INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2018/04/17 06:47:37 fuzzer started 2018/04/17 06:47:37 dialing manager at 10.128.0.26:43021 2018/04/17 06:47:43 kcov=true, comps=false 2018/04/17 06:47:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000ad0000)=@abs={0x1}, 0x3) 2018/04/17 06:47:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002070106000000000000000000000000"], 0x14}, 0x1}, 0x0) 2018/04/17 06:47:46 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x9322}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x0, 0x8, [@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="8364d91ad302", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="3bb61d20dcd0", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}]}) 2018/04/17 06:47:46 executing program 2: r0 = socket$inet(0x2, 0x3, 0x21) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000700)}, 0x8000) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)="d011de1c2a0859155196f70c901ba66723a710e5cc58a72957eca3290e819e1e77287bbea63d7109eb4a33ab4575cc4867ceaa25e41d07f954e99148f754199477d259fb48400175822fe5e32af733a71e838ec24facb20497ba4a6355e74bf4cc012ed65f1fad7d6a0f90b769296a22380f33ddc0049d05752ed746b462fdfdc96ed4287f505eba547c375a2c306dd5aa3e5bd102b6990989a27d274c65ec7102cee7371e903d01", 0xa8}], 0x1, &(0x7f0000000280)=ANY=[]}, 0x0) 2018/04/17 06:47:46 executing program 4: 2018/04/17 06:47:46 executing program 3: 2018/04/17 06:47:46 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000ea7cfa)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c000e20008040000000000000000000000ffffac147f000000000000000000fc000000000000018100907800000000"], 0x0) 2018/04/17 06:47:46 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000070b000)={0x0, 0x7530}, 0x10) sendto$inet6(r0, &(0x7f00000002c0), 0xfffffffffffffedb, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) syzkaller login: [ 42.854742] ip (3762) used greatest stack depth: 54688 bytes left [ 43.402553] ip (3813) used greatest stack depth: 54672 bytes left [ 44.033302] ip (3878) used greatest stack depth: 54560 bytes left [ 44.126391] ip (3888) used greatest stack depth: 54200 bytes left [ 44.360355] ip (3907) used greatest stack depth: 53960 bytes left [ 44.629980] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.636463] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.671183] device bridge_slave_0 entered promiscuous mode [ 44.691679] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.698141] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.728431] device bridge_slave_0 entered promiscuous mode [ 44.788884] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.795434] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.828082] device bridge_slave_0 entered promiscuous mode [ 44.856167] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.862642] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.901154] device bridge_slave_0 entered promiscuous mode [ 44.922015] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.928509] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.948687] device bridge_slave_0 entered promiscuous mode [ 44.956397] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.962880] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.983155] device bridge_slave_0 entered promiscuous mode [ 44.997122] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.003588] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.022611] device bridge_slave_1 entered promiscuous mode [ 45.029572] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.036106] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.054507] device bridge_slave_1 entered promiscuous mode [ 45.066285] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.072728] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.096084] device bridge_slave_1 entered promiscuous mode [ 45.106439] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.112884] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.134219] device bridge_slave_1 entered promiscuous mode [ 45.153707] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.160150] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.174391] device bridge_slave_1 entered promiscuous mode [ 45.180580] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.187091] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.212973] device bridge_slave_0 entered promiscuous mode [ 45.227470] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.233923] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.245116] device bridge_slave_0 entered promiscuous mode [ 45.255079] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.261535] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.276893] device bridge_slave_1 entered promiscuous mode [ 45.286807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.296335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.305196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.314706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.327761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.376708] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.383221] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.426963] device bridge_slave_1 entered promiscuous mode [ 45.436756] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.443213] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.470770] device bridge_slave_1 entered promiscuous mode [ 45.488833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.498672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.508721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.526228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.538604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.558835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.647677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.672433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.681944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.894797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.922120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.092237] ip (4025) used greatest stack depth: 53656 bytes left [ 46.472294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.516507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.551651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.575265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.626917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.659194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.675677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.744514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.782982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.796805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.803951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.826960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.845601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.890472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.028977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.049183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.283103] ip (4119) used greatest stack depth: 53640 bytes left [ 47.705767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.725828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.759636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.788322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.825223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.877575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.933219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.958552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.977273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.999720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.031334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.047816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.056110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.082490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.141424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.155189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.175746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.217482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.224617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.240690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.261637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.269399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.276762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.284244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.296099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.311201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.344965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.375376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.402578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.412766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.420818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.428857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.441402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.451858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.461478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.471921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.480795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.488249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.508132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.534566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.563400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.592832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.607997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.618304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.627574] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.649613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.658807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.667462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.693977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.723594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.755765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.788607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.812757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.831463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.839574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.849771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.857591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.866384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.886527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.904418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.911925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.954139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.990619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.036758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.754176] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.760642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.767496] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.773941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.794185] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.800807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.827827] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.834284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.841170] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.847608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.921862] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.956197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.962683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.969548] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.976004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.994478] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.001837] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.008283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.015155] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.021592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.070937] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.187131] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.193636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.200523] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.207003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.261624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.271616] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.278123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.284954] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.291392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.305637] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.315431] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.321871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.328694] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.335138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.343337] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.360544] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.366980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.373821] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.380258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.440967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.809616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.823602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.839313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.854890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.862165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.869807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.877869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.159902] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.229075] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.318154] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.387580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.519258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.593156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.744326] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.867942] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.934569] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.940837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.951953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.017449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.023729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.037965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.104435] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.110724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.126173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.177206] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.183488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.191189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.346941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.353260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.368102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.450867] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.457169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.466897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.592408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.599098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.616283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.661849] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.668258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.679215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/17 06:48:12 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/04/17 06:48:12 executing program 1: request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000640)='nodevwlan0}$*-\x00', 0xfffffffffffffffc) 2018/04/17 06:48:13 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) 2018/04/17 06:48:13 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) tkill(r2, 0x15) 2018/04/17 06:48:13 executing program 6: 2018/04/17 06:48:13 executing program 1: 2018/04/17 06:48:13 executing program 5: 2018/04/17 06:48:13 executing program 7: [ 67.338587] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! [ 67.394537] ================================================================== [ 67.401943] BUG: KMSAN: uninit-value in dccp_invalid_packet+0x3b8/0xf50 [ 67.408692] CPU: 0 PID: 5775 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 67.415523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.424866] Call Trace: [ 67.427444] [ 67.429595] dump_stack+0x185/0x1d0 [ 67.433219] ? dccp_invalid_packet+0x3b8/0xf50 [ 67.437799] kmsan_report+0x142/0x240 [ 67.441600] __msan_warning_32+0x6c/0xb0 [ 67.445657] dccp_invalid_packet+0x3b8/0xf50 [ 67.450067] ? ip_local_deliver_finish+0x6ed/0xd40 [ 67.454995] ? ip_local_deliver_finish+0x6ed/0xd40 [ 67.459926] dccp_v4_rcv+0xf7/0x2630 [ 67.463642] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 67.469003] ? raw_local_deliver+0x1462/0x1470 [ 67.473591] ? ip_local_deliver_finish+0x4a5/0xd40 [ 67.478512] ? local_bh_enable+0x40/0x40 [ 67.482568] ? local_bh_enable+0x40/0x40 [ 67.486637] ip_local_deliver_finish+0x6ed/0xd40 [ 67.491395] ip_local_deliver+0x43c/0x4e0 [ 67.495545] ? ip_local_deliver+0x4e0/0x4e0 [ 67.499864] ? ip_call_ra_chain+0x7b0/0x7b0 [ 67.504186] ip_rcv_finish+0x1253/0x16d0 [ 67.508259] ip_rcv+0x119d/0x16f0 [ 67.511709] ? ip_rcv+0x16f0/0x16f0 [ 67.515345] __netif_receive_skb_core+0x47cf/0x4a80 [ 67.520357] ? kmsan_set_origin_inline+0x6b/0x120 [ 67.525197] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 67.530995] ? ip_local_deliver_finish+0xd40/0xd40 [ 67.535925] process_backlog+0x62d/0xe20 [ 67.539988] ? rps_trigger_softirq+0x2f0/0x2f0 [ 67.544566] net_rx_action+0x7c1/0x1a70 [ 67.548543] ? net_tx_action+0xab0/0xab0 [ 67.552601] __do_softirq+0x56d/0x93d [ 67.556409] do_softirq_own_stack+0x2a/0x40 [ 67.560714] [ 67.562953] __local_bh_enable_ip+0x114/0x140 [ 67.567444] local_bh_enable+0x36/0x40 [ 67.571327] ip_finish_output2+0x124e/0x1380 [ 67.575738] ip_finish_output+0xcb0/0xff0 [ 67.579889] ip_output+0x502/0x5c0 [ 67.583425] ? ip_mc_finish_output+0x3b0/0x3b0 [ 67.588005] ? ip_finish_output+0xff0/0xff0 [ 67.592326] ip_send_skb+0x5f3/0x820 [ 67.596038] ? __ip_local_out+0x5b0/0x5b0 [ 67.600193] ip_push_pending_frames+0x105/0x170 [ 67.604863] raw_sendmsg+0x2960/0x3ed0 [ 67.608757] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 67.614124] ? compat_raw_ioctl+0x100/0x100 [ 67.618423] inet_sendmsg+0x48d/0x740 [ 67.622214] ? security_socket_sendmsg+0x9e/0x210 [ 67.627047] ? inet_getname+0x500/0x500 [ 67.631004] ___sys_sendmsg+0xec0/0x1310 [ 67.635059] ? __fdget+0x4e/0x60 [ 67.638417] SYSC_sendmsg+0x2a3/0x3d0 [ 67.642231] SyS_sendmsg+0x54/0x80 [ 67.645752] do_syscall_64+0x309/0x430 [ 67.649624] ? ___sys_sendmsg+0x1310/0x1310 [ 67.653930] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.659100] RIP: 0033:0x455329 [ 67.662265] RSP: 002b:00007fdf269adc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.669959] RAX: ffffffffffffffda RBX: 00007fdf269ae6d4 RCX: 0000000000455329 [ 67.677208] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000013 [ 67.684455] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.691702] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.698948] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 67.706197] [ 67.707806] Uninit was stored to memory at: [ 67.712113] kmsan_internal_chain_origin+0x12b/0x210 [ 67.717194] kmsan_memcpy_origins+0x11d/0x170 [ 67.721680] __msan_memcpy+0x19f/0x1f0 [ 67.725544] skb_copy_bits+0x63a/0xdb0 [ 67.729409] __pskb_pull_tail+0x483/0x22e0 [ 67.733621] dccp_invalid_packet+0x352/0xf50 [ 67.738007] dccp_v4_rcv+0xf7/0x2630 [ 67.741712] ip_local_deliver_finish+0x6ed/0xd40 [ 67.746441] ip_local_deliver+0x43c/0x4e0 [ 67.750565] ip_rcv_finish+0x1253/0x16d0 [ 67.754599] ip_rcv+0x119d/0x16f0 [ 67.758034] __netif_receive_skb_core+0x47cf/0x4a80 [ 67.763038] process_backlog+0x62d/0xe20 [ 67.767087] net_rx_action+0x7c1/0x1a70 [ 67.771050] __do_softirq+0x56d/0x93d [ 67.774820] Uninit was created at: [ 67.778339] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 67.783332] kmsan_alloc_page+0x82/0xe0 [ 67.787281] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 67.792016] alloc_pages_current+0x6b5/0x970 [ 67.796419] skb_page_frag_refill+0x3ba/0x5e0 [ 67.800901] sk_page_frag_refill+0xa4/0x340 [ 67.805197] __ip_append_data+0x107e/0x3d10 [ 67.809493] ip_append_data+0x2fb/0x440 [ 67.813443] raw_sendmsg+0x287b/0x3ed0 [ 67.817305] inet_sendmsg+0x48d/0x740 [ 67.821083] ___sys_sendmsg+0xec0/0x1310 [ 67.825119] SYSC_sendmsg+0x2a3/0x3d0 [ 67.828898] SyS_sendmsg+0x54/0x80 [ 67.832411] do_syscall_64+0x309/0x430 [ 67.836274] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.841432] ================================================================== [ 67.848760] Disabling lock debugging due to kernel taint [ 67.854184] Kernel panic - not syncing: panic_on_warn set ... [ 67.854184] [ 67.861523] CPU: 0 PID: 5775 Comm: syz-executor2 Tainted: G B 4.16.0+ #84 [ 67.869634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.878961] Call Trace: [ 67.881519] [ 67.883647] dump_stack+0x185/0x1d0 [ 67.887250] panic+0x39d/0x940 [ 67.890430] ? dccp_invalid_packet+0x3b8/0xf50 [ 67.894994] kmsan_report+0x238/0x240 [ 67.898776] __msan_warning_32+0x6c/0xb0 [ 67.902814] dccp_invalid_packet+0x3b8/0xf50 [ 67.907202] ? ip_local_deliver_finish+0x6ed/0xd40 [ 67.912108] ? ip_local_deliver_finish+0x6ed/0xd40 [ 67.917020] dccp_v4_rcv+0xf7/0x2630 [ 67.920720] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 67.926063] ? raw_local_deliver+0x1462/0x1470 [ 67.930622] ? ip_local_deliver_finish+0x4a5/0xd40 [ 67.935532] ? local_bh_enable+0x40/0x40 [ 67.939567] ? local_bh_enable+0x40/0x40 [ 67.943603] ip_local_deliver_finish+0x6ed/0xd40 [ 67.948334] ip_local_deliver+0x43c/0x4e0 [ 67.952464] ? ip_local_deliver+0x4e0/0x4e0 [ 67.956760] ? ip_call_ra_chain+0x7b0/0x7b0 [ 67.961067] ip_rcv_finish+0x1253/0x16d0 [ 67.965106] ip_rcv+0x119d/0x16f0 [ 67.968533] ? ip_rcv+0x16f0/0x16f0 [ 67.972141] __netif_receive_skb_core+0x47cf/0x4a80 [ 67.977140] ? kmsan_set_origin_inline+0x6b/0x120 [ 67.981963] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 67.987738] ? ip_local_deliver_finish+0xd40/0xd40 [ 67.992645] process_backlog+0x62d/0xe20 [ 67.996694] ? rps_trigger_softirq+0x2f0/0x2f0 [ 68.001250] net_rx_action+0x7c1/0x1a70 [ 68.005209] ? net_tx_action+0xab0/0xab0 [ 68.009247] __do_softirq+0x56d/0x93d [ 68.013042] do_softirq_own_stack+0x2a/0x40 [ 68.017343] [ 68.019560] __local_bh_enable_ip+0x114/0x140 [ 68.024043] local_bh_enable+0x36/0x40 [ 68.027922] ip_finish_output2+0x124e/0x1380 [ 68.032310] ip_finish_output+0xcb0/0xff0 [ 68.036438] ip_output+0x502/0x5c0 [ 68.039955] ? ip_mc_finish_output+0x3b0/0x3b0 [ 68.044518] ? ip_finish_output+0xff0/0xff0 [ 68.048816] ip_send_skb+0x5f3/0x820 [ 68.052506] ? __ip_local_out+0x5b0/0x5b0 [ 68.056631] ip_push_pending_frames+0x105/0x170 [ 68.061280] raw_sendmsg+0x2960/0x3ed0 [ 68.065148] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 68.070496] ? compat_raw_ioctl+0x100/0x100 [ 68.074793] inet_sendmsg+0x48d/0x740 [ 68.078572] ? security_socket_sendmsg+0x9e/0x210 [ 68.083397] ? inet_getname+0x500/0x500 [ 68.087347] ___sys_sendmsg+0xec0/0x1310 [ 68.091389] ? __fdget+0x4e/0x60 [ 68.094738] SYSC_sendmsg+0x2a3/0x3d0 [ 68.098527] SyS_sendmsg+0x54/0x80 [ 68.102051] do_syscall_64+0x309/0x430 [ 68.105928] ? ___sys_sendmsg+0x1310/0x1310 [ 68.110240] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.115404] RIP: 0033:0x455329 [ 68.118577] RSP: 002b:00007fdf269adc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.126261] RAX: ffffffffffffffda RBX: 00007fdf269ae6d4 RCX: 0000000000455329 [ 68.133508] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000013 [ 68.140759] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.148024] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.155285] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 68.163019] Dumping ftrace buffer: [ 68.166540] (ftrace buffer empty) [ 68.170224] Kernel Offset: disabled [ 68.173823] Rebooting in 86400 seconds..