trace: [ 71.175631] dump_stack+0x185/0x1d0 [ 71.179269] ? vmac_setkey+0x337/0x940 [ 71.183165] kmsan_report+0x142/0x240 [ 71.186969] ? aes_set_key+0x260/0x260 [ 71.190862] __msan_warning_32+0x6c/0xb0 [ 71.194922] ? aes_set_key+0x260/0x260 [ 71.198814] vmac_setkey+0x337/0x940 [ 71.202546] ? vmac_final+0x3f80/0x3f80 [ 71.206515] shash_async_setkey+0x337/0x4c0 [ 71.210842] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 71.216207] ? trace_kmalloc+0xb6/0x2b0 [ 71.220175] ? shash_async_digest+0x1b0/0x1b0 [ 71.224662] crypto_ahash_setkey+0x31a/0x470 [ 71.229054] hash_setkey+0x8b/0xa0 [ 71.232580] alg_setsockopt+0x6c5/0x740 [ 71.236537] ? hash_release+0x50/0x50 [ 71.240318] ? alg_accept+0xd0/0xd0 [ 71.243928] SYSC_setsockopt+0x4b8/0x570 [ 71.247980] SyS_setsockopt+0x76/0xa0 [ 71.251763] do_syscall_64+0x309/0x430 [ 71.255631] ? SYSC_recv+0xe0/0xe0 [ 71.259155] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.264324] RIP: 0033:0x455319 [ 71.267493] RSP: 002b:00007f78b7e9dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.275184] RAX: ffffffffffffffda RBX: 00007f78b7e9e6d4 RCX: 0000000000455319 [ 71.282437] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 71.289689] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 71.296938] R10: 0000000020f3eff0 R11: 0000000000000246 R12: 00000000ffffffff [ 71.304187] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 71.311437] [ 71.313043] Local variable description: ----out.i@vmac_setkey [ 71.318898] Variable was created at: [ 71.322596] vmac_setkey+0x93/0x940 [ 71.326201] shash_async_setkey+0x337/0x4c0 [ 71.330497] ================================================================== [ 71.337832] Disabling lock debugging due to kernel taint [ 71.343255] Kernel panic - not syncing: panic_on_warn set ... [ 71.343255] [ 71.350603] CPU: 1 PID: 5795 Comm: syz-executor2 Tainted: G B 4.16.0+ #84 [ 71.358717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.368047] Call Trace: [ 71.370620] dump_stack+0x185/0x1d0 [ 71.374230] panic+0x39d/0x940 [ 71.377424] ? vmac_setkey+0x337/0x940 [ 71.381292] kmsan_report+0x238/0x240 [ 71.385077] ? aes_set_key+0x260/0x260 [ 71.388947] __msan_warning_32+0x6c/0xb0 [ 71.392985] ? aes_set_key+0x260/0x260 [ 71.396857] vmac_setkey+0x337/0x940 [ 71.400557] ? vmac_final+0x3f80/0x3f80 [ 71.404515] shash_async_setkey+0x337/0x4c0 [ 71.408907] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 71.414254] ? trace_kmalloc+0xb6/0x2b0 [ 71.418213] ? shash_async_digest+0x1b0/0x1b0 [ 71.422691] crypto_ahash_setkey+0x31a/0x470 [ 71.427086] hash_setkey+0x8b/0xa0 [ 71.430610] alg_setsockopt+0x6c5/0x740 [ 71.434565] ? hash_release+0x50/0x50 [ 71.438350] ? alg_accept+0xd0/0xd0 [ 71.441961] SYSC_setsockopt+0x4b8/0x570 [ 71.446014] SyS_setsockopt+0x76/0xa0 [ 71.449801] do_syscall_64+0x309/0x430 [ 71.453676] ? SYSC_recv+0xe0/0xe0 [ 71.457200] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.462369] RIP: 0033:0x455319 [ 71.465539] RSP: 002b:00007f78b7e9dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.473227] RAX: ffffffffffffffda RBX: 00007f78b7e9e6d4 RCX: 0000000000455319 [ 71.480478] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 71.487727] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 71.494976] R10: 0000000020f3eff0 R11: 0000000000000246 R12: 00000000ffffffff [ 71.502228] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 71.510024] Dumping ftrace buffer: [ 71.513539] (ftrace buffer empty) [ 71.517224] Kernel Offset: disabled [ 71.520829] Rebooting in 86400 seconds..